$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa File: 4329ba6e-6e0a-3138-98ed-2d011364b519.roa (raw, json) Hash identifier: jFf9o/iM8CHrJFAQVPLN1YTIT/hyXSrf2+1LJ0qIoLs= Subject key identifier: E0:10:40:2A:0B:52:EF:3C:1B:D7:A2:56:15:EC:ED:BF:C9:79:30:E1 Certificate issuer: /CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6 Certificate serial: 010D0C9F4328584B1AD190A09EED3C7C208E9480 Authority key identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 10297 IP address blocks: 64.79.64.0/19 maxlen: 24 173.45.64.0/18 maxlen: 24 173.244.160.0/19 maxlen: 24 207.182.128.0/19 maxlen: 24 209.190.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:90:a0:9e:ed:3c:7c:20:8e:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6f79b8d1-c696-4bed-99a5-d539cdaf91a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:fe:34:79:0c:5f:68:a0:29:a0:dc:58:a4: f4:d7:58:15:31:14:72:8a:55:a2:85:f4:7a:5e:fd: 62:69:a3:1f:86:75:c3:43:fb:bc:c9:0a:d2:d4:b3: 8b:3d:cc:9e:7d:ae:dd:2d:91:49:9c:1e:3b:a6:ac: 09:60:30:7d:61:c1:77:a5:93:59:fe:5e:96:53:58: b5:4e:77:24:af:0e:41:c8:8a:49:c2:4e:4a:09:13: 4b:a5:6a:54:5e:1f:c7:e7:0d:b0:dd:7c:d2:0b:d8: de:48:7b:b1:46:95:62:2b:6d:64:81:1d:f2:a0:79: 7d:b2:a0:7d:3a:c1:ba:f2:90:a4:ce:c1:a3:36:37: 08:81:bf:ae:3e:54:32:6a:ac:7c:9e:d1:2b:a5:cd: 8c:e8:11:9d:08:17:6d:8f:22:27:0d:84:c2:19:23: ff:4b:9c:c7:27:a2:8c:e1:31:40:e2:3d:b1:c1:9a: b2:8e:b6:d6:36:ed:8a:f5:1f:36:7b:9b:ff:da:95: 26:05:6d:95:c0:a0:01:3b:13:6a:a8:59:20:29:d9: 2a:58:a8:09:82:56:eb:3b:2a:09:30:06:5d:86:9d: 2f:03:83:04:1f:80:ee:57:05:6f:2d:6f:e6:b5:5f: cb:61:71:45:15:c3:6e:aa:e7:77:4a:3e:e8:cf:9e: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:10:40:2A:0B:52:EF:3C:1B:D7:A2:56:15:EC:ED:BF:C9:79:30:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl X509v3 Authority Key Identifier: keyid:3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer sbgp-ipAddrBlock: critical IPv4: 64.79.64.0/19 173.45.64.0/18 173.244.160.0/19 207.182.128.0/19 209.190.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:6f:5c:e7:47:f8:9c:b2:c3:cf:2b:a9:9f:fc:46:76:2d:8f: f9:93:0e:ce:b6:30:9c:8a:9a:9d:48:0f:15:53:f7:4e:0d:73: 51:20:0c:e6:8f:72:1f:19:44:31:6c:9a:0f:48:a1:69:e0:49: 88:7d:77:25:c6:58:7b:0c:f5:27:88:99:18:ca:26:5f:0a:91: b4:19:50:14:7e:e1:5b:3a:19:0b:44:00:32:5d:b2:ab:36:05: ee:0b:aa:2e:26:a2:9d:b3:a3:f5:1b:d2:f2:de:df:ee:64:5f: 11:fb:3d:0f:36:9c:f3:c9:27:83:ed:bc:4f:44:dd:68:ca:fd: 23:5e:09:d6:e9:f4:ca:89:99:c1:db:7d:05:4c:ee:88:7c:f5: 3a:91:05:c4:2d:ee:cd:1f:0d:78:e2:94:8f:9d:37:41:29:3b: 15:bd:5e:f9:bb:fe:38:59:f8:cd:99:24:3e:a5:f3:3d:d1:07: f7:f3:4a:8b:01:e0:7b:d5:4f:8f:99:b6:b5:69:dc:b3:a4:52: ab:48:7a:45:f7:8a:ed:14:16:e6:04:f9:b3:19:ca:ef:91:14: 62:77:c2:c8:87:1e:45:28:57:18:22:3a:47:56:fd:5c:99:ef: 17:27:5c:5d:da:58:c2:68:96:e7:3e:92:c8:f7:42:d2:51:33: 90:aa:9e:29 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEsa0ZCgnu08fCCOlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y1ZTRjYWEtMmVhNy00NjAyLWEzYjAtNWM5ZmNkMmU1 NGU2MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NmY3OWI4ZDEtYzY5Ni00YmVkLTk5YTUtZDUzOWNkYWY5MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdH+NHkMX2igKaDcWKT011gVMRRyilWihfR6 Xv1iaaMfhnXDQ/u8yQrS1LOLPcyefa7dLZFJnB47pqwJYDB9YcF3pZNZ/l6WU1i1 Tnckrw5ByIpJwk5KCRNLpWpUXh/H5w2w3XzSC9jeSHuxRpViK21kgR3yoHl9sqB9 OsG68pCkzsGjNjcIgb+uPlQyaqx8ntErpc2M6BGdCBdtjyInDYTCGSP/S5zHJ6KM 4TFA4j2xwZqyjrbWNu2K9R82e5v/2pUmBW2VwKABOxNqqFkgKdkqWKgJglbrOyoJ MAZdhp0vA4MEH4DuVwVvLW/mtV/LYXFFFcNuqud3Sj7oz574UwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFOAQQCoLUu88G9eiVhXs7b/JeTDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjVl NGNhYS0yZWE3LTQ2MDItYTNiMC01YzlmY2QyZTU0ZTYvNDMyOWJhNmUtNmUwYS0z MTM4LTk4ZWQtMmQwMTEzNjRiNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y1ZTRjYWEtMmVhNy00NjAyLWEz YjAtNWM5ZmNkMmU1NGU2LzdmNWU0Y2FhLTJlYTctNDYwMi1hM2IwLTVjOWZjZDJl NTRlNi5jcmwwHwYDVR0jBBgwFoAUPfhF8SZxppxWbN5BejUoxYGvUmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjVlNGNhYS0yZWE3LTQ2MDItYTNiMC01Yzlm Y2QyZTU0ZTYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFQE9AAwQG rS1AAwQFrfSgAwQFz7aAAwQH0b4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ5vXOdH+Jyyw88rqZ/8RnYt j/mTDs62MJyKmp1IDxVT904Nc1EgDOaPch8ZRDFsmg9IoWngSYh9dyXGWHsM9SeI mRjKJl8KkbQZUBR+4Vs6GQtEADJdsqs2Be4Lqi4mop2zo/Ub0vLe3+5kXxH7PQ82 nPPJJ4PtvE9E3WjK/SNeCdbp9MqJmcHbfQVM7oh89TqRBcQt7s0fDXjilI+dN0Ep OxW9Xvm7/jhZ+M2ZJD6l8z3RB/fzSosB4HvVT4+ZtrVp3LOkUqtIekX3iu0UFuYE +bMZyu+RFGJ3wsiHHkUoVxgiOkdW/VyZ7xcnXF3aWMJoluc+ksj3QtJRM5Cqnik= -----END CERTIFICATE-----Generated at Tue Sep 16 02:37:59 2025 by rpki-client