$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aad68526-ae17-3047-81db-681a7f988c64.roa File: aad68526-ae17-3047-81db-681a7f988c64.roa (raw, json) Hash identifier: cCd7topDoV2t2q0ob1exUZCuRNorMWZ1N1X/4Be/od4= Subject key identifier: DD:F4:3D:02:7A:BD:58:FB:AE:80:10:43:77:0C:B0:3A:08:DE:4D:4A Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584A89A61BB42E67E77BF2DED020 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aad68526-ae17-3047-81db-681a7f988c64.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 55293 IP address blocks: 216.119.128.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1b:b4:2e:67:e7:7b:f2:de:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=2aecb7a9-7406-4203-9c40-04cde2d3e789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:72:21:7e:98:f5:8a:ed:92:f7:15:eb:50: af:48:5d:e1:a7:d7:fb:71:78:3d:2a:a9:fc:f6:69: e5:86:ce:a6:e7:98:8a:11:85:ff:a9:53:23:a1:65: a0:a0:78:c9:fc:72:35:a7:21:56:e0:d3:2d:a6:80: 32:5c:f8:41:6c:e0:fb:eb:17:63:cc:90:6d:c1:4f: c8:ef:9b:6c:5e:ce:a8:9c:ab:6f:76:15:dc:15:2d: 8f:1a:5e:aa:79:24:79:f0:bc:29:b3:2a:74:f3:5e: cf:6d:0a:f2:03:21:b8:ba:a1:af:b7:fe:b1:a6:0a: 65:a1:bf:7f:9a:16:2f:6c:c5:4e:61:0c:7a:f1:75: 2d:6f:bb:f4:a9:8c:2a:31:9a:4f:92:7e:fb:3f:4d: b3:99:b8:c6:af:64:24:2b:de:00:19:d3:06:cc:10: 6d:65:f9:93:5c:01:ed:70:a2:58:a4:4f:ae:e6:4a: 2c:7e:17:fe:51:cc:4b:35:27:e0:26:1b:01:90:de: d4:5a:9d:af:15:89:a4:9b:f7:af:77:94:88:ee:1a: e1:c4:ca:0c:09:c2:52:d7:8a:d9:7b:d7:46:6f:25: b0:d9:b9:3f:4b:86:11:66:b3:19:a7:e0:38:d9:68: 7d:5c:5d:f6:f0:e4:ae:2a:c4:1a:8e:d3:c4:2c:00: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F4:3D:02:7A:BD:58:FB:AE:80:10:43:77:0C:B0:3A:08:DE:4D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aad68526-ae17-3047-81db-681a7f988c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 216.119.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:96:c8:56:e8:0c:c9:7f:36:4d:c9:39:b6:c0:ef:ea:53:6d: cb:10:22:1a:c1:88:ff:cf:60:51:15:d5:2f:b1:4e:1e:a6:4a: 1f:de:84:af:24:b8:db:73:24:d2:d1:ce:7f:81:fb:e1:59:b4: 64:d1:fe:3f:df:ea:b9:9b:e7:d7:64:25:39:21:f7:eb:09:14: fa:6d:10:21:a3:da:3d:26:9c:0d:59:2c:b4:d3:69:ff:e2:90: b1:d4:be:0a:9a:f4:7b:db:81:52:e1:2d:cd:1a:f8:9a:ef:44: d7:7f:66:47:23:82:80:16:e2:8e:d6:79:f3:fb:49:5a:49:4e: 5c:1f:c2:ae:b8:bc:55:7a:60:6c:cc:42:f6:a4:cf:06:e6:26: dd:43:85:93:fe:75:ea:94:95:bf:c3:3b:e6:95:9f:98:71:11: d3:bd:a9:32:2e:51:bf:eb:39:65:28:df:c3:59:a5:fa:79:e5: 35:8b:9e:1a:df:78:dd:e8:18:64:9d:03:39:68:c3:8f:32:d7: c0:af:35:e2:32:71:d0:2a:e6:d4:bc:d0:d4:60:af:0c:fb:03: ca:a8:20:30:15:43:b1:13:7d:69:39:05:f1:df:84:0e:9a:5b: 67:53:c8:04:72:fd:bc:10:3a:66:da:ca:09:da:60:d3:af:67: 55:62:e9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphu0Lmfne/Le0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk MmFlY2I3YTktNzQwNi00MjAzLTljNDAtMDRjZGUyZDNlNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpJyIX6Y9YrtkvcV61CvSF3hp9f7cXg9Kqn8 9mnlhs6m55iKEYX/qVMjoWWgoHjJ/HI1pyFW4NMtpoAyXPhBbOD76xdjzJBtwU/I 75tsXs6onKtvdhXcFS2PGl6qeSR58Lwpsyp0817PbQryAyG4uqGvt/6xpgplob9/ mhYvbMVOYQx68XUtb7v0qYwqMZpPkn77P02zmbjGr2QkK94AGdMGzBBtZfmTXAHt cKJYpE+u5kosfhf+UcxLNSfgJhsBkN7UWp2vFYmkm/evd5SI7hrhxMoMCcJS14rZ e9dGbyWw2bk/S4YRZrMZp+A42Wh9XF328OSuKsQajtPELABSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN30PQJ6vVj7roAQQ3cMsDoI3k1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWFkNjg1MjYtYWUxNy0z MDQ3LTgxZGItNjgxYTdmOTg4YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGWyFboDMl/Nk3JObbA7+pTbcsQIhrBiP/PYFEV1S+xTh6mSh/ehK8k uNtzJNLRzn+B++FZtGTR/j/f6rmb59dkJTkh9+sJFPptECGj2j0mnA1ZLLTTaf/i kLHUvgqa9HvbgVLhLc0a+JrvRNd/ZkcjgoAW4o7WefP7SVpJTlwfwq64vFV6YGzM QvakzwbmJt1DhZP+deqUlb/DO+aVn5hxEdO9qTIuUb/rOWUo38NZpfp55TWLnhrf eN3oGGSdAzlow48y18CvNeIycdAq5tS80NRgrwz7A8qoIDAVQ7ETfWk5BfHfhA6a W2dTyARy/bwQOmbaygnaYNOvZ1Vi6Y4= -----END CERTIFICATE-----Generated at Fri Jul 25 12:57:54 2025 by rpki-client