$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa File: 2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa (raw, json) Hash identifier: i3AXODt6bVdFxD4UXYzHMpvCRZNguBJOV2yt0vztFfg= Subject key identifier: 23:C5:3A:2A:01:0D:4E:C6:45:02:8F:A9:9F:9D:98:DB:8D:74:DB:11 Certificate issuer: /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Certificate serial: 010D0C9F4328584A71EB3CAE8DB12BFF84034CC0 Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 17138 IP address blocks: 158.51.172.0/22 maxlen: 22 162.248.96.0/22 maxlen: 22 170.39.232.0/22 maxlen: 22 199.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3c:ae:8d:b1:2b:ff:84:03:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=f32c0d26-b4b1-4b53-af01-c0f356b649d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:aa:fb:2f:fb:56:2f:4a:ea:c0:b5:c5:db: 6f:33:62:d2:19:8e:5f:e0:d8:63:69:9e:12:af:8f: 65:c2:e7:8a:62:f3:40:4e:0d:5b:a2:8d:db:8d:aa: 83:9c:3b:b0:c0:b9:65:11:4f:2e:91:ce:1c:16:34: d0:c5:2e:3b:92:e2:df:69:61:43:90:72:e9:6a:db: 1a:58:ea:2a:93:ce:0b:5e:ca:8c:da:94:a7:11:4f: c5:77:49:d3:4d:5f:50:16:8f:e7:ac:b0:87:76:a9: 6a:e5:51:51:5f:18:af:ac:2f:9f:c4:57:e7:62:39: 8b:06:f4:01:d0:16:1c:48:8e:60:a5:c8:2d:84:6b: 5b:d8:16:a5:75:4d:a1:c5:f2:69:b2:8e:1c:a2:47: c1:11:a0:c2:65:50:f1:24:c1:62:bb:a4:30:6a:c4: 6b:91:1e:c8:5b:c1:92:66:87:f1:5f:1a:9f:96:2f: 6b:c2:62:fd:75:c7:45:ba:a0:f9:39:1e:09:44:8d: c3:2b:16:13:ef:2c:9a:bd:f3:c1:17:b4:f2:10:7f: d0:2f:39:e5:c5:6b:d3:68:96:64:4b:12:7f:dc:12: d0:0f:d8:d6:c7:ab:9a:f0:94:c2:86:5a:48:d5:c9: da:b1:2c:bb:d5:db:bd:48:a5:0c:1f:5e:05:ec:c1: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C5:3A:2A:01:0D:4E:C6:45:02:8F:A9:9F:9D:98:DB:8D:74:DB:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/2bbb99a0-9a60-3832-a878-2ec581cd6fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl X509v3 Authority Key Identifier: keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer sbgp-ipAddrBlock: critical IPv4: 158.51.172.0/22 162.248.96.0/22 170.39.232.0/22 199.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2d:7f:90:08:c7:29:b9:38:4d:9e:96:4d:f4:b8:ed:ee:50: b5:74:d8:7d:02:23:d2:c4:24:05:ed:46:4a:37:c0:47:78:28: 86:42:80:c4:ed:1c:c1:ac:65:15:82:ce:aa:5a:d3:3e:82:b3: c7:07:4c:23:b3:89:7e:b9:b7:9e:15:d4:19:39:40:65:bf:b9: cd:d1:ec:22:63:5f:e4:72:94:af:32:24:83:1a:f2:a3:3d:e6: d5:70:bc:14:2c:4b:cf:48:69:c7:8b:fb:f9:21:46:35:20:40: 76:58:f4:44:a2:2a:07:16:a8:af:0f:ee:51:09:ad:a2:60:ce: 84:51:28:12:54:9e:54:c3:aa:63:8c:7d:2d:44:b8:4b:2e:47: f8:9f:3d:d4:92:b1:68:24:7e:e8:98:32:80:89:0b:34:42:15: b1:bc:16:b4:e9:56:69:39:c6:d3:e5:33:65:70:fe:b3:c3:71: 20:40:b7:32:c0:82:67:ae:21:45:42:3f:6b:08:55:5e:11:82: 2f:8e:87:ba:ff:a9:19:50:f8:49:da:d7:5a:12:88:8f:16:cf: dd:50:81:21:42:69:ea:cb:9b:55:1e:58:68:f7:b3:93:ef:11: e7:88:cd:c2:5f:42:64:24:ad:f3:c2:f0:f8:1a:43:21:f1:2a: c7:09:40:47 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEpx6zyujbEr/4QDTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwNDhiNWEtMmNhOC00MjUxLThlOTMtNWVhYWI3MmQ0 Y2MzMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZjMyYzBkMjYtYjRiMS00YjUzLWFmMDEtYzBmMzU2YjY0OWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Leq+y/7Vi9K6sC1xdtvM2LSGY5f4NhjaZ4S r49lwueKYvNATg1boo3bjaqDnDuwwLllEU8ukc4cFjTQxS47kuLfaWFDkHLpatsa WOoqk84LXsqM2pSnEU/Fd0nTTV9QFo/nrLCHdqlq5VFRXxivrC+fxFfnYjmLBvQB 0BYcSI5gpcgthGtb2BaldU2hxfJpso4cokfBEaDCZVDxJMFiu6QwasRrkR7IW8GS ZofxXxqfli9rwmL9dcdFuqD5OR4JRI3DKxYT7yyavfPBF7TyEH/QLznlxWvTaJZk SxJ/3BLQD9jWx6ua8JTChlpI1cnasSy71du9SKUMH14F7MEBzwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFCPFOioBDU7GRQKPqZ+dmNuNdNsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0 OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFhYjcyZDRjYzMvMmJiYjk5YTAtOWE2MC0z ODMyLWE4NzgtMmVjNTgxY2Q2ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjAwNDhiNWEtMmNhOC00MjUxLThl OTMtNWVhYWI3MmQ0Y2MzLzYwMDQ4YjVhLTJjYTgtNDI1MS04ZTkzLTVlYWFiNzJk NGNjMy5jcmwwHwYDVR0jBBgwFoAUJrNx2C7TAlCegsXwq57lU90/7UgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFh YjcyZDRjYzMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnjOsAwQC ovhgAwQCqifoAwQCx//gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB8tf5AIxym5OE2elk30uO3uULV02H0C I9LEJAXtRko3wEd4KIZCgMTtHMGsZRWCzqpa0z6Cs8cHTCOziX65t54V1Bk5QGW/ uc3R7CJjX+RylK8yJIMa8qM95tVwvBQsS89IaceL+/khRjUgQHZY9ESiKgcWqK8P 7lEJraJgzoRRKBJUnlTDqmOMfS1EuEsuR/ifPdSSsWgkfuiYMoCJCzRCFbG8FrTp Vmk5xtPlM2Vw/rPDcSBAtzLAgmeuIUVCP2sIVV4Rgi+Oh7r/qRlQ+Ena11oSiI8W z91QgSFCaerLm1UeWGj3s5PvEeeIzcJfQmQkrfPC8PgaQyHxKscJQEc= -----END CERTIFICATE-----Generated at Fri Jul 25 00:53:39 2025 by rpki-client