$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa File: 80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa (raw, json) Hash identifier: dqvvb6mwRlBTXBjwZ4io8f7ILiL867JQJBZsIgG/tnw= Subject key identifier: 0D:81:EE:9F:5C:A1:83:BD:02:C2:E5:E0:6E:9E:3D:67:1C:5B:71:B8 Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F4328584AB650EA6EB85C4326A44ACEA0 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 87 IP address blocks: 134.68.0.0/16 maxlen: 16 149.166.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:ea:6e:b8:5c:43:26:a4:4a:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=e79aa03d-1caf-4dc5-a1d3-a9a544a5a21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:6c:d0:82:97:83:49:bb:a8:69:8e:aa:84: aa:de:14:36:ee:8f:d6:fe:20:03:e5:32:0e:b0:92: b8:16:f0:f9:34:75:3e:bd:a0:66:fc:36:a3:fa:77: 52:7f:77:24:83:e0:73:bd:73:fa:ed:c2:8e:81:85: c6:63:f2:38:cb:94:dc:4a:09:89:04:fa:2d:8f:0a: b7:5d:9b:57:d3:6d:e0:91:fa:ed:59:02:48:1a:17: 62:23:6d:bc:f2:43:3b:73:c5:9b:a5:66:ae:88:7c: 67:8c:f8:8f:9d:45:e3:53:57:7b:7b:ba:2a:52:9c: 58:43:32:e7:58:07:49:bd:a3:10:1d:06:03:4e:74: 7e:cb:8d:2c:40:84:a1:08:78:a3:2b:e3:e2:41:bb: 7f:a2:ce:26:bd:1e:82:94:c0:37:f0:96:7a:e5:bf: 5c:26:54:3e:8b:b7:f7:11:7b:fb:14:f7:58:49:7f: 65:36:3f:99:0b:7f:af:ab:1c:c8:7a:53:8c:d2:8d: 01:9e:4e:ef:b9:9d:08:22:e3:67:1d:a0:39:d4:b9: 60:88:b6:75:c0:41:d9:b8:7b:b1:c5:f3:eb:f7:58: ec:a7:9c:64:7d:f0:dd:41:0e:03:1e:97:bd:10:33: 35:1a:d5:fc:1a:a6:d9:4d:de:8d:d2:a8:1f:a2:e7: 53:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:81:EE:9F:5C:A1:83:BD:02:C2:E5:E0:6E:9E:3D:67:1C:5B:71:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 134.68.0.0/16 149.166.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:90:83:95:e7:95:be:e6:a1:bd:9f:51:51:01:bd:c2:1b:0e: dd:ee:61:4d:97:56:5d:7b:59:84:44:8c:1c:d5:f9:13:5b:3c: b6:50:f4:3d:fd:27:3d:78:f5:79:c9:3b:c8:64:05:59:1c:36: 5c:6c:e7:54:96:7b:54:f1:a4:fc:fe:eb:0f:3c:aa:d1:66:1e: e7:5b:fb:4e:fa:39:c4:ec:db:66:44:59:d1:b7:e4:b2:9f:90: 03:f1:6f:52:e5:3d:eb:56:0b:a0:c5:f6:c8:42:b9:d0:c1:4e: ca:9a:4c:5b:29:6f:53:a4:f2:48:c2:d7:cf:87:c2:d6:56:86: bb:45:60:df:74:d8:4a:48:cc:30:79:00:6b:3a:9b:28:f0:64: 1a:58:5d:10:65:4e:6e:98:ba:c7:06:be:60:9a:bc:72:eb:3d: d2:fb:e2:67:38:ce:fa:56:ed:92:06:d4:89:c7:8c:36:3e:6c: af:70:eb:7a:55:13:fb:7c:a3:e2:26:cf:8b:20:34:6b:52:4a: b3:57:e7:8f:27:ef:4b:59:fe:3e:c6:16:61:57:1b:2a:27:5e: 33:26:a6:95:d3:15:67:59:07:29:fa:1d:1f:9f:74:dd:4f:bd: 02:fa:fe:5b:8c:0a:29:08:3c:cb:cd:02:58:49:2e:6b:89:9d: d4:36:f6:2a -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEq2UOpuuFxDJqRKzqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTc5YWEwM2QtMWNhZi00ZGM1LWExZDMtYTlhNTQ0YTVhMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTJs0IKXg0m7qGmOqoSq3hQ27o/W/iAD5TIO sJK4FvD5NHU+vaBm/Daj+ndSf3ckg+BzvXP67cKOgYXGY/I4y5TcSgmJBPotjwq3 XZtX023gkfrtWQJIGhdiI2288kM7c8WbpWauiHxnjPiPnUXjU1d7e7oqUpxYQzLn WAdJvaMQHQYDTnR+y40sQIShCHijK+PiQbt/os4mvR6ClMA38JZ65b9cJlQ+i7f3 EXv7FPdYSX9lNj+ZC3+vqxzIelOM0o0Bnk7vuZ0IIuNnHaA51LlgiLZ1wEHZuHux xfPr91jsp5xkffDdQQ4DHpe9EDM1GtX8GqbZTd6N0qgfoudTQwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFA2B7p9coYO9AsLl4G6ePWccW3G4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvODBhODdlYmMtZjBjNi0z MjIzLTgxNTYtNzNhOTY2YTVmYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAhkQDAwCV pjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCDkIOV55W+5qG9n1FRAb3CGw7d7mFNl1Zde1mERIwc1fkTWzy2 UPQ9/Sc9ePV5yTvIZAVZHDZcbOdUlntU8aT8/usPPKrRZh7nW/tO+jnE7NtmRFnR t+Syn5AD8W9S5T3rVgugxfbIQrnQwU7KmkxbKW9TpPJIwtfPh8LWVoa7RWDfdNhK SMwweQBrOpso8GQaWF0QZU5umLrHBr5gmrxy6z3S++JnOM76Vu2SBtSJx4w2Pmyv cOt6VRP7fKPiJs+LIDRrUkqzV+ePJ+9LWf4+xhZhVxsqJ14zJqaV0xVnWQcp+h0f n3TdT70C+v5bjAopCDzLzQJYSS5riZ3UNvYq -----END CERTIFICATE-----Generated at Fri Aug 1 17:54:40 2025 by rpki-client