$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa File: d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa (raw, json) Hash identifier: rMyMOVqbR/aLkg2vULegWJhRmdctiLi7h+OnEjGz6bM= Subject key identifier: 48:B5:B5:7A:44:FE:2F:B3:C7:2C:7F:F9:FF:FC:71:D6:A3:07:79:6E Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9900C8E23949706E3414DE0F Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 216.154.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c8:e2:39:49:70:6e:34:14:de:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=c26f28c9-c355-4bce-907c-3156583a564e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:06:a0:f0:4e:1c:81:b0:a4:10:f6:24:42: f1:83:53:eb:aa:5b:b3:47:11:1d:59:ac:c9:1e:50: 5e:cf:df:1a:05:32:f8:cc:0a:ac:1f:33:7d:73:05: 98:75:1f:3f:55:2e:88:66:69:ce:6c:9c:da:fa:4f: a7:b6:82:a4:65:fa:c0:a9:0c:88:23:2e:aa:fb:67: f4:e4:d0:c6:7b:87:ce:a0:48:b7:20:0b:29:ea:be: 81:52:c6:54:6d:a9:08:95:cc:00:88:79:ee:a4:b9: 59:69:1e:51:84:55:c6:9b:b0:be:a1:e7:c5:7c:4c: 1d:80:26:cb:12:0d:04:91:a8:ad:4c:7a:ad:5b:f0: 3c:10:df:0a:f7:d2:6e:e7:ad:10:0a:1b:39:62:7b: c4:db:90:2a:cc:11:68:ee:aa:c2:1b:c8:27:52:9e: d8:e5:d5:74:37:c4:cf:a9:1c:61:ee:ef:a8:06:59: bd:70:69:13:ed:a1:d0:ba:70:24:84:97:d4:08:4b: 54:e2:50:dd:da:b3:43:10:28:31:c8:6f:13:e3:4d: c2:fc:12:96:71:26:18:37:aa:95:86:a9:54:77:dc: 59:6d:af:04:e4:a2:b7:b8:8a:09:ea:70:65:80:29: 85:9e:0a:0c:27:f3:89:a8:cb:f6:f5:e8:ad:63:2e: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B5:B5:7A:44:FE:2F:B3:C7:2C:7F:F9:FF:FC:71:D6:A3:07:79:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 216.154.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:70:47:80:fa:38:2e:6a:6c:eb:2a:2b:c1:95:b4:c2:7f:a0: 8d:dc:96:fd:32:77:82:1f:92:ac:b2:65:9a:83:96:d4:3a:67: 84:22:76:da:95:9e:4d:b3:0e:7f:7f:94:ca:53:90:a2:a5:46: 81:c7:08:8b:63:b1:84:06:28:10:b7:34:f0:96:54:1b:bf:cf: 90:c0:b4:b8:36:4f:69:08:33:56:7b:45:fc:bc:53:c6:be:0a: 08:d8:f9:5c:12:b6:c1:cf:a8:0e:40:a7:38:2a:9f:28:4c:be: 21:70:5c:c9:a7:71:a3:8d:69:be:53:d4:8c:ac:c5:b5:88:68: b3:3b:06:e2:6e:dd:50:68:ad:41:59:06:86:5c:39:af:be:b6: b5:6e:de:1b:59:90:c6:48:52:a1:11:1d:c1:f1:95:18:b4:c5: 94:ad:39:49:e9:fd:eb:f4:e5:b6:3b:b2:d6:62:22:46:87:d6: 2a:44:8e:59:c8:84:4e:db:4a:45:d6:e2:3d:16:25:15:99:f7: 83:5c:04:14:3a:d2:26:30:f4:87:07:2c:5f:03:61:d4:cf:bf: d1:6e:7e:96:ca:4f:7b:af:1a:b5:bd:b1:8a:53:42:8d:59:90: 2c:c1:2b:69:db:22:82:bc:93:6b:03:ed:ff:1a:52:3a:bc:a3: b5:d1:08:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMjiOUlwbjQU3g8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YzI2ZjI4YzktYzM1NS00YmNlLTkwN2MtMzE1NjU4M2E1NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2wGoPBOHIGwpBD2JELxg1PrqluzRxEdWazJ HlBez98aBTL4zAqsHzN9cwWYdR8/VS6IZmnObJza+k+ntoKkZfrAqQyIIy6q+2f0 5NDGe4fOoEi3IAsp6r6BUsZUbakIlcwAiHnupLlZaR5RhFXGm7C+oefFfEwdgCbL Eg0EkaitTHqtW/A8EN8K99Ju560QChs5YnvE25AqzBFo7qrCG8gnUp7Y5dV0N8TP qRxh7u+oBlm9cGkT7aHQunAkhJfUCEtU4lDd2rNDECgxyG8T403C/BKWcSYYN6qV hqlUd9xZba8E5KK3uIoJ6nBlgCmFngoMJ/OJqMv29eitYy7jHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi1tXpE/i+zxyx/+f/8cdajB3luMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZDc2ZDJmNWYtMWNkYS0z NmVkLWIxOTYtN2Q0OGMyZTNiM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2JoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9wR4D6OC5qbOsqK8GVtMJ/oI3clv0yd4IfkqyyZZqDltQ6Z4QidtqV nk2zDn9/lMpTkKKlRoHHCItjsYQGKBC3NPCWVBu/z5DAtLg2T2kIM1Z7Rfy8U8a+ CgjY+VwStsHPqA5ApzgqnyhMviFwXMmncaONab5T1IysxbWIaLM7BuJu3VBorUFZ BoZcOa++trVu3htZkMZIUqERHcHxlRi0xZStOUnp/ev05bY7stZiIkaH1ipEjlnI hE7bSkXW4j0WJRWZ94NcBBQ60iYw9IcHLF8DYdTPv9FufpbKT3uvGrW9sYpTQo1Z kCzBK2nbIoK8k2sD7f8aUjq8o7XRCGw= -----END CERTIFICATE-----Generated at Mon Jul 28 22:14:30 2025 by rpki-client