$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/2871d28b-2672-36d2-8d46-0df272837595.roa File: 2871d28b-2672-36d2-8d46-0df272837595.roa (raw, json) Hash identifier: 1wAhxJs2ZTdLaINvmQjYSVSRq4gRHfeM9y+35IKnhxk= Subject key identifier: 14:DB:B3:33:DF:D5:BD:D6:A9:55:07:F2:90:4A:26:48:A7:E1:74:7C Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Certificate serial: 010D0C9F4328584B0B76B50138B95E21EABB1880 Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/2871d28b-2672-36d2-8d46-0df272837595.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 19782 IP address blocks: 128.10.0.0/16 maxlen: 24 128.46.0.0/16 maxlen: 24 128.210.0.0/16 maxlen: 24 128.211.0.0/16 maxlen: 24 192.5.40.0/24 maxlen: 24 192.5.48.0/24 maxlen: 24 192.5.91.0/24 maxlen: 24 192.5.101.0/24 maxlen: 24 192.5.102.0/24 maxlen: 24 192.12.63.0/24 maxlen: 24 192.31.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b5:01:38:b9:5e:21:ea:bb:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=612efa57-14f4-468f-adaf-04ba6803b773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4d:5b:57:d7:a1:51:a6:f2:c6:82:c6:82:0d: 6a:b9:d5:75:36:dd:1d:d4:62:ce:3d:d9:0f:b3:40: 49:d0:da:73:44:df:9f:29:e0:52:5d:43:2d:c0:39: cc:21:65:e5:ef:6f:d3:8e:94:43:fc:39:86:5d:10: 35:24:78:5c:13:cb:9d:58:be:09:3e:c4:ac:d8:f6: 8d:64:22:d5:53:18:42:5f:bd:12:f9:7f:17:86:c7: 16:b9:fe:ce:e0:e5:28:a2:8e:27:b1:72:c6:a0:92: 2f:c5:e2:cd:27:32:aa:49:7d:7c:dd:c7:19:01:f3: 88:66:a7:57:f6:e4:fa:65:19:1e:88:b9:95:ea:ca: 2e:b9:de:0e:34:26:c7:1e:99:fa:f6:7d:11:8b:67: 08:8c:3b:0d:ce:b1:eb:20:c5:b2:21:3f:d5:f8:d4: 65:5c:17:22:b4:d0:39:0f:78:53:0a:90:39:b4:23: 04:a2:33:ed:5b:fc:23:67:6f:8c:b2:27:06:27:21: 4c:3b:1c:f6:05:0d:68:3c:2d:f7:3b:55:3d:cb:cd: 21:99:2f:c3:cd:bf:eb:32:41:01:fb:7a:bb:32:9d: c6:ce:cf:92:85:c6:ad:3d:5f:bf:dd:0b:ab:10:0c: 69:b4:30:8f:a0:cc:c2:58:e3:4a:8c:c3:96:e3:07: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:B3:33:DF:D5:BD:D6:A9:55:07:F2:90:4A:26:48:A7:E1:74:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/2871d28b-2672-36d2-8d46-0df272837595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl X509v3 Authority Key Identifier: keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer sbgp-ipAddrBlock: critical IPv4: 128.10.0.0/16 128.46.0.0/16 128.210.0.0/15 192.5.40.0/24 192.5.48.0/24 192.5.91.0/24 192.5.101.0-192.5.102.255 192.12.63.0/24 192.31.