$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa File: 541ab674-14b2-3b2e-80e5-618bee482529.roa (raw, json) Hash identifier: mp6eVYhL9HKN8BLXzIu3xhA5FeREEYRarI9qJnlRs5s= Subject key identifier: 42:EA:CD:07:74:49:76:1E:02:07:6F:8E:31:0A:2F:FB:11:15:DD:62 Certificate issuer: /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a Certificate serial: 010D0C9F4328584AB7B61B914335547721F81680 Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 394177 IP address blocks: 64.20.216.0/22 maxlen: 32 170.39.176.0/22 maxlen: 32 209.112.76.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:1b:91:43:35:54:77:21:f8:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=5a17257e-bcd8-47ea-ae45-64b2b856539f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:21:92:0f:9a:cf:0d:24:5c:10:7c:24:4c: 3a:ff:5a:ce:d0:ab:a4:d9:62:f5:50:c0:fa:f3:d9: 21:84:e8:92:f0:5a:e8:ec:2c:58:00:bf:09:1c:dd: 60:5c:fc:91:a3:b9:57:6a:38:14:5d:6c:26:7e:32: 2d:f5:3e:ec:12:14:05:6e:d5:ea:e8:0a:cd:2b:1d: a9:59:38:57:ef:c7:16:02:7e:3a:6e:b2:61:5c:05: 8c:6f:aa:8d:03:50:f5:d3:d9:25:e7:2e:28:c2:56: ea:f9:d0:5d:19:a6:97:b4:78:eb:b6:fe:52:8d:58: 73:4e:ec:85:14:6e:ca:2d:d7:3f:a6:da:26:57:fe: f7:70:d5:fd:ce:06:a3:99:49:31:73:e3:c5:1e:07: 49:3e:81:8d:c3:84:bd:ac:0b:8e:1e:11:3c:47:e5: f8:60:e1:1a:c3:f1:ee:0e:92:ee:da:15:5c:a6:b6: d4:6f:39:db:f5:bc:ce:77:64:14:e0:f9:39:84:db: df:f8:94:50:83:1f:d8:3f:5b:9f:5d:d4:45:9e:cc: fe:f5:99:0b:e3:a1:08:7d:14:db:cc:d9:f2:47:1b: f3:d6:14:b3:f0:66:8b:39:50:de:fc:3e:76:2b:00: 8d:78:42:cb:0d:1c:74:35:fe:75:b4:2f:b3:ae:72: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EA:CD:07:74:49:76:1E:02:07:6F:8E:31:0A:2F:FB:11:15:DD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl X509v3 Authority Key Identifier: keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer sbgp-ipAddrBlock: critical IPv4: 64.20.216.0/22 170.39.176.0/22 209.112.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:99:f1:4c:5b:da:27:17:95:ec:22:a1:08:e4:85:94:34:eb: 29:32:2a:c7:8d:ad:3f:f8:57:ee:5f:0e:d5:3b:b3:66:2f:10: 7b:a7:90:25:41:7b:50:b4:bd:cf:40:a9:6e:10:19:bd:41:a5: a9:ca:e2:11:15:08:a7:97:c9:75:3b:53:d1:e5:15:b8:06:5c: cf:2e:65:c6:73:3c:06:e5:33:e9:2f:b1:bf:f6:dc:bf:c5:b3: d7:00:b4:9b:e9:9d:61:a4:01:75:24:66:81:db:f3:1b:d2:ca: 7a:a5:95:79:39:1b:35:e1:41:72:9d:48:cd:41:e4:4f:04:84: 8f:71:7f:f2:39:fe:97:c5:75:ec:b5:3c:7a:18:61:02:ce:fd: cc:90:0c:a5:30:dc:a2:db:92:36:65:73:29:b9:f0:89:24:50: ae:0b:e0:cc:5c:11:ef:49:aa:59:d3:66:aa:8b:c0:c3:ae:66: f3:7e:71:96:13:a0:ea:8c:c0:32:f2:68:88:30:9f:70:b0:99: cc:1b:ce:f5:43:c6:2f:04:6d:58:08:13:f1:b8:39:72:50:3d: 53:5c:93:67:4e:94:37:cd:99:3f:97:4c:fc:86:1d:e4:f1:ae: e4:1c:45:1e:46:36:b4:3a:bc:f1:cb:90:79:8a:06:ae:3f:27: 55:f0:27:af -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEq3thuRQzVUdyH4FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRiYmJjYTAtMDFmNS00YzcyLTk1OGYtOWU1ZWUyYzk5 ZTJhMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NWExNzI1N2UtYmNkOC00N2VhLWFlNDUtNjRiMmI4NTY1MzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+chkg+azw0kXBB8JEw6/1rO0Kuk2WL1UMD6 89khhOiS8Fro7CxYAL8JHN1gXPyRo7lXajgUXWwmfjIt9T7sEhQFbtXq6ArNKx2p WThX78cWAn46brJhXAWMb6qNA1D109kl5y4owlbq+dBdGaaXtHjrtv5SjVhzTuyF FG7KLdc/ptomV/73cNX9zgajmUkxc+PFHgdJPoGNw4S9rAuOHhE8R+X4YOEaw/Hu DpLu2hVcprbUbznb9bzOd2QU4Pk5hNvf+JRQgx/YP1ufXdRFnsz+9ZkL46EIfRTb zNnyRxvz1hSz8GaLOVDe/D52KwCNeELLDRx0Nf51tC+zrnI13wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFELqzQd0SXYeAgdvjjEKL/sRFd1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJi YmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVlZTJjOTllMmEvNTQxYWI2NzQtMTRiMi0z YjJlLTgwZTUtNjE4YmVlNDgyNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWRiYmJjYTAtMDFmNS00YzcyLTk1 OGYtOWU1ZWUyYzk5ZTJhLzFkYmJiY2EwLTAxZjUtNGM3Mi05NThmLTllNWVlMmM5 OWUyYS5jcmwwHwYDVR0jBBgwFoAUQXx7qDTtgQOChu7Zl/pwHFtvJwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJiYmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVl ZTJjOTllMmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQBTYAwQC qiewAwQC0XBMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAE+Z8Uxb2icXlewioQjkhZQ06ykyKseNrT/4V+5f DtU7s2YvEHunkCVBe1C0vc9AqW4QGb1BpanK4hEVCKeXyXU7U9HlFbgGXM8uZcZz PAblM+kvsb/23L/Fs9cAtJvpnWGkAXUkZoHb8xvSynqllXk5GzXhQXKdSM1B5E8E hI9xf/I5/pfFdey1PHoYYQLO/cyQDKUw3KLbkjZlcym58IkkUK4L4MxcEe9JqlnT ZqqLwMOuZvN+cZYToOqMwDLyaIgwn3CwmcwbzvVDxi8EbVgIE/G4OXJQPVNck2dO lDfNmT+XTPyGHeTxruQcRR5GNrQ6vPHLkHmKBq4/J1XwJ68= -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:47 2025 by rpki-client