$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa File: caf40528-fd91-3c64-8165-eed915d60d9c.roa (raw, json) Hash identifier: +UUCNNBIzRBLV8gVgiFjWdNYn+IWs8WDd6dOcaYszWg= Subject key identifier: 0B:6E:96:08:C6:84:50:94:94:C8:E3:F3:D5:BD:2A:06:CF:25:45:52 Certificate issuer: /CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba Certificate serial: 010D0C9F4328584B0A116581854F61B6E206F780 Authority key identifier: 1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 8560 IP address blocks: 158.222.102.0/23 maxlen: 32 162.254.24.0/22 maxlen: 32 192.96.159.0/24 maxlen: 32 192.152.28.0/24 maxlen: 32 192.206.141.0/24 maxlen: 32 208.94.36.0/22 maxlen: 32 2607:b500::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:65:81:85:4f:61:b6:e2:06:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=1c5694fc-da94-4e78-b4f6-e824402ce40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:34:ca:7d:d8:3c:95:9f:c3:c9:32:bf:4a: 03:9d:42:0b:ad:a0:ac:bd:eb:81:77:b3:07:e4:02: 89:ac:85:2e:ba:16:3f:eb:1a:04:39:55:80:27:f2: 0d:b5:52:45:e8:72:ff:87:4c:33:ae:a4:5c:b8:bf: f7:e5:bb:3a:fd:6a:81:bc:b4:e8:13:78:e9:c9:3a: 46:22:1d:3b:a6:e0:5c:8f:c6:16:f7:37:71:16:13: 12:22:4c:54:67:fc:40:2d:de:46:d2:f7:55:f2:50: 7e:43:ec:34:72:9d:c1:c0:00:35:03:df:7f:3b:95: 18:68:67:a5:11:f1:ac:97:e2:7d:d8:f4:5a:b8:07: ad:bb:6f:aa:a9:0b:86:bf:1f:48:05:0a:21:5e:5e: 3c:42:fd:b9:90:7b:30:5f:e3:29:40:21:c6:2e:96: 58:02:3c:d0:3a:d5:2e:a0:6a:bd:d3:bf:30:4e:22: 1c:9e:7a:a4:5d:b5:6c:c9:bd:21:d9:88:09:0a:c3: 18:d2:34:7b:63:93:b5:fa:c3:44:26:88:55:c6:73: f1:22:30:15:b7:2b:9a:c8:24:66:59:b8:de:2d:3d: 92:c7:94:b7:29:bc:72:b3:80:ef:a1:9d:93:41:b0: 7b:0d:15:69:79:10:a3:36:47:42:ff:65:bb:b3:bd: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6E:96:08:C6:84:50:94:94:C8:E3:F3:D5:BD:2A:06:CF:25:45:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl X509v3 Authority Key Identifier: keyid:1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer sbgp-ipAddrBlock: critical IPv4: 158.222.102.0/23 162.254.24.0/22 192.96.159.0/24 192.152.28.0/24 192.206.141.0/24 208.94.36.0/22 IPv6: 2607:b500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:92:28:81:f2:3a:3b:f1:c2:9f:a3:a7:ed:39:4c:41:ca:02: d7:49:eb:fa:fe:23:ae:96:f2:8b:0d:8c:24:44:7b:cb:86:5a: 07:b3:82:9f:28:56:96:55:32:91:1a:cf:26:63:5e:22:79:c8: 72:24:69:01:0c:6e:85:67:f1:2a:40:0f:bb:e7:93:f5:2d:54: 77:6f:1c:05:89:9e:7e:30:0a:c7:89:8d:ed:a9:ea:1f:de:1c: ea:89:a3:02:f2:a2:16:f3:d4:7e:e5:e1:f7:fe:65:2f:09:e6: 88:af:08:09:59:f0:23:be:bd:0e:76:51:66:c1:36:45:e3:07: 68:bc:03:52:b0:97:f8:55:f6:d0:f9:69:44:54:0e:90:57:e7: 2c:2c:a8:45:78:95:5d:f6:c4:7b:ba:91:69:f6:c0:25:7b:1b: 54:69:b5:a1:04:a6:07:39:fc:62:8e:85:6f:f4:00:de:6e:3d: ea:74:13:5d:70:bb:b9:49:0c:3d:ba:5b:e6:17:ed:87:00:c7: d3:cf:44:9a:19:99:b4:09:87:28:a6:7f:12:eb:c2:ed:ec:7d: 28:a9:b7:27:5b:ec:09:50:48:b5:7f:30:45:af:cd:09:84:6a: 25:57:93:47:2a:ca:4d:65:6c:bc:78:26:a0:9c:4b:f8:55:33: 50:a6:fb:33 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEsKEWWBhU9htuIG94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVhY2IzZDAtNGI2Yi00ZjJjLTlkZDEtZTI4NzViZmQw Y2JhMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MWM1Njk0ZmMtZGE5NC00ZTc4LWI0ZjYtZTgyNDQwMmNlNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqs0yn3YPJWfw8kyv0oDnUILraCsveuBd7MH 5AKJrIUuuhY/6xoEOVWAJ/INtVJF6HL/h0wzrqRcuL/35bs6/WqBvLToE3jpyTpG Ih07puBcj8YW9zdxFhMSIkxUZ/xALd5G0vdV8lB+Q+w0cp3BwAA1A99/O5UYaGel EfGsl+J92PRauAetu2+qqQuGvx9IBQohXl48Qv25kHswX+MpQCHGLpZYAjzQOtUu oGq9078wTiIcnnqkXbVsyb0h2YgJCsMY0jR7Y5O1+sNEJohVxnPxIjAVtyuayCRm WbjeLT2Sx5S3Kbxys4DvoZ2TQbB7DRVpeRCjNkdC/2W7s72rJwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFAtulgjGhFCUlMjj89W9KgbPJUVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFj YjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3NWJmZDBjYmEvY2FmNDA1MjgtZmQ5MS0z YzY0LTgxNjUtZWVkOTE1ZDYwZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGVhY2IzZDAtNGI2Yi00ZjJjLTlk ZDEtZTI4NzViZmQwY2JhLzBlYWNiM2QwLTRiNmItNGYyYy05ZGQxLWUyODc1YmZk MGNiYS5jcmwwHwYDVR0jBBgwFoAUGjVbTftFqy72BE8J7x3HPvg5dGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFjYjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3 NWJmZDBjYmEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBnt5mAwQC ov4YAwQAwGCfAwQAwJgcAwQAwM6NAwQC0F4kMA0EAgACMAcDBQAmB7UAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBABqSKIHyOjvxwp+jp+05TEHKAtdJ6/r+I66W8osNjCREe8uGWgezgp8oVpZV MpEazyZjXiJ5yHIkaQEMboVn8SpAD7vnk/UtVHdvHAWJnn4wCseJje2p6h/eHOqJ owLyohbz1H7l4ff+ZS8J5oivCAlZ8CO+vQ52UWbBNkXjB2i8A1Kwl/hV9tD5aURU DpBX5ywsqEV4lV32xHu6kWn2wCV7G1RptaEEpgc5/GKOhW/0AN5uPep0E11wu7lJ DD26W+YX7YcAx9PPRJoZmbQJhyimfxLrwu3sfSiptydb7AlQSLV/MEWvzQmEaiVX k0cqyk1lbLx4JqCcS/hVM1Cm+zM= -----END CERTIFICATE-----Generated at Tue Sep 9 13:01:32 2025 by rpki-client