$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa File: 6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa (raw, json) Hash identifier: WQ4vNlmk4VIBI9AthYrpt3b6gXwy8ke+ny//C8UT1l8= Subject key identifier: 31:57:BE:4A:68:83:1D:9C:A7:BA:EC:46:2A:29:4D:63:E5:D6:28:93 Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Certificate serial: 010D0C9F4328584AB220CBD17EABE89DFF559A00 Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 17216 IP address blocks: 192.151.136.0/21 maxlen: 24 198.24.12.0/22 maxlen: 24 199.47.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:cb:d1:7e:ab:e8:9d:ff:55:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=e251379f-d067-4262-ab08-a227fdd06188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:26:e8:30:ce:e1:63:b9:63:a4:67:ec:85: 43:66:33:81:99:2b:43:f8:23:68:dd:d9:a2:48:4a: 04:e6:ee:d6:41:45:1a:0e:c0:52:04:21:42:13:b1: 29:4f:1e:88:1d:00:36:d5:ad:17:e0:e4:bb:4c:08: 4b:e9:27:66:e8:c6:c0:59:5b:cf:32:97:21:7a:e5: 4e:28:6d:e6:41:d0:86:9c:18:ff:57:97:9b:aa:24: e3:9b:e0:29:93:23:74:ad:30:88:80:3c:4a:05:0e: 06:44:08:7c:0a:85:c2:03:c5:a5:a4:b0:71:7a:f7: da:01:e8:bc:54:ab:31:97:9f:34:8d:87:b3:51:9e: 2f:4c:a6:6d:dc:ed:6d:d0:71:cd:f5:c4:ac:45:c1: 80:e2:ed:50:c4:56:7f:21:73:62:9b:05:5e:5d:fd: e9:78:b8:43:c6:56:19:d4:63:6c:75:b7:e0:b7:a7: 6d:f4:71:39:a3:a3:52:11:4a:d3:7b:d2:a3:96:0e: 7e:6a:44:a5:8b:a1:9e:1e:43:0a:12:b1:d1:81:bc: 10:e1:ec:68:cb:1b:8d:03:c5:dd:c4:3a:ec:44:cc: 42:6b:3a:ce:f1:4f:22:88:4a:d3:2e:ed:70:d0:2a: 00:75:61:da:54:09:01:32:6e:b2:8a:f0:5d:4f:ab: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:57:BE:4A:68:83:1D:9C:A7:BA:EC:46:2A:29:4D:63:E5:D6:28:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl X509v3 Authority Key Identifier: keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer sbgp-ipAddrBlock: critical IPv4: 192.151.136.0/21 198.24.12.0/22 199.47.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:14:8b:eb:5f:ad:ac:48:0b:58:a9:0b:75:f3:1d:3b:a0:b1: 97:8b:7d:78:d0:f8:e4:02:ca:87:be:cb:fe:84:6f:62:1a:1a: 90:5f:5e:d0:ec:f9:12:5e:4c:bb:c9:a5:57:85:31:0b:4a:2e: 24:52:b7:bd:d5:86:e1:28:72:f4:0c:35:d7:96:d3:08:df:50: d4:31:56:75:ca:c5:f9:f0:a3:70:0f:05:70:28:ea:5d:44:6f: 40:f7:ad:cf:dc:91:51:ed:94:2a:27:7d:a2:95:83:e1:f5:71: e8:55:84:5a:a6:00:6a:25:6d:8b:a4:ff:29:1c:4e:d2:17:8c: cb:f2:0c:85:cf:de:10:3e:10:56:a4:25:88:fe:da:74:3d:c5: 5a:ee:f9:b1:32:dd:cf:6a:b8:86:5a:ef:6b:b5:8b:10:20:53: f9:e7:da:83:b9:1c:a7:b0:18:11:1b:23:71:36:71:23:97:d6: 38:5c:9b:2d:38:c8:ad:0a:79:24:bd:e1:34:52:0b:72:67:8c: 14:fe:36:2a:88:1c:14:ea:8c:a2:f9:3d:42:45:1d:fb:e8:7a: f0:f8:50:a9:a8:ae:74:ec:e3:f4:0c:20:70:0a:2b:f5:d9:da: 12:e5:f3:90:b7:34:2a:7e:7c:6d:59:d5:70:c2:f9:88:c9:ee: 1a:5e:a5:ad -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEqyIMvRfqvonf9VmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2 MjQ3MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTI1MTM3OWYtZDA2Ny00MjYyLWFiMDgtYTIyN2ZkZDA2MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8om6DDO4WO5Y6Rn7IVDZjOBmStD+CNo3dmi SEoE5u7WQUUaDsBSBCFCE7EpTx6IHQA21a0X4OS7TAhL6Sdm6MbAWVvPMpcheuVO KG3mQdCGnBj/V5ebqiTjm+ApkyN0rTCIgDxKBQ4GRAh8CoXCA8WlpLBxevfaAei8 VKsxl580jYezUZ4vTKZt3O1t0HHN9cSsRcGA4u1QxFZ/IXNimwVeXf3peLhDxlYZ 1GNsdbfgt6dt9HE5o6NSEUrTe9Kjlg5+akSli6GeHkMKErHRgbwQ4exoyxuNA8Xd xDrsRMxCazrO8U8iiErTLu1w0CoAdWHaVAkBMm6yivBdT6tojwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDFXvkpogx2cp7rsRiopTWPl1iiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvNmEzZGZmOTktMmY2Mi0z MDRlLWFlMWYtYWEwM2VhYmU3ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5 YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4 ZGRmZTYyNDcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDwJeIAwQC xhgMAwQDxy/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ0Ui+tfraxIC1ipC3XzHTugsZeLfXjQ+OQCyoe+ y/6Eb2IaGpBfXtDs+RJeTLvJpVeFMQtKLiRSt73VhuEocvQMNdeW0wjfUNQxVnXK xfnwo3APBXAo6l1Eb0D3rc/ckVHtlConfaKVg+H1cehVhFqmAGolbYuk/ykcTtIX jMvyDIXP3hA+EFakJYj+2nQ9xVru+bEy3c9quIZa