$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa File: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (raw, json) Hash identifier: nubVcIKmi7faAQwsd4Yauudclq85QWDoUe+I5ZxWTVk= Subject key identifier: C4:34:1D:62:70:67:C8:91:3A:99:6F:CC:3C:82:83:1C:04:E8:EF:41 Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Certificate serial: 010D0C9F4328584A6826033C26D42F953D9F6B20 Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 398777 IP address blocks: 24.233.144.0/20 maxlen: 20 149.137.160.0/19 maxlen: 19 192.173.152.0/21 maxlen: 21 2605:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:03:3c:26:d4:2f:95:3d:9f:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=22f277e6-711b-4cda-bbc1-07b72e102ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:84:1a:0a:03:46:69:ca:18:61:10:0e:8f: 2f:a4:13:69:87:9c:3a:c8:fb:e1:73:b8:cb:6e:50: c7:18:98:84:de:39:6d:ec:04:08:8a:73:34:ba:f4: fd:fa:6b:4b:76:ad:78:17:77:3e:d9:9d:0f:fa:7f: 71:ca:1a:1c:50:36:b9:e6:c2:e8:22:3b:88:5f:c2: 2f:e2:8c:80:58:a3:7d:76:4d:5b:18:7a:77:1d:1e: 0c:ee:bf:3d:00:ee:cb:6b:84:26:c6:12:2a:eb:a9: 39:59:a5:1a:7a:21:49:8c:7b:c7:e3:e4:f9:5e:41: 11:87:3d:dd:58:23:32:41:0d:30:7b:66:e9:3e:02: 04:77:ce:d1:19:d8:e4:9c:d1:3b:71:18:10:79:61: 3e:22:e8:ed:89:b1:a0:84:3c:e0:5a:e2:fe:4a:bf: 48:7e:25:7c:04:72:3d:2e:68:23:cf:67:0a:a2:35: ed:88:61:94:dc:b6:08:a7:c6:b7:ce:96:17:09:4c: 2b:56:8b:ea:40:43:82:7c:ba:5b:d3:e0:bb:5d:39: 1c:17:b8:f9:03:8c:94:7d:ce:81:a0:e0:cd:d1:25: 4c:93:88:10:b9:55:fc:15:40:ad:80:97:1a:a3:8a: 72:52:dc:99:09:45:b6:9d:cc:d4:71:59:ca:00:e1: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:34:1D:62:70:67:C8:91:3A:99:6F:CC:3C:82:83:1C:04:E8:EF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl X509v3 Authority Key Identifier: keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer sbgp-ipAddrBlock: critical IPv4: 24.233.144.0/20 149.137.160.0/19 192.173.152.0/21 IPv6: 2605:ec40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ca:3c:2b:b0:bf:74:26:fd:98:59:f7:9c:0c:d9:a0:b9:bb: b5:85:3e:35:77:b3:75:ad:ec:58:34:96:8b:1c:3f:bd:ec:ba: 03:68:bd:e8:a4:ea:32:48:87:ba:90:e0:5a:17:09:0d:0c:50: 7e:0b:5d:09:b5:5b:25:9b:33:55:a2:2e:d9:ba:68:88:d5:5e: 40:06:3d:55:47:0b:37:46:68:c9:f7:87:02:df:fd:92:05:65: 04:ab:6a:cc:25:5c:ae:a1:e0:8a:29:c7:a1:55:22:d2:67:24: 87:8f:e9:31:61:81:da:ea:02:46:6c:87:d3:fa:b7:eb:9a:58: 06:2f:72:d7:ca:11:78:65:c3:f1:ac:5d:da:9f:5e:00:95:37: 2d:76:fe:2e:ca:39:9e:d6:f0:60:a2:5a:29:c6:98:ad:33:3f: 62:0b:0b:2f:4e:ac:9e:09:41:02:73:3d:27:4a:6f:17:f4:64: ef:f3:ff:c8:0b:10:b6:16:68:11:0e:af:87:9c:e1:fd:36:f7: 11:7d:6a:25:3f:e8:35:d6:02:fc:a0:1c:ba:9e:34:f9:3c:73: f7:91:2f:25:8c:8c:da:e7:3c:05:7d:30:23:e8:69:3f:5d:ef: 6c:f8:8d:85:a8:fe:ec:6d:b0:53:d1:fd:6a:eb:0c:48:a2:e9: fc:dd:a3:84 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEpoJgM8JtQvlT2fayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MGVlZmItMWM1NS00Y2Q4LWFkYjYtZTYxMmM4ZDBm OTk5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MjJmMjc3ZTYtNzExYi00Y2RhLWJiYzEtMDdiNzJlMTAyYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OuEGgoDRmnKGGEQDo8vpBNph5w6yPvhc7jL blDHGJiE3jlt7AQIinM0uvT9+mtLdq14F3c+2Z0P+n9xyhocUDa55sLoIjuIX8Iv 4oyAWKN9dk1bGHp3HR4M7r89AO7La4QmxhIq66k5WaUaeiFJjHvH4+T5XkERhz3d WCMyQQ0we2bpPgIEd87RGdjknNE7cRgQeWE+IujtibGghDzgWuL+Sr9IfiV8BHI9 Lmgjz2cKojXtiGGU3LYIp8a3zpYXCUwrVovqQEOCfLpb0+C7XTkcF7j5A4yUfc6B oODN0SVMk4gQuVX8FUCtgJcao4pyUtyZCUW2nczUcVnKAOE5gQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFMQ0HWJwZ8iROplvzDyCgxwE6O9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkw ZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEyYzhkMGY5OTkvNzU0NWZhOTYtOGY3My0z NGY5LTk3YjAtM2QwZmEyYjM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg5MGVlZmItMWM1NS00Y2Q4LWFk YjYtZTYxMmM4ZDBmOTk5L2M4OTBlZWZiLTFjNTUtNGNkOC1hZGI2LWU2MTJjOGQw Zjk5OS5jcmwwHwYDVR0jBBgwFoAUTu9yW77rjBLGOkHZCcOTsb4pffgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkwZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEy YzhkMGY5OTkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEGOmQAwQF lYmgAwQDwK2YMA0EAgACMAcDBQAmBexAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG/KPCuwv3Qm/ZhZ95wM 2aC5u7WFPjV3s3Wt7Fg0loscP73sugNoveik6jJIh7qQ4FoXCQ0MUH4LXQm1WyWb M1WiLtm6aIjVXkAGPVVHCzdGaMn3hwLf/ZIFZQSraswlXK6h4Iopx6FVItJnJIeP 6TFhgdrqAkZsh9P6t+uaWAYvctfKEXhlw/GsXdqfXgCVNy12/i7KOZ7W8GCiWinG mK0zP2ILCy9OrJ4JQQJzPSdKbxf0ZO/z/8gLELYWaBEOr4ec4f029xF9aiU/6DXW AvygHLqeNPk8c/eRLyWMjNrnPAV9MCPoaT9d72z4jYWo/uxtsFPR/WrrDEii6fzd o4Q= -----END CERTIFICATE-----Generated at Wed Jul 9 15:20:21 2025 by rpki-client