$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa File: 0d00392d-06ad-38f3-b449-d981399ddfac.roa (raw, json) Hash identifier: XLIWAl7/24k4BicWuDm7BIWieCmXaMAMepIFBN3wkjA= Subject key identifier: 3C:20:4B:7C:00:37:D8:5B:CC:34:78:E8:A2:A4:64:67:68:AE:4D:3E Certificate issuer: /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Certificate serial: 010D0C9F4328584AF52157D892129D312703FC70 Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 557 IP address blocks: 64.45.64.0/18 maxlen: 24 65.18.0.0/18 maxlen: 24 65.18.64.0/19 maxlen: 24 65.18.96.0/20 maxlen: 24 141.114.0.0/16 maxlen: 24 204.197.0.0/17 maxlen: 24 207.166.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:57:d8:92:12:9d:31:27:03:fc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=0cebcd47-b731-4c98-9d36-7f0fbd27b705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:fc:d9:20:62:f4:93:a9:4c:63:3d:9f:1a: 89:b1:0c:81:86:b6:a4:eb:aa:48:52:89:18:0a:e2: 6a:ba:30:b6:0b:fb:09:d5:78:85:e1:6e:20:d6:3d: 37:ef:c2:4c:7f:3d:ab:e8:a1:cf:63:31:ce:ec:70: 9b:78:33:1d:04:4d:28:8a:5a:16:59:ea:95:2b:0b: a1:d3:9e:69:89:eb:e5:db:81:41:f5:ba:a1:f0:90: ff:14:70:b6:a3:44:2c:82:65:14:d4:99:79:f8:44: ba:62:df:c2:f9:5f:a4:0c:da:65:ab:15:db:58:0b: 79:4a:09:72:cc:f6:5f:41:0d:a7:08:ba:e5:fc:c7: 42:90:73:6e:f9:02:42:58:90:5e:5d:1c:e2:81:e5: 86:e0:17:be:1a:3e:65:fb:e5:d4:77:f1:35:0a:98: 29:98:9f:c3:c9:3a:19:de:fb:c2:97:6d:9c:5f:6b: f8:5d:9d:82:f9:31:cf:18:58:d1:3c:27:76:b3:2a: 5d:c6:93:12:74:e9:7c:ee:83:96:46:b2:0d:46:f5: 5a:35:b0:8a:a5:ad:94:33:88:16:15:eb:0e:31:a8: 74:3e:06:3f:5d:c2:06:a6:6f:30:e1:5f:5c:24:5b: f9:56:ca:12:df:9a:85:06:18:18:96:cb:b9:5e:10: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:4B:7C:00:37:D8:5B:CC:34:78:E8:A2:A4:64:67:68:AE:4D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl X509v3 Authority Key Identifier: keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer sbgp-ipAddrBlock: critical IPv4: 64.45.64.0/18 65.18.0.0-65.18.111.255 141.114.0.0/16 204.197.0.0/17 207.166.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ba:0b:2b:15:f5:62:d1:71:2d:33:22:af:c0:55:b7:74:bf: 3e:79:76:8b:19:0d:9e:01:04:1e:92:18:b8:bd:2d:9b:3a:e4: ce:56:16:93:dd:d8:59:15:7e:d0:bf:d4:0a:99:c2:23:96:4a: c4:36:32:7d:55:d3:24:fe:57:6c:1d:a2:3e:2c:04:c3:41:d2: d3:8e:ef:0e:ac:6e:75:39:16:58:88:f6:29:7e:2d:b5:71:91: c6:4a:ed:45:56:f4:e7:a5:8b:76:e2:37:6b:76:8a:d8:36:96: a9:17:3b:26:a8:6e:d6:ec:86:78:32:31:6f:24:02:14:4f:df: 07:15:1d:c0:8a:2d:99:63:75:fe:cb:e1:d6:85:a4:fa:fb:e6: f3:03:3e:67:04:f5:52:40:42:8d:23:20:1a:b2:3e:4f:35:77: fb:97:dc:fd:40:a0:29:c0:91:ad:53:f3:34:3e:51:5e:e9:2f: 77:6e:ef:49:42:e6:57:ea:be:29:a5:53:1c:5d:5d:c0:e8:fc: 1c:5a:eb:91:69:b4:9c:81:0c:05:e1:65:48:39:df:79:b9:99: bc:24:44:9a:d6:c1:90:2b:33:f7:d0:05:a0:45:2e:1a:89:d3: 34:e5:ba:ef:0c:8a:f1:b1:0a:4e:5b:a9:53:e5:ba:60:3d:c7: b2:de:49:13 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEr1IVfYkhKdMScD/HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1 MzBkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGNlYmNkNDctYjczMS00Yzk4LTlkMzYtN2YwZmJkMjdiNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig/82SBi9JOpTGM9nxqJsQyBhrak66pIUokY CuJqujC2C/sJ1XiF4W4g1j0378JMfz2r6KHPYzHO7HCbeDMdBE0oiloWWeqVKwuh 055pievl24FB9bqh8JD/FHC2o0QsgmUU1Jl5+ES6Yt/C+V+kDNplqxXbWAt5Sgly zPZfQQ2nCLrl/MdCkHNu+QJCWJBeXRzigeWG4Be+Gj5l++XUd/E1CpgpmJ/DyToZ 3vvCl22cX2v4XZ2C+THPGFjRPCd2sypdxpMSdOl87oOWRrINRvVaNbCKpa2UM4gW FesOMah0PgY/XcIGpm8w4V9cJFv5VsoS35qFBhgYlsu5XhDqmwIDAQABo4IDczCC A28wHQYDVR0OBBYEFDwgS3wAN9hbzDR46KKkZGdork0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdj ZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvMGQwMDM5MmQtMDZhZC0z OGYzLWI0NDktZDk4MTM5OWRkZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjE3Y2UyMmItNjFhMC00YWU5LTlj YzAtZjUwZjNiYjc1MzBkL2IxN2NlMjJiLTYxYTAtNGFlOS05Y2MwLWY1MGYzYmI3 NTMwZC5jcmwwHwYDVR0jBBgwFoAUt2tfGIphWyOCw/KpdRRVpSGxh+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBm M2JiNzUzMGQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGQC1AMAsD AwFBEgMEBEESYAMDAI1yAwQHzMUAAwQFz6bgMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABu6CysV9WLRcS0z Iq/AVbd0vz55dosZDZ4BBB6SGLi9LZs65M5WFpPd2FkVftC/1AqZwiOWSsQ2Mn1V 0yT+V2wdoj4sBMNB0tOO7w6sbnU5FliI9il+LbVxkcZK7UVW9Oeli3biN2t2itg2 lqkXOyaobtbshngyMW8kAhRP3wcVHcCKLZljdf7L4daFpPr75vMDPmcE9VJAQo0j IBqyPk81d/uX3P1AoCnAka1T8zQ+UV7pL3du70lC5lfqvimlUxxdXcDo/Bxa65Fp tJyBDAXhZUg533m5mbwkRJrWwZArM/fQBaBFLhqJ0zTluu8MivGxCk5bqVPlumA9 x7LeSRM= -----END CERTIFICATE-----Generated at Wed Sep 17 12:22:22 2025 by rpki-client