$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa File: f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa (raw, json) Hash identifier: 0I2lmOQZthcskvVCsn3kdPEFSSIMSOrJilybXhekEpA= Subject key identifier: 7D:B7:04:7B:2B:46:36:C2:B2:96:45:7D:ED:32:4A:AC:8C:7E:E0:57 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A6627480D9501AEEBA28E6D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa Signing time: Thu 03 Jul 2025 19:52:22 +0000 ROA not before: Thu 03 Jul 2025 19:52:22 +0000 ROA not after: Wed 01 Oct 2025 19:52:22 +0000 asID: 11404 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:27:48:0d:95:01:ae:eb:a2:8e:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 3 19:52:22 2025 GMT Not After : Oct 1 19:52:22 2025 GMT Subject: CN=6afabc3d-d0ce-416e-89c5-5a61ab258da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:78:12:98:b3:4c:8e:d5:7a:4f:cd:67:1d: 01:ee:5e:4c:92:b3:26:c7:3e:ea:d7:77:7e:01:a8: 0b:88:38:78:67:31:59:e9:5d:43:b8:09:89:05:a3: 06:ae:12:cd:b1:af:06:14:a3:cf:a1:bd:fd:2a:16: 49:b7:84:f4:bc:86:27:93:a7:b4:30:10:60:ad:23: b2:b7:36:0c:4e:b1:c2:a4:22:af:43:3c:a0:ef:14: 5e:4f:6e:33:a7:51:f9:8a:c1:82:e7:aa:d7:41:ec: 28:3a:fa:1e:2d:38:a0:f4:3d:0e:86:6a:2e:81:68: 0d:f8:2a:ea:2e:6d:5e:9a:3f:55:70:e7:5d:fd:0a: 86:cf:db:7c:6c:fb:4d:80:d9:dd:0c:f4:7c:43:8f: e0:d0:3f:b7:d6:c6:46:50:b8:7f:d5:d7:d7:06:b1: 27:f4:74:21:9b:46:bc:5f:95:92:04:c8:43:93:d4: 8b:2d:65:22:37:8e:70:0c:a5:16:7e:2b:73:15:39: 02:56:43:9a:f0:c4:44:df:81:03:02:8e:31:82:9b: e9:5b:7e:eb:33:e5:5d:f1:42:f0:5b:cf:ec:2c:88: 11:6b:e6:84:36:b1:a8:06:ae:d5:9a:32:5d:86:c3: 8a:bd:a5:77:77:61:6f:7f:45:17:7c:15:61:cf:da: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B7:04:7B:2B:46:36:C2:B2:96:45:7D:ED:32:4A:AC:8C:7E:E0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:20:50:30:c5:25:1f:c7:bf:db:9c:6a:77:66:b5:39:95:5e: 33:f9:8a:8d:9e:61:84:73:88:40:62:e9:0d:e0:d9:dd:78:78: 4a:ca:79:68:46:58:28:6a:ba:2b:b8:55:5e:ba:fa:32:d3:7c: 49:27:59:d4:6d:17:c7:12:4d:2d:0c:69:df:cd:88:96:5a:39: 36:51:4c:5b:4d:44:85:31:5e:ca:5e:27:e1:26:82:14:4d:84: 12:81:40:7d:92:24:68:e3:bf:72:7e:93:ce:6b:68:ac:ad:a1: 01:f6:1d:53:2e:15:fb:2a:80:2b:82:0e:e9:48:d9:d2:72:f6: 56:a5:9d:55:d4:d9:22:6d:8d:40:1e:bf:13:ec:63:f7:72:49: 75:32:9f:e5:5f:7e:cb:61:e2:88:b3:dd:35:e4:01:ec:f8:6c: 77:bb:df:72:27:d8:ba:8b:61:90:f1:e1:e0:e6:80:dc:eb:d4: 66:dc:17:bd:7d:3c:9e:28:13:be:73:0c:f3:b8:53:bf:17:d2: 3d:b9:78:bd:79:fd:c9:2d:6e:ad:03:64:2b:9e:c1:ab:03:14: b5:6a:9f:6f:10:87:7b:36:b9:23:f1:7e:cc:01:c3:02:dc:41: 69:0f:02:95:ba:f9:dd:fd:ec:5c:22:04:9f:c5:0a:e1:64:d0: ce:46:d2:c5 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEpmJ0gNlQGu66KObQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcwMzE5NTIyMloXDTI1MTAwMTE5NTIyMlowLzEtMCsGA1UEAxMk NmFmYWJjM2QtZDBjZS00MTZlLTg5YzUtNWE2MWFiMjU4ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLl4EpizTI7Vek/NZx0B7l5MkrMmxz7q13d+ AagLiDh4ZzFZ6V1DuAmJBaMGrhLNsa8GFKPPob39KhZJt4T0vIYnk6e0MBBgrSOy tzYMTrHCpCKvQzyg7xReT24zp1H5isGC56rXQewoOvoeLTig9D0OhmougWgN+Crq Lm1emj9VcOdd/QqGz9t8bPtNgNndDPR8Q4/g0D+31sZGULh/1dfXBrEn9HQhm0a8 X5WSBMhDk9SLLWUiN45wDKUWfitzFTkCVkOa8MRE34EDAo4xgpvpW37rM+Vd8ULw W8/sLIgRa+aENrGoBq7VmjJdhsOKvaV3d2Fvf0UXfBVhz9qHUwIDAQABo4IDczCC A28wHQYDVR0OBBYEFH23BHsrRjbCspZFfe0ySqyMfuBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjJkN2I0YTUtZTJkMC0z YjkzLTk1NTEtMGI3Njg4NjljNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC8gUDDFJR/Hv9uc andmtTmVXjP5io2eYYRziEBi6Q3g2d14eErKeWhGWChquiu4VV66+jLTfEknWdRt F8cSTS0Mad/NiJZaOTZRTFtNRIUxXspeJ+EmghRNhBKBQH2SJGjjv3J+k85raKyt oQH2HVMuFfsqgCuCDulI2dJy9lalnVXU2SJtjUAevxPsY/dySXUyn+Vffsth4oiz 3TXkAez4bHe733In2LqLYZDx4eDmgNzr1GbcF719PJ4oE75zDPO4U78X0j25eL15 /cktbq0DZCuewasDFLVqn28Qh3s2uSPxfswBwwLcQWkPApW6+d397FwiBJ/FCuFk 0M5G0sU= -----END CERTIFICATE-----Generated at Wed Jul 23 16:00:23 2025 by rpki-client