$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa File: a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa (raw, json) Hash identifier: pxqD0JzAlR0xZT+4dIf1yYKbTkOic5aR+UK1uVD7oK8= Subject key identifier: 4B:E3:DD:31:3E:C2:1D:CB:49:02:97:20:14:5D:62:56:A5:4A:8C:F4 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A612B158BB00384AA16524000 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 13768 IP address blocks: 65.39.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:15:8b:b0:03:84:aa:16:52:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=bd2d38bc-bbdf-4804-aff1-fb816ad04eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:19:9b:ad:c3:83:6e:50:54:0d:a1:ce:9f: 2b:d3:3a:f1:b6:63:54:09:1e:96:c5:d1:79:e1:47: 05:c6:7b:52:80:df:84:22:59:66:00:e6:41:c2:3b: 65:da:0e:aa:95:0d:36:bc:d9:42:ac:ce:c7:b1:2c: e1:f2:b0:cf:c5:90:1f:f3:42:34:4e:28:fc:a7:01: ae:b9:b7:80:38:52:85:8e:e1:7a:a0:48:99:44:bb: 57:eb:8c:44:19:de:80:60:22:2f:a4:3a:df:e8:22: a6:d0:76:80:6e:59:77:27:e9:f1:8c:22:d2:5c:cf: 7f:5e:7f:8e:89:d7:39:02:c2:4e:30:7e:25:6c:51: 22:b5:c6:5a:3e:8c:51:c9:31:a7:2d:c2:c5:ba:61: 7a:b1:95:38:dc:07:1f:18:b9:34:7e:93:96:b8:a3: f7:f5:dd:cd:74:76:3b:72:67:1f:4e:5e:99:c0:4f: 73:4d:86:84:bd:ce:d9:a6:69:0d:dd:43:4f:57:a0: d7:eb:df:c5:f2:a3:58:c9:40:25:3d:38:e8:0d:7b: cd:b0:41:72:d8:c1:ef:44:1c:8d:b6:1d:df:d5:44: d3:7d:96:dc:d6:2e:d7:fa:a7:a6:8e:f9:77:51:85: 8f:c4:fe:cc:e3:72:6f:ee:85:16:a1:56:ad:cf:5d: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E3:DD:31:3E:C2:1D:CB:49:02:97:20:14:5D:62:56:A5:4A:8C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a6174dd9-c89a-367f-a2c5-96f9344e51ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cb:1b:82:fa:65:8e:a5:1e:30:38:01:54:75:e0:01:76:12: 8b:2a:c3:45:3e:fd:69:b7:66:2c:a4:18:49:55:e9:37:3c:51: 5e:74:d4:d6:67:65:18:ca:cb:18:8e:58:fe:07:86:03:df:31: 3b:18:b7:fa:94:cc:20:9a:48:f5:3d:cd:d2:a0:f2:03:a2:b3: 6b:95:a6:eb:1c:03:da:81:06:ed:e7:89:45:04:ba:95:65:6e: db:ab:e6:f5:e9:33:90:a0:3e:d9:e1:24:1b:d4:2c:26:a8:8b: 77:1c:b3:15:86:96:b3:0e:f6:85:c6:1e:82:2d:5b:9b:8d:c9: 3c:df:e9:4f:41:f5:a0:4a:38:61:52:56:c4:ca:c5:40:d4:f9: ef:90:04:ea:56:96:f9:3e:20:c4:81:ab:53:1f:c6:f5:4b:b2: 17:86:b3:e7:7f:22:c6:6b:24:12:3b:e6:38:d9:fb:48:3d:5d: 93:24:d0:16:49:0a:6b:33:31:b2:fe:38:46:16:51:d2:b5:dc: 73:57:df:55:e7:a0:d1:53:24:24:89:5c:2f:f8:c5:be:84:2d: a9:78:86:f2:19:63:b5:a4:93:d1:af:88:f6:d5:56:57:8c:7e: 65:50:a9:4a:c9:c3:14:86:80:4c:e9:02:b7:59:41:e2:fc:d7: 21:79:e5:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxWLsAOEqhZSQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YmQyZDM4YmMtYmJkZi00ODA0LWFmZjEtZmI4MTZhZDA0ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYoZm63Dg25QVA2hzp8r0zrxtmNUCR6WxdF5 4UcFxntSgN+EIllmAOZBwjtl2g6qlQ02vNlCrM7HsSzh8rDPxZAf80I0Tij8pwGu ubeAOFKFjuF6oEiZRLtX64xEGd6AYCIvpDrf6CKm0HaAbll3J+nxjCLSXM9/Xn+O idc5AsJOMH4lbFEitcZaPoxRyTGnLcLFumF6sZU43AcfGLk0fpOWuKP39d3NdHY7 cmcfTl6ZwE9zTYaEvc7ZpmkN3UNPV6DX69/F8qNYyUAlPTjoDXvNsEFy2MHvRByN th3f1UTTfZbc1i7X+qemjvl3UYWPxP7M43Jv7oUWoVatz13RvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvj3TE+wh3LSQKXIBRdYlalSoz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYTYxNzRkZDktYzg5YS0z NjdmLWEyYzUtOTZmOTM0NGU1MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQSeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTLG4L6ZY6lHjA4AVR14AF2Eosqw0U+/Wm3ZiykGElV6Tc8UV501NZn ZRjKyxiOWP4HhgPfMTsYt/qUzCCaSPU9zdKg8gOis2uVpuscA9qBBu3niUUEupVl btur5vXpM5CgPtnhJBvULCaoi3ccsxWGlrMO9oXGHoItW5uNyTzf6U9B9aBKOGFS VsTKxUDU+e+QBOpWlvk+IMSBq1MfxvVLsheGs+d/IsZrJBI75jjZ+0g9XZMk0BZJ CmszMbL+OEYWUdK13HNX31XnoNFTJCSJXC/4xb6ELal4hvIZY7Wkk9GviPbVVleM fmVQqUrJwxSGgEzpArdZQeL81yF55aU= -----END CERTIFICATE-----Generated at Wed Jul 23 12:44:30 2025 by rpki-client