$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/8508b6ab-5612-30f4-9b31-a08c4aea66e7.roa File: 8508b6ab-5612-30f4-9b31-a08c4aea66e7.roa (raw, json) Hash identifier: cVqopfEUSKxVaXgwCSpyI4AvQmu7GxioCGTdTef03Ho= Subject key identifier: 87:E6:AF:9D:E8:5D:EF:F9:31:72:91:16:69:48:2D:DB:18:F1:45:3E Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584AE6CA30C0801747A4B491B7F0 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/8508b6ab-5612-30f4-9b31-a08c4aea66e7.roa Signing time: Mon 18 Aug 2025 21:32:53 +0000 ROA not before: Mon 18 Aug 2025 21:32:53 +0000 ROA not after: Sun 16 Nov 2025 22:32:53 +0000 asID: 399480 IP address blocks: 128.247.0.0/16 maxlen: 16 137.167.0.0/16 maxlen: 16 146.252.0.0/16 maxlen: 16 157.87.0.0/16 maxlen: 16 157.170.0.0/16 maxlen: 16 192.31.38.0/24 maxlen: 24 192.48.249.0/24 maxlen: 24 192.48.250.0/24 maxlen: 24 192.55.223.0/24 maxlen: 24 192.58.102.0/24 maxlen: 24 192.58.103.0/24 maxlen: 24 192.58.104.0/24 maxlen: 24 192.58.105.0/24 maxlen: 24 192.58.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:ca:30:c0:80:17:47:a4:b4:91:b7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Aug 18 21:32:53 2025 GMT Not After : Nov 16 22:32:53 2025 GMT Subject: CN=aa329eba-4b26-46e3-af1f-647bcf3afef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:7f:8f:ee:9b:4c:ee:37:77:a5:5f:94:2a: 49:ba:e8:27:9f:1b:85:ad:67:fe:dd:32:fc:64:cf: 6b:77:06:b4:06:b6:2c:1f:e6:7d:3d:c7:fa:5e:46: f6:c1:d2:41:9c:fb:06:c6:c1:58:8e:55:c6:1d:4e: e7:cd:fe:85:46:0d:07:d1:7f:d6:be:af:44:f3:87: 50:f3:ff:d0:cb:9f:f2:50:c1:9d:6d:f0:48:ef:bd: a2:83:b4:e8:36:4d:57:c7:17:a3:2f:fd:ac:39:84: 02:23:20:e5:1e:fc:6d:06:79:b3:eb:f4:d0:26:44: 36:4e:99:a0:e7:bc:2b:f8:01:77:97:a5:74:23:47: 83:61:67:87:aa:c6:71:c8:fb:d9:02:0c:2c:50:2f: be:4d:9d:a6:9f:db:13:9b:82:49:e6:a3:14:95:20: 17:5b:57:d8:4c:a1:be:87:24:54:a3:92:81:e3:39: 82:9d:13:20:93:ab:69:b9:04:3e:62:c2:fb:f0:d3: 46:08:07:cb:45:e1:f2:b5:27:7e:2a:6e:aa:3c:64: 34:18:92:18:ac:30:19:cb:e7:1c:53:03:01:ce:46: 5a:ec:b6:04:0c:9f:63:3e:ee:39:5e:cc:a9:17:b7: 80:fb:61:f4:f2:9a:46:5c:5b:13:12:d0:2f:2a:1c: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E6:AF:9D:E8:5D:EF:F9:31:72:91:16:69:48:2D:DB:18:F1:45:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/8508b6ab-5612-30f4-9b31-a08c4aea66e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 128.247.0.0/16 137.167.0.0/16 146.252.0.0/16 157.87.0.0/16 157.170.0.0/16 192.31.38.0/24 192.48.249.0-192.48.250.255 192.55.223.0/24 192.58.102.0-192.58.106.