$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa File: eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa (raw, json) Hash identifier: Q1pQnKwfuD18S5tdmGeMwVda7YbescqQLSwrKXpCjoE= Subject key identifier: 0F:04:79:AF:B2:6E:AB:D8:93:51:54:39:A4:9E:B2:A9:80:6F:0E:8A Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584B0E4165BFF42BD46C43AAA900 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 32983 IP address blocks: 198.29.20.0/22 maxlen: 24 2602:f9e7:2e::/47 maxlen: 48 2602:f9e7:38::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:65:bf:f4:2b:d4:6c:43:aa:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=1fa121f3-cc18-4788-896b-4fe967721a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:20:f9:17:99:55:55:56:fc:92:40:e2:63: 56:a4:f5:d0:13:74:63:98:44:57:53:12:93:d9:f5: 57:28:6e:ef:9e:87:ca:18:05:61:87:4c:a5:a1:cb: 68:8d:a1:ef:66:22:05:a1:0e:a7:d1:6f:64:ee:76: 52:bf:0b:ad:bd:61:b5:e7:f7:c0:86:0a:50:f8:30: 8d:05:ec:46:31:b5:11:bd:72:ee:ae:d9:37:7f:08: 1c:b2:f8:60:d5:b1:37:8a:e5:7f:83:a9:eb:8f:dc: b9:4b:86:45:9e:f6:e6:5c:df:d6:aa:84:8e:40:ac: 9a:81:0e:16:9f:5f:f8:64:92:40:18:ed:b2:3e:a5: 33:5b:9d:96:8b:79:7d:8d:a9:3a:a0:1f:08:d1:dd: 2f:29:01:6f:39:74:96:d1:c2:8a:1a:b8:d4:26:6a: 7c:d2:b2:26:03:92:5f:87:91:b1:34:78:81:a9:da: e6:8d:34:26:ac:f2:1c:7b:68:69:4e:7a:94:b6:94: b7:37:f1:bd:ff:0c:a8:ae:d5:cd:a9:5b:b1:aa:35: b4:10:cb:c3:0d:f3:36:0d:55:fc:8b:63:2d:07:64: 0d:bd:87:ab:ea:5c:c0:e5:7a:cd:18:4e:ce:99:7c: 10:b1:6f:d8:f2:b3:9e:28:3f:30:af:35:3c:d7:7c: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:04:79:AF:B2:6E:AB:D8:93:51:54:39:A4:9E:B2:A9:80:6F:0E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.20.0/22 IPv6: 2602:f9e7:2e::/47 2602:f9e7:38::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b3:2c:c3:91:4c:01:88:b2:70:eb:d2:5b:6b:ac:97:03:a2: 6a:2e:22:59:be:96:f8:9b:18:62:44:4f:94:43:4d:ef:c9:c8: f9:df:72:19:24:74:a3:06:1f:7a:54:29:77:61:1e:48:03:29: 6d:45:bc:95:48:81:52:0c:3a:56:87:1c:eb:ed:be:ed:41:26: b8:80:95:f3:52:66:a4:0a:d0:f9:bd:60:e1:05:8a:63:18:28: 1c:bf:1f:01:59:40:1c:8a:57:86:24:5f:e3:b8:b3:22:3b:bd: 5c:19:c7:8e:ac:24:82:04:e3:ca:c0:fa:16:08:84:50:11:63: b9:5a:5a:60:b9:e0:af:d1:35:b2:78:79:39:25:d8:bc:5d:01: c1:f3:26:23:87:14:7b:4b:4d:ba:ba:95:8a:0d:a6:35:5f:7a: 35:b5:45:4e:c9:e1:9e:ba:f0:ef:2b:f0:1a:44:12:5d:d5:26: 18:cc:54:d1:97:73:72:44:64:f3:4a:b0:e9:e0:3a:b1:38:35: e9:3f:a4:cd:69:e6:e9:0b:c8:28:f0:c6:43:0c:16:20:bf:0f: 15:9a:b1:40:89:cc:ad:32:17:2a:88:97:45:09:16:5e:b3:32: 1c:e9:48:f0:46:1b:89:5b:33:ea:f7:5c:59:35:6e:ee:f4:63: 4b:3f:65:c2 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEsOQWW/9CvUbEOqqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWZhMTIxZjMtY2MxOC00Nzg4LTg5NmItNGZlOTY3NzIxYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Yg+ReZVVVW/JJA4mNWpPXQE3RjmERXUxKT 2fVXKG7vnofKGAVhh0yloctojaHvZiIFoQ6n0W9k7nZSvwutvWG15/fAhgpQ+DCN BexGMbURvXLurtk3fwgcsvhg1bE3iuV/g6nrj9y5S4ZFnvbmXN/WqoSOQKyagQ4W n1/4ZJJAGO2yPqUzW52Wi3l9jak6oB8I0d0vKQFvOXSW0cKKGrjUJmp80rImA5Jf h5GxNHiBqdrmjTQmrPIce2hpTnqUtpS3N/G9/wyortXNqVuxqjW0EMvDDfM2DVX8 i2MtB2QNvYer6lzA5XrNGE7OmXwQsW/Y8rOeKD8wrzU813z3TwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFA8Eea+ybqvYk1FUOaSesqmAbw6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZWFjMjNhNzctNGNkOS0z ODQyLWE3NGYtMWYwN2ZiMGI4NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCxh0UMBgE AgACMBIDBwEmAvnnAC4DBwMmAvnnADgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjrMsw5FMAYiycOvSW2us lwOiai4iWb6W+JsYYkRPlENN78nI+d9yGSR0owYfelQpd2EeSAMpbUW8lUiBUgw6 Vocc6+2+7UEmuICV81JmpArQ+b1g4QWKYxgoHL8fAVlAHIpXhiRf47izIju9XBnH jqwkggTjysD6FgiEUBFjuVpaYLngr9E1snh5OSXYvF0BwfMmI4cUe0tNurqVig2m NV96NbVFTsnhnrrw7yvwGkQSXdUmGMxU0ZdzckRk80qw6eA6sTg16T+kzWnm6QvI KPDGQwwWIL8PFZqxQInMrTIXKoiXRQkWXrMyHOlI8EYbiVsz6vdcWTVu7vRjSz9l wg== -----END CERTIFICATE-----Generated at Fri Sep 5 02:45:50 2025 by rpki-client