$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa File: 9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa (raw, json) Hash identifier: v0QtwTCPazbKd4WjRqtevLouU4VAllbFZ3NkdGK58/0= Subject key identifier: 1B:29:2B:61:04:88:56:66:33:A6:48:C5:91:37:55:75:7D:11:6E:73 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584AC0162F88520B22E5FC860D80 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 21766 IP address blocks: 192.131.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:2f:88:52:0b:22:e5:fc:86:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=93c10b4f-f628-4676-86b5-52afeb18ce8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:da:b0:fb:ad:e2:99:10:9b:4b:52:a2:02:6c: f8:67:08:5b:94:c2:79:91:b2:38:f4:65:84:88:08: 13:fc:c1:d0:c3:84:bd:4b:0e:9c:29:0a:d7:c3:2b: 89:46:26:89:60:5c:2c:25:eb:25:32:8a:f4:40:06: a6:a8:d7:fe:38:34:f5:76:d1:2f:02:c6:25:5d:c8: 4b:79:44:48:68:90:88:2c:82:82:2d:f5:de:d3:16: db:2e:b8:8f:2b:68:db:c0:f2:4d:df:83:b3:96:4e: dc:ab:9e:ab:9e:d2:ae:d2:e2:cb:8a:e0:54:58:e2: 53:f8:a5:98:84:6b:fc:5d:b8:79:e0:4e:85:34:34: 08:3b:5c:df:b2:fd:fe:2d:ba:09:58:f7:c3:57:55: 31:2e:6c:2d:99:80:2e:98:81:fd:2a:8e:db:7b:ac: 4c:d9:83:b5:f3:5a:b3:86:7a:49:08:b4:c5:a4:e5: a2:1d:18:e1:81:12:0d:65:89:d8:13:05:5e:29:86: 11:8a:a4:b1:66:74:40:86:8d:75:b5:02:4d:dc:d0: 7a:2b:46:e6:8b:9b:4d:7d:20:37:67:eb:c0:00:31: 6d:bc:6c:ab:7a:c2:89:c4:70:4a:80:c0:a7:f6:7e: af:14:63:f0:bc:c6:ba:a4:81:3c:2c:dc:d9:d2:ef: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:29:2B:61:04:88:56:66:33:A6:48:C5:91:37:55:75:7D:11:6E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 192.131.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9b:5b:7a:2c:80:a3:6e:26:77:c1:c6:68:5c:11:0a:78:2d: 93:c2:7f:08:8e:c6:d7:4d:6a:be:a2:c9:ed:40:1b:44:68:ed: c0:74:a3:ce:06:1b:68:03:a5:d7:b8:07:e2:48:3b:71:86:84: 58:36:a8:ba:26:4b:39:44:b3:95:ba:74:53:33:b4:d3:fc:78: 8e:f3:a2:b7:5d:81:f1:8f:1d:95:57:0a:b3:01:24:33:6f:ec: cb:6e:cf:98:64:c5:37:52:ce:0e:78:50:7e:34:bb:c5:5a:c2: 7c:ab:4a:e6:a4:c0:f9:d5:a0:b5:e3:5a:12:94:e2:81:c4:e0: e9:1a:6c:1c:78:a3:6c:4e:71:f6:67:de:b1:92:61:88:51:b6: e2:7b:2b:8b:d6:47:3d:f5:ce:0a:ad:b4:75:8d:ad:46:ad:df: 2c:d1:52:a7:0c:e6:9f:62:ad:0c:c3:75:b5:c3:0f:b7:a9:d8: 3b:09:e6:43:f6:2b:9d:26:4a:bc:1f:31:39:6e:4c:e4:9b:b9: e8:fd:17:55:c6:f9:93:b3:17:ea:fa:6c:88:89:89:44:15:51: 2d:a3:5e:d6:cb:fa:1e:14:7a:6c:34:0f:e4:eb:ad:62:e1:27: d8:a6:f3:59:c2:e3:24:0e:ba:a6:e4:7a:7f:7c:09:23:ac:57: 72:c3:18:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFi+IUgsi5fyGDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OTNjMTBiNGYtZjYyOC00Njc2LTg2YjUtNTJhZmViMThjZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nqw+63imRCbS1KiAmz4ZwhblMJ5kbI49GWE iAgT/MHQw4S9Sw6cKQrXwyuJRiaJYFwsJeslMor0QAamqNf+ODT1dtEvAsYlXchL eURIaJCILIKCLfXe0xbbLriPK2jbwPJN34Ozlk7cq56rntKu0uLLiuBUWOJT+KWY hGv8Xbh54E6FNDQIO1zfsv3+LboJWPfDV1UxLmwtmYAumIH9Ko7be6xM2YO181qz hnpJCLTFpOWiHRjhgRINZYnYEwVeKYYRiqSxZnRAho11tQJN3NB6K0bmi5tNfSA3 Z+vAADFtvGyresKJxHBKgMCn9n6vFGPwvMa6pIE8LNzZ0u9hvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBspK2EEiFZmM6ZIxZE3VXV9EW5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvOWJmNGE4ZTAtNzVmMi0z ZWZjLWFiNzQtNjUzYTI0ZDhiYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwIM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmbW3osgKNuJnfBxmhcEQp4LZPCfwiOxtdNar6iye1AG0Ro7cB0o84G G2gDpde4B+JIO3GGhFg2qLomSzlEs5W6dFMztNP8eI7zorddgfGPHZVXCrMBJDNv 7Mtuz5hkxTdSzg54UH40u8VawnyrSuakwPnVoLXjWhKU4oHE4OkabBx4o2xOcfZn 3rGSYYhRtuJ7K4vWRz31zgqttHWNrUat3yzRUqcM5p9irQzDdbXDD7ep2DsJ5kP2 K50mSrwfMTluTOSbuej9F1XG+ZOzF+r6bIiJiUQVUS2jXtbL+h4Uemw0D+TrrWLh J9im81nC4yQOuqbken98CSOsV3LDGPQ= -----END CERTIFICATE-----Generated at Wed Aug 20 18:41:29 2025 by rpki-client