$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa File: 840cb531-cc21-3eb3-9286-cda6c5a55992.roa (raw, json) Hash identifier: 57To7DSvOBCWefAuzHjGdEhcnJrPaHQ3V8Ar2I6ewy4= Subject key identifier: 16:F9:DC:9C:8C:F8:EC:5B:F8:E0:6D:DC:9A:12:3C:4A:AF:C8:5D:D8 Certificate issuer: /CN=2bd92006-9133-44da-89c6-5e9014a854c9 Certificate serial: 010D0C9F4328584AFC1C0EBAF1793A075A451900 Authority key identifier: DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 27489 IP address blocks: 160.79.127.0/24 maxlen: 24 2602:f966::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0e:ba:f1:79:3a:07:5a:45:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd92006-9133-44da-89c6-5e9014a854c9 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3760e24b-9dc5-4afd-94cd-ca56bf3b6bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:7b:da:53:7d:0f:8a:e1:05:24:00:de:fa: 90:d6:26:a9:f8:fb:59:54:63:bb:81:9e:2c:a6:2e: f1:ce:09:93:0d:2b:28:79:98:25:18:94:bb:a6:fe: 15:c3:8c:6a:7a:15:07:2b:d7:fa:cf:28:a4:e2:83: 81:3f:05:bf:45:bb:e8:5a:cd:4f:c5:a5:25:da:31: 24:69:9b:4f:9b:13:16:aa:dd:5a:fe:70:a0:3d:b6: fd:d2:bd:cb:76:6b:d3:69:cc:95:0d:0b:ba:58:96: c8:d5:2e:65:bd:cf:57:d7:eb:86:70:08:5c:4d:f2: 61:3d:b2:7a:35:53:0d:ef:4f:98:62:37:82:45:1a: 18:08:74:05:bd:e3:2b:c8:7f:f2:14:a6:1b:8e:17: b0:02:1c:20:49:5a:2f:f3:bd:4c:01:da:30:16:ff: b9:5d:5e:2c:cc:f0:16:e1:54:6f:2b:b3:d9:64:50: 2e:d5:2f:5e:69:66:41:fa:28:ad:b4:50:5f:5a:0c: f5:b3:0b:c6:8b:47:1f:f2:44:78:fa:dc:bb:c7:0b: 59:e0:27:ff:b9:31:94:23:f7:79:4c:57:d5:25:ce: 21:ec:fd:12:94:46:fd:55:ed:44:45:79:bc:e6:b3: 97:3e:ea:4a:73:fe:06:ae:fc:b9:32:c7:af:73:4b: ee:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F9:DC:9C:8C:F8:EC:5B:F8:E0:6D:DC:9A:12:3C:4A:AF:C8:5D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl X509v3 Authority Key Identifier: keyid:DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer sbgp-ipAddrBlock: critical IPv4: 160.79.127.0/24 IPv6: 2602:f966::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f4:f9:37:86:44:eb:4b:99:e6:12:58:c8:45:ad:5c:5f:31: d9:1d:77:3b:1e:35:e6:30:31:a0:32:f5:3f:fd:d1:40:da:19: 81:38:c9:a3:02:ec:cb:f0:c6:e1:c1:96:28:61:68:87:53:d3: 26:82:8f:e6:a4:f5:a4:ef:dc:e8:af:17:c6:dd:0a:14:ba:67: 9d:e2:2b:cf:ea:7c:52:50:52:10:21:0e:f6:1f:17:d4:3d:a0: 9a:42:69:b3:f3:79:65:fd:ee:1d:1b:c0:b7:62:d9:79:bc:98: 31:5c:30:cf:4c:0e:13:93:e6:82:90:4b:e0:db:a8:81:d4:1a: 5f:f4:9b:19:a7:d3:ef:b1:86:87:63:91:53:c0:67:83:38:e1: 50:b5:c1:76:8f:00:c1:e0:4a:f5:cf:18:1a:30:2f:6d:15:29: 41:08:c5:4c:1e:b1:32:73:47:5e:3f:fe:ae:91:f6:60:23:ed: 8f:ca:7e:a8:c3:2b:0a:52:fb:9a:f2:2a:52:91:1a:8f:bf:70: c4:a8:4f:cd:18:68:18:a8:ff:ec:15:8b:af:21:27:ed:3b:6d: 4f:09:11:eb:94:ab:e4:ab:78:80:48:a7:c6:43:3e:b0:c2:6e: e7:c6:a7:e0:af:b6:9c:44:bd:29:a7:87:e8:1f:d8:74:ed:49: 63:ba:04:e6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr8HA668Xk6B1pFGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJkOTIwMDYtOTEzMy00NGRhLTg5YzYtNWU5MDE0YTg1 NGM5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk Mzc2MGUyNGItOWRjNS00YWZkLTk0Y2QtY2E1NmJmM2I2YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+N72lN9D4rhBSQA3vqQ1iap+PtZVGO7gZ4s pi7xzgmTDSsoeZglGJS7pv4Vw4xqehUHK9f6zyik4oOBPwW/RbvoWs1PxaUl2jEk aZtPmxMWqt1a/nCgPbb90r3LdmvTacyVDQu6WJbI1S5lvc9X1+uGcAhcTfJhPbJ6 NVMN70+YYjeCRRoYCHQFveMryH/yFKYbjhewAhwgSVov871MAdowFv+5XV4szPAW 4VRvK7PZZFAu1S9eaWZB+iittFBfWgz1swvGi0cf8kR4+ty7xwtZ4Cf/uTGUI/d5 TFfVJc4h7P0SlEb9Ve1ERXm85rOXPupKc/4Grvy5Msevc0vuAwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBb53JyM+Oxb+OBt3JoSPEqvyF3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYmQ5 MjAwNi05MTMzLTQ0ZGEtODljNi01ZTkwMTRhODU0YzkvODQwY2I1MzEtY2MyMS0z ZWIzLTkyODYtY2RhNmM1YTU1OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmJkOTIwMDYtOTEzMy00NGRhLTg5 YzYtNWU5MDE0YTg1NGM5LzJiZDkyMDA2LTkxMzMtNDRkYS04OWM2LTVlOTAxNGE4 NTRjOS5jcmwwHwYDVR0jBBgwFoAU3B+96AWOKQ75SFWG9x5peg7eewcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYmQ5MjAwNi05MTMzLTQ0ZGEtODljNi01ZTkw MTRhODU0YzkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAoE9/MA4E AgACMAgDBgQmAvlmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAs9Pk3hkTrS5nmEljIRa1cXzHZHXc7HjXm MDGgMvU//dFA2hmBOMmjAuzL8MbhwZYoYWiHU9Mmgo/mpPWk79zorxfG3QoUumed 4ivP6nxSUFIQIQ72HxfUPaCaQmmz83ll/e4dG8C3Ytl5vJgxXDDPTA4Tk+aCkEvg 26iB1Bpf9JsZp9PvsYaHY5FTwGeDOOFQtcF2jwDB4Er1zxgaMC9tFSlBCMVMHrEy c0deP/6ukfZgI+2Pyn6owysKUvua8ipSkRqPv3DEqE/NGGgYqP/sFYuvISftO21P CRHrlKvkq3iASKfGQz6wwm7nxqfgr7acRL0pp4foH9h07UljugTm -----END CERTIFICATE-----Generated at Wed Sep 17 20:38:30 2025 by rpki-client