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ae:ad:6a:32:48:e2:7c:78:8b:b5:e6:3f:b9:c7:3e:b1:ee: 60:da:c5:cd:79:e0:88:11:91:0e:20:8b:a0:1a:a0:d9:0b:09: c5:b5:f8:b8:8a:5f:8a:57:69:3a:ca:56:ad:44:2c:c7:9a:25: 6c:9a:08:70:75:d3:8f:64:5e:48:f9:66:5a:40:c6:3c:1c:2e: 11:97:b7:7b:a2:65:4d:64:51:2d:ce:19:37:77:95:d1:17:5c: d3:97:10:8f:05:1c:eb:7c:8a:34:14:ce:b7:02:df:c5:11:d5: 35:5f:2e:bf:a4:15:c6:a3:e4:b5:b4:d7:fb:5f:51:25:d3:3b: eb:a1:74:01:b6:22:cd:8d:18:b6:48:39:c2:2d:af:8a:ef:ae: 76:5e:da:c5:62:98:d0:f2:92:03:27:9f:e2:a4:ab:8e:63:6e: d8:a8:3a:50:6b:05:78:d5:83:ab:8f:6e:27:03:7a:55:40:26: 74:21:e4:f8:4c:27:bf:c4:b5:9f:eb:32:f0:c8:18:ca:8d:36: ce:83:84:b1:56:bf:43:22:78:d0:4b:4d:93:0c:ca:fa:65:96: 94:bd:d9:87:1d:35:aa:2a:5d:83:9d:09:d4:cb:31:2f:f5:35: 0e:b8:84:93:c3:f5:28:40:0f:74:ac:0e:ea:5b:8d:b7:02:9e: 50:0d:f3:45 -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUAQ0Mn0MoWErmyjDAgBdHpLSRt/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI1MDgxODIxMzI1M1oXDTI1MTExNjIyMzI1M1owLzEtMCsGA1UEAxMk YWEzMjllYmEtNGIyNi00NmUzLWFmMWYtNjQ3YmNmM2FmZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9p/j+6bTO43d6VflCpJuugnnxuFrWf+3TL8 ZM9rdwa0BrYsH+Z9Pcf6Xkb2wdJBnPsGxsFYjlXGHU7nzf6FRg0H0X/Wvq9E84dQ 8//Qy5/yUMGdbfBI772ig7ToNk1XxxejL/2sOYQCIyDlHvxtBnmz6/TQJkQ2Tpmg 57wr+AF3l6V0I0eDYWeHqsZxyPvZAgwsUC++TZ2mn9sTm4JJ5qMUlSAXW1fYTKG+ hyRUo5KB4zmCnRMgk6tpuQQ+YsL78NNGCAfLReHytSd+Km6qPGQ0GJIYrDAZy+cc UwMBzkZa7LYEDJ9jPu45XsypF7eA+2H08ppGXFsTEtAvKhyB0wIDAQABo4IDkDCC A4wwHQYDVR0OBBYEFIfmr53oXe/5MXKRFmlILdsY8UU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvODUwOGI2YWItNTYxMi0z MGY0LTliMzEtYTA4YzRhZWE2NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMFoGCCsGAQUFBwEHAQH/BEswSTBHBAIAATBBAwMAgPcDAwCJ pwMDAJL8AwMAnVcDAwCdqgMEAMAfJjAMAwQAwDD5AwQAwDD6AwQAwDffMAwDBAHA OmYDBADAOmowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAda6tajJI4nx4i7XmP7nHPrHuYNrFzXngiBGRDiCL oBqg2QsJxbX4uIpfildpOspWrUQsx5olbJoIcHXTj2ReSPlmWkDGPBwuEZe3e6Jl TWRRLc4ZN3eV0Rdc05cQjwUc63yKNBTOtwLfxRHVNV8uv6QVxqPktbTX+19RJdM7 66F0AbYizY0Ytkg5wi2viu+udl7axWKY0PKSAyef4qSrjmNu2Kg6UGsFeNWDq49u JwN6VUAmdCHk+Ewnv8S1n+sy8MgYyo02zoOEsVa/QyJ40EtNkwzK+mWWlL3Zhx01 qipdg50J1MsxL/U1DriEk8P1KEAPdKwO6luNtwKeUA3zRQ== -----END CERTIFICATE-----Generated at Wed Aug 20 03:38:02 2025 by rpki-client