$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa File: 3fc9e8b3-35b0-3322-94d8-c662032786d6.roa (raw, json) Hash identifier: hRJCn4zzG5LTtqy4i3OPt59v2WahZ5o/qtSjjNAtRZ8= Subject key identifier: FB:2B:D8:16:43:D3:63:55:E1:EF:B8:B4:0B:EC:96:49:BB:28:B1:2C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A9E961DCF6AB70245E7E6B080 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 19893 IP address blocks: 128.121.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1d:cf:6a:b7:02:45:e7:e6:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=837f0771-ce11-4152-899b-2742cb11e28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cd:26:88:c6:ea:d2:d0:25:82:e9:03:67:ac: 0a:bb:19:69:8c:42:87:23:0b:3a:05:ac:22:93:4f: 08:c4:b1:8b:c2:45:71:4d:10:9d:ab:55:dc:85:4c: 6f:43:45:72:e1:ad:57:ed:8a:fb:79:20:6a:5b:d9: 48:2b:17:d7:78:b0:24:a2:52:71:1e:58:69:28:b4: de:e0:7c:6d:c5:91:68:a2:3a:33:7e:57:03:2d:ba: a1:ef:ff:3d:86:29:43:23:9a:84:eb:58:53:4b:c0: d6:ac:54:ca:5f:14:96:b2:52:a5:82:bf:90:55:de: a7:02:4a:45:15:d8:21:e8:30:09:70:c5:c1:91:7e: 7a:16:bd:e4:c6:8d:c9:31:52:c5:34:13:8b:52:a5: 28:ee:e4:b1:d0:16:27:fc:1e:0c:92:42:f7:5b:96: 7c:d3:c2:0f:73:41:63:be:16:4e:f2:0e:13:72:8d: 0b:0f:17:ed:21:5d:11:ff:f6:bb:93:49:7d:5b:bc: 1e:98:24:dd:73:02:dd:ee:8e:1f:d1:3e:fd:b0:6d: 26:8f:65:5e:c4:85:1b:4c:d7:5d:b8:8e:d2:d3:90: 90:82:7c:da:f0:96:7e:fd:68:20:d3:ed:8f:3e:a9: 6d:96:67:2e:ad:57:2b:a5:fa:41:49:39:fa:c4:2d: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2B:D8:16:43:D3:63:55:E1:EF:B8:B4:0B:EC:96:49:BB:28:B1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7e:9d:e5:a2:3f:67:b2:f0:af:d9:25:62:cf:13:2a:36:40: f7:d5:f9:8a:17:e6:b0:e9:35:b9:8b:c2:1d:39:20:47:56:2a: e6:91:41:da:e4:f9:7c:1b:e1:43:7d:5c:41:1c:7e:88:a9:2b: 8e:4d:58:a4:29:8e:52:ac:90:fa:fb:1d:8f:d1:d7:32:59:2f: 9c:94:72:37:fa:2e:3d:5f:d7:66:58:17:d6:68:2e:ba:c9:45: 98:58:bc:f3:52:22:e9:21:1c:cc:dc:40:c5:e8:6a:92:8f:58: 7e:b8:86:29:c8:bf:b3:d6:b9:e4:ff:c5:53:d1:04:d2:3f:e4: de:7e:4e:19:ed:a7:85:b2:77:91:f0:a2:8a:11:a0:dc:59:2a: f3:6d:48:0f:40:68:fe:d6:c2:d5:e5:ed:43:43:91:a5:dc:dc: 22:ab:30:da:39:e0:25:46:8c:3c:7f:d8:8b:67:3d:3b:fc:e2: b6:e5:8c:6f:e1:10:a5:e9:e3:8b:49:0a:ed:66:e9:0a:d9:2a: c0:b2:ca:76:96:a8:1e:f9:39:d0:31:44:5d:3e:8d:e5:55:c4: 16:5e:0c:d9:c5:ba:47:36:16:c2:2e:e5:aa:d9:3f:0a:fa:77: d2:7b:4f:da:7e:4f:bb:7e:8c:1a:11:6c:dc:e3:a0:78:e4:40: 86:5b:e0:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelh3ParcCRefmsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODM3ZjA3NzEtY2UxMS00MTUyLTg5OWItMjc0MmNiMTFlMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM0miMbq0tAlgukDZ6wKuxlpjEKHIws6Bawi k08IxLGLwkVxTRCdq1XchUxvQ0Vy4a1X7Yr7eSBqW9lIKxfXeLAkolJxHlhpKLTe 4HxtxZFoojozflcDLbqh7/89hilDI5qE61hTS8DWrFTKXxSWslKlgr+QVd6nAkpF Fdgh6DAJcMXBkX56Fr3kxo3JMVLFNBOLUqUo7uSx0BYn/B4MkkL3W5Z808IPc0Fj vhZO8g4Tco0LDxftIV0R//a7k0l9W7wemCTdcwLd7o4f0T79sG0mj2VexIUbTNdd uI7S05CQgnza8JZ+/Wgg0+2PPqltlmcurVcrpfpBSTn6xC1isQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsr2BZD02NV4e+4tAvslkm7KLEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2ZjOWU4YjMtMzViMC0z MzIyLTk0ZDgtYzY2MjAzMjc4NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx+neWiP2ey8K/ZJWLPEyo2QPfV+YoX5rDpNbmLwh05IEdWKuaRQdrk +Xwb4UN9XEEcfoipK45NWKQpjlKskPr7HY/R1zJZL5yUcjf6Lj1f12ZYF9ZoLrrJ RZhYvPNSIukhHMzcQMXoapKPWH64hinIv7PWueT/xVPRBNI/5N5+Thntp4Wyd5Hw oooRoNxZKvNtSA9AaP7WwtXl7UNDkaXc3CKrMNo54CVGjDx/2ItnPTv84rbljG/h EKXp44tJCu1m6QrZKsCyynaWqB75OdAxRF0+jeVVxBZeDNnFukc2FsIu5arZPwr6 d9J7T9p+T7t+jBoRbNzjoHjkQIZb4Bc= -----END CERTIFICATE-----Generated at Thu Jul 31 02:00:43 2025 by rpki-client