$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa File: b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa (raw, json) Hash identifier: cnIZE0KVHJjlD1uWlNpBijwQGvXqIbh4MzKZvoM+Bxs= Subject key identifier: FD:B4:44:A9:B4:F2:93:55:40:37:E5:0D:FE:EA:79:70:CD:15:71:3A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A6628C1513808F6F3C313B740 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa Signing time: Thu 03 Jul 2025 19:55:20 +0000 ROA not before: Thu 03 Jul 2025 19:55:20 +0000 ROA not after: Wed 01 Oct 2025 19:55:20 +0000 asID: 20115 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:28:c1:51:38:08:f6:f3:c3:13:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 3 19:55:20 2025 GMT Not After : Oct 1 19:55:20 2025 GMT Subject: CN=67116d2c-3085-4498-b133-222f52c06ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:97:6c:08:7d:c8:df:46:5c:f1:98:86:c8: 00:22:9c:b5:02:f6:82:1b:5a:72:0b:1f:25:73:9e: 92:40:4e:2d:e1:65:1d:55:a9:cf:ea:8d:e8:eb:11: 6c:4f:a6:1a:f7:8a:74:5e:84:5d:ec:52:e0:c4:15: b4:81:34:c7:54:53:be:c9:aa:41:51:74:63:f8:7f: 66:19:8c:28:91:c7:de:83:32:84:cc:5e:6a:27:14: 86:b4:a4:66:f5:96:81:79:38:af:16:c3:c3:c3:3a: 1f:88:29:4e:6e:cc:95:7b:4a:c5:09:87:33:07:a0: 78:e8:91:70:70:be:3f:82:ae:90:0d:fd:f2:c0:8e: 06:ce:fc:e8:9e:8f:20:32:c8:ac:85:d5:16:88:8e: d8:9a:9d:c1:04:0e:82:2e:dd:91:8b:53:85:a8:91: 4e:23:ae:0b:ee:2d:ef:4e:30:21:77:87:c4:29:91: ce:0f:ac:49:51:d6:3e:44:7f:a4:12:3f:7f:0f:dd: a0:15:11:b2:b9:74:df:79:b4:d7:3a:e1:d3:36:59: 0f:f6:c1:2c:0d:86:7f:39:37:78:4b:a5:f0:b5:5f: 5b:ab:d5:35:cf:2e:bf:8f:2c:8c:56:41:de:4f:e8: d6:82:af:73:9e:80:74:be:69:c7:d3:07:08:97:7a: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:44:A9:B4:F2:93:55:40:37:E5:0D:FE:EA:79:70:CD:15:71:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7d:a1:e3:43:a7:6d:45:06:ff:bb:93:98:3c:61:0d:76:5c: 6c:9a:af:d6:4c:72:38:f1:99:b0:84:65:93:63:f7:fc:c3:6e: bf:64:62:8f:a6:10:05:b6:67:9f:69:47:4c:80:ad:f3:bf:e0: 56:ab:11:54:39:cc:40:91:12:73:39:4c:bb:3c:48:a2:26:c1: ab:7f:93:46:fb:02:f8:75:84:4e:3d:ba:47:3f:71:ae:6a:13: 49:3a:30:ae:67:30:77:a8:71:07:f9:98:ce:a8:e5:18:6c:92: 4e:e6:ee:2f:5d:79:e9:b9:9c:9c:51:d6:43:5f:da:6a:a9:c2: 95:ea:19:e5:5e:2a:03:73:cc:3f:c3:53:4d:cf:bd:ff:81:d6: 70:f4:f4:09:1e:63:63:30:54:2b:0b:aa:43:fa:d8:8c:a9:37: 66:97:ff:a9:ae:19:16:55:fc:db:a6:0f:af:70:5f:e3:68:a7: 36:ba:2e:73:1b:ab:5b:89:d0:25:25:ba:7e:8c:e4:a4:80:d8: 13:66:40:78:c3:44:b7:1c:34:0a:45:02:04:cc:0d:17:31:0f: 1e:a0:cb:de:99:c8:88:21:be:18:96:6b:1b:08:04:24:f1:9c: cd:e7:28:5e:5f:12:17:97:f2:7f:dd:28:00:69:38:a8:71:b1: e1:7d:ba:2e -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEpmKMFROAj288MTt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcwMzE5NTUyMFoXDTI1MTAwMTE5NTUyMFowLzEtMCsGA1UEAxMk NjcxMTZkMmMtMzA4NS00NDk4LWIxMzMtMjIyZjUyYzA2Y2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXCXbAh9yN9GXPGYhsgAIpy1AvaCG1pyCx8l c56SQE4t4WUdVanP6o3o6xFsT6Ya94p0XoRd7FLgxBW0gTTHVFO+yapBUXRj+H9m GYwokcfegzKEzF5qJxSGtKRm9ZaBeTivFsPDwzofiClObsyVe0rFCYczB6B46JFw cL4/gq6QDf3ywI4Gzvzono8gMsishdUWiI7Ymp3BBA6CLt2Ri1OFqJFOI64L7i3v TjAhd4fEKZHOD6xJUdY+RH+kEj9/D92gFRGyuXTfebTXOuHTNlkP9sEsDYZ/OTd4 S6XwtV9bq9U1zy6/jyyMVkHeT+jWgq9znoB0vmnH0wcIl3oGbwIDAQABo4IDczCC A28wHQYDVR0OBBYEFP20RKm08pNVQDflDf7qeXDNFXE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjVhOTQ2MjYtZTJmMi0z YjA0LThkNmItMDcyZWMzOTI3Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADJ9oeNDp21FBv+7 k5g8YQ12XGyar9ZMcjjxmbCEZZNj9/zDbr9kYo+mEAW2Z59pR0yArfO/4FarEVQ5 zECREnM5TLs8SKImwat/k0b7Avh1hE49ukc/ca5qE0k6MK5nMHeocQf5mM6o5Rhs kk7m7i9deem5nJxR1kNf2mqpwpXqGeVeKgNzzD/DU03Pvf+B1nD09AkeY2MwVCsL qkP62IypN2aX/6muGRZV/NumD69wX+Nopza6LnMbq1uJ0CUlun6M5KSA2BNmQHjD RLccNApFAgTMDRcxDx6gy96ZyIghvhiWaxsIBCTxnM3nKF5fEheX8n/dKABpOKhx seF9ui4= -----END CERTIFICATE-----Generated at Tue Jul 22 19:02:36 2025 by rpki-client