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c0:89:25:8c:79:cc:b3:97:20:93:c4:3f:cb:85:59:56:94: 28:9e:be:0e:2c:5d:e8:a0:e3:bd:43:f7:da:85:9a:50:45:5f: 47:0f:6d:d2:eb:cf:67:bc:04:b9:86:99:3e:7f:de:fa:53:a7: 72:52:18:32:92:57:ce:f3:81:49:85:05:16:9d:31:2b:17:35: 36:65:d7:a7:fc:cc:a6:87:cc:a6:1b:86:f3:4e:15:29:bb:fd: 7f:56:05:8f:af:d1:2b:06:39:d2:ff:f6:33:75:d4:83:04:b8: 68:b1:96:77:42:7c:c5:fc:33:66:31:66:d2:68:0d:e3:d0:82: 8c:0b:52:2c:e6:58:8b:2f:db:92:f7:97:b8:3b:83:ca:73:f5: 4f:f4:ea:05:29:51:e2:02:3e:83:fa:eb:dc:72:6a:76:f6:b3: 0a:25:3a:06:53:51:62:a0:1e:92:26:f7:78:19:9a:4b:ae:04: f8:1d:a0:d8:bb:7f:8d:2f:bc:62:99:60:70:f4:9e:ab:d0:55: e3:a7:cf:31:58:80:e8:ef:26:de:ca:89:9e:a6:0a:e8:c5:50: c0:ae:0a:b0:9f:eb:8c:b2:6a:88:c8:a5:e2:f0:d6:93:10:09: 53:0f:98:6a:b4:1a:22:14:d5:1f:27:76:18:d4:2c:3e:64:79: ce:33:71:76 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEsLdrUBOLleIeq7GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3NDAxZGUtNGIwYS00NTMyLWFjMDgtZGJhOGIwNTg4 YzQ4MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NjEyZWZhNTctMTRmNC00NjhmLWFkYWYtMDRiYTY4MDNiNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU1bV9ehUabyxoLGgg1qudV1Nt0d1GLOPdkP s0BJ0NpzRN+fKeBSXUMtwDnMIWXl72/TjpRD/DmGXRA1JHhcE8udWL4JPsSs2PaN ZCLVUxhCX70S+X8XhscWuf7O4OUooo4nsXLGoJIvxeLNJzKqSX183ccZAfOIZqdX 9uT6ZRkeiLmV6souud4ONCbHHpn69n0Ri2cIjDsNzrHrIMWyIT/V+NRlXBcitNA5 D3hTCpA5tCMEojPtW/wjZ2+MsicGJyFMOxz2BQ1oPC33O1U9y80hmS/Dzb/rMkEB +3q7Mp3Gzs+ShcatPV+/3QurEAxptDCPoMzCWONKjMOW4wc4IwIDAQABo4IDijCC A4YwHQYDVR0OBBYEFBTbszPf1b3WqVUH8pBKJkin4XR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0 MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4YjA1ODhjNDgvMjg3MWQyOGItMjY3Mi0z NmQyLThkNDYtMGRmMjcyODM3NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTA3NDAxZGUtNGIwYS00NTMyLWFj MDgtZGJhOGIwNTg4YzQ4L2EwNzQwMWRlLTRiMGEtNDUzMi1hYzA4LWRiYThiMDU4 OGM0OC5jcmwwHwYDVR0jBBgwFoAULvOxC87kwzSIVBcirGl2pVE0A4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4 YjA1ODhjNDguY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAATA7AwMAgAoDAwCA LgMDAYDSAwQAwAUoAwQAwAUwAwQAwAVbMAwDBADABWUDBADABWYDBADADD8DBADA HwAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAN8CJJYx5zLOXIJPEP8uFWVaUKJ6+Dixd6KDjvUP32oWaUEVf Rw9t0uvPZ7wEuYaZPn/e+lOnclIYMpJXzvOBSYUFFp0xKxc1NmXXp/zMpofMphuG 804VKbv9f1YFj6/RKwY50v/2M3XUgwS4aLGWd0J8xfwzZjFm0mgN49CCjAtSLOZY iy/bkveXuDuDynP1T/TqBSlR4gI+g/rr3HJqdvazCiU6BlNRYqAekib3eBmaS64E +B2g2Lt/jS+8YplgcPSeq9BV46fPMViA6O8m3sqJnqYK6MVQwK4KsJ/rjLJqiMil 4vDWkxAJUw+YarQaIhTVHyd2GNQsPmR5zjNxdg== -----END CERTIFICATE-----Generated at Tue Sep 16 22:35:20 2025 by rpki-client