$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa File: a1511da0-2047-36ce-973f-c8381433105e.roa (raw, json) Hash identifier: ToJpO171JBnlfC+nMMV+r5DfctZ3NE+4agQ/5JOt1FU= Subject key identifier: 28:12:0A:AC:F3:6C:07:9F:6F:82:25:37:F6:64:C0:EB:3F:B4:DC:EF Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584A6DBB3B152F50EB7057A9BA40 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 6128 IP address blocks: 24.38.0.0/17 maxlen: 24 24.157.32.0/19 maxlen: 24 24.246.96.0/19 maxlen: 24 63.247.160.0/19 maxlen: 24 65.51.0.0/16 maxlen: 24 69.27.224.0/19 maxlen: 24 69.74.0.0/16 maxlen: 24 108.179.0.0/18 maxlen: 24 173.251.0.0/17 maxlen: 24 198.46.96.0/19 maxlen: 24 216.255.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3b:15:2f:50:eb:70:57:a9:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=d9378b24-48c3-4ab7-9031-6b489a52f32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cd:98:a8:3d:e5:5e:06:61:3e:b9:82:74:b1: 2a:7a:74:b5:64:19:2f:3c:71:0d:8d:67:3d:fa:f3: 9f:05:ea:bf:73:75:3a:71:5e:13:a5:c5:8b:c8:11: dc:83:5c:91:f4:e8:59:52:90:12:81:f2:b7:1c:54: 86:0f:b2:41:d2:5d:7f:68:6a:58:7c:1d:9c:f0:18: ac:29:b4:88:96:01:77:88:f9:cd:ba:f3:05:77:e4: c3:77:8c:25:15:4a:1b:df:8b:35:41:90:9e:ee:dc: 53:bc:14:38:8f:7e:22:75:80:4f:c5:8b:d0:d7:32: 2c:92:b1:2e:08:aa:02:3f:01:b7:49:69:c8:69:97: 62:da:b4:b4:3a:92:30:1c:60:09:7b:b0:2c:8b:a7: fd:45:08:c1:ba:dc:b6:84:60:67:be:23:e8:dc:70: f9:ca:41:00:ab:9f:9d:04:b8:e2:82:a1:5c:e9:0a: 95:02:17:ae:94:81:69:3d:8e:c5:9e:25:a7:da:f1: c1:2b:b1:fe:0a:5b:da:a0:44:0a:17:8a:41:69:60: 39:dc:88:83:bd:42:4e:d5:b2:a5:60:73:9d:be:0c: 51:de:51:34:12:cb:c1:76:8d:cf:73:9a:08:51:ad: 3e:b8:0d:4e:cf:2e:a8:86:78:0b:25:a1:42:8a:5d: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:12:0A:AC:F3:6C:07:9F:6F:82:25:37:F6:64:C0:EB:3F:B4:DC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.0.0/17 24.157.32.0/19 24.246.96.0/19 63.247.160.0/19 65.51.0.0/16 69.27.224.0/19 69.74.0.0/16 108.179.0.0/18 173.251.0.0/17 198.46.96.0/19 216.255.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7c:bd:8a:f9:d7:48:97:1f:92:f3:e2:46:28:4b:81:c3:9e: a6:64:aa:e8:f3:96:11:ca:6a:0b:a3:6d:1f:7f:34:d2:c0:18: 7f:07:1d:dc:58:d6:e4:31:f4:58:51:87:98:97:7f:f2:96:00: 1c:c9:7a:af:53:80:75:db:fe:2a:c7:57:ab:31:9b:a0:e3:0b: e7:1f:a7:62:8a:34:9a:98:f7:1d:55:81:b9:12:ca:e8:aa:ff: 36:30:d2:e3:8f:34:17:83:7b:bf:c7:64:5c:b0:45:45:ab:f4: 50:94:53:1d:28:07:0d:09:a1:f1:1a:45:a6:f1:3c:b4:1e:9a: 0b:16:53:e0:e7:4a:52:2f:e6:f0:ad:c9:5e:72:e9:a6:29:60: 7a:4b:a5:91:05:cd:d1:cd:10:61:47:fa:8a:2a:43:b9:65:67: 41:4c:36:a1:75:33:65:c5:af:21:23:5e:89:00:2f:d4:96:44: d5:59:b3:d8:b0:e0:36:24:2b:a2:9c:ef:9f:ec:97:b2:5b:46: 26:48:78:d2:9a:e2:b2:c2:45:8b:78:02:8e:1d:12:53:f8:78: 3b:b9:9b:14:d9:32:b2:59:01:06:12:76:c1:fc:f6:32:02:d4: 7f:65:15:9f:53:39:0e:7d:fa:db:34:99:9d:39:fc:11:c9:98: bf:04:a8:fd -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEptuzsVL1DrcFepukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ZDkzNzhiMjQtNDhjMy00YWI3LTkwMzEtNmI0ODlhNTJmMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis2YqD3lXgZhPrmCdLEqenS1ZBkvPHENjWc9 +vOfBeq/c3U6cV4TpcWLyBHcg1yR9OhZUpASgfK3HFSGD7JB0l1/aGpYfB2c8Bis KbSIlgF3iPnNuvMFd+TDd4wlFUob34s1QZCe7txTvBQ4j34idYBPxYvQ1zIskrEu CKoCPwG3SWnIaZdi2rS0OpIwHGAJe7Asi6f9RQjButy2hGBnviPo3HD5ykEAq5+d BLjigqFc6QqVAheulIFpPY7FniWn2vHBK7H+ClvaoEQKF4pBaWA53IiDvUJO1bKl YHOdvgxR3lE0EsvBdo3Pc5oIUa0+uA1Ozy6ohngLJaFCil2wcwIDAQABo4IDjzCC A4swHQYDVR0OBBYEFCgSCqzzbAefb4IlN/ZkwOs/tNzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYTE1MTFkYTAtMjA0Ny0z NmNlLTk3M2YtYzgzODE0MzMxMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQHGCYAAwQF GJ0gAwQFGPZgAwQFP/egAwMAQTMDBAVFG+ADAwBFSgMEBmyzAAMEB637AAMEBcYu YAMEBdj/YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAffL2K+ddIlx+S8+JGKEuBw56mZKro85YRymoLo20f fzTSwBh/Bx3cWNbkMfRYUYeYl3/ylgAcyXqvU4B12/4qx1erMZug4wvnH6diijSa mPcdVYG5Esroqv82MNLjjzQXg3u/x2RcsEVFq/RQlFMdKAcNCaHxGkWm8Ty0HpoL FlPg50pSL+bwrclecummKWB6S6WRBc3RzRBhR/qKKkO5ZWdBTDahdTNlxa8hI16J AC/UlkTVWbPYsOA2JCuinO+f7JeyW0YmSHjSmuKywkWLeAKOHRJT+Hg7uZsU2TKy WQEGEnbB/PYyAtR/ZRWfUzkOffrbNJmdOfwRyZi/BKj9 -----END CERTIFICATE-----Generated at Wed Jul 9 20:33:14 2025 by rpki-client