$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa File: f285d95a-b783-3400-8db8-8b30c968f7c0.roa (raw, json) Hash identifier: BNl2pLXFPhZcJQW9euV0vdQQpueGUY0MntDixRt2Afc= Subject key identifier: 1D:E1:44:7D:6C:8A:E9:D2:67:93:F9:58:DF:22:BE:A9:FA:C5:14:E7 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584AB220BEE261720193447B3300 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 174 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:be:e2:61:72:01:93:44:7b:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=db7c3eee-bfee-4a75-b127-5ce3cb6a5c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:84:53:b3:1c:6a:e5:3e:e4:5a:3b:b6:4a:75: 4a:be:09:c0:b8:98:28:17:e7:44:b9:7e:1a:d0:24: ee:a0:c3:a0:7b:59:bd:ca:42:82:2a:5f:c2:fc:2f: 3c:d2:1d:9d:1b:d9:a2:26:42:f3:85:4d:c9:91:49: 13:03:80:f1:a3:cc:bf:ed:ee:10:17:55:58:6d:a9: 2c:0d:e9:f2:2c:1c:27:14:3f:cf:ad:0e:7a:a8:bd: a0:4a:0e:a4:d0:50:0e:1c:d1:8a:3a:aa:f9:24:aa: c2:89:fc:8a:aa:45:8d:3e:8e:56:d2:e1:c4:d0:ab: f1:db:02:62:f0:2e:a1:14:ae:06:22:da:60:a2:8d: 9f:e8:f2:90:2a:6f:41:fa:9b:14:f1:5c:6d:4d:3b: cf:31:36:53:b4:a2:e7:b1:89:72:43:14:08:44:0a: eb:3e:59:c1:51:53:d6:01:ac:a1:61:3c:37:28:e2: d1:bf:4f:86:2d:db:29:59:1e:88:86:16:77:dc:ce: fc:09:8b:67:51:96:8b:65:b8:a2:99:ce:9e:e8:13: 4f:bb:e3:eb:6c:9d:69:fa:f0:c9:d3:fc:9e:c3:da: 7b:3a:03:7c:fd:27:3c:c3:d4:57:92:ac:48:49:bb: bd:43:28:ee:2b:e6:8b:25:ed:9e:57:9e:d5:79:c9: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E1:44:7D:6C:8A:E9:D2:67:93:F9:58:DF:22:BE:A9:FA:C5:14:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e6:d1:4c:bd:2a:f6:ea:6a:a9:17:b4:49:33:8a:f0:40:f3: 88:fa:84:e8:c9:bd:73:79:c0:d0:f7:5d:b1:d9:d7:8b:28:be: ad:9a:9f:c6:16:9d:6c:80:12:3c:73:48:8c:3a:03:29:c4:25: 99:5e:15:13:7f:32:27:f7:77:4f:01:66:e9:1e:52:3c:f8:aa: 6c:c0:2e:19:c5:64:9c:af:43:7d:84:1f:47:ee:81:ea:69:0c: 41:38:c2:96:ab:05:bb:8a:03:d8:1e:96:01:58:53:df:49:0a: 97:9f:69:98:69:2b:07:62:5f:c7:cb:e6:a5:08:49:a2:3e:79: 79:1f:a9:af:74:06:21:1b:46:ba:4f:c9:3b:4a:fe:fc:9f:9e: 6a:19:c2:51:2c:13:fa:fd:5d:b7:1c:36:35:9f:28:d6:d6:48: a9:08:2e:b7:57:8e:a0:9b:1b:f9:2b:08:47:84:ee:14:57:b8: 9c:f1:d2:24:ea:6c:a5:d1:82:21:6e:d1:bf:a3:43:df:71:f9: 35:6e:2e:7f:9c:fe:94:a1:81:2f:bf:d9:0a:49:df:cc:22:0c: 6e:1d:89:c8:f7:4d:20:37:b3:d7:47:5d:0f:50:2a:1e:5d:d1: e4:a0:4d:7a:81:bb:44:26:92:be:cb:fe:47:9d:1c:c5:d4:cd: de:3e:b5:f0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEqyIL7iYXIBk0R7MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGI3YzNlZWUtYmZlZS00YTc1LWIxMjctNWNlM2NiNmE1YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IRTsxxq5T7kWju2SnVKvgnAuJgoF+dEuX4a 0CTuoMOge1m9ykKCKl/C/C880h2dG9miJkLzhU3JkUkTA4Dxo8y/7e4QF1VYbaks DenyLBwnFD/PrQ56qL2gSg6k0FAOHNGKOqr5JKrCifyKqkWNPo5W0uHE0Kvx2wJi 8C6hFK4GItpgoo2f6PKQKm9B+psU8VxtTTvPMTZTtKLnsYlyQxQIRArrPlnBUVPW AayhYTw3KOLRv0+GLdspWR6IhhZ33M78CYtnUZaLZbiimc6e6BNPu+PrbJ1p+vDJ 0/yew9p7OgN8/Sc8w9RXkqxISbu9QyjuK+aLJe2eV57Veck3AwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFB3hRH1siunSZ5P5WN8ivqn6xRTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvZjI4NWQ5NWEtYjc4My0z NDAwLThkYjgtOGIzMGM5NjhmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACHm0Uy9KvbqaqkXtEkzivBA84j6 hOjJvXN5wND3XbHZ14sovq2an8YWnWyAEjxzSIw6AynEJZleFRN/Mif3d08BZuke Ujz4qmzALhnFZJyvQ32EH0fugeppDEE4wparBbuKA9gelgFYU99JCpefaZhpKwdi X8fL5qUISaI+eXkfqa90BiEbRrpPyTtK/vyfnmoZwlEsE/r9XbccNjWfKNbWSKkI LrdXjqCbG/krCEeE7hRXuJzx0iTqbKXRgiFu0b+jQ99x+TVuLn+c/pShgS+/2QpJ 38wiDG4dicj3TSA3s9dHXQ9QKh5d0eSgTXqBu0Qmkr7L/kedHMXUzd4+tfA= -----END CERTIFICATE-----Generated at Thu Jul 31 06:40:35 2025 by rpki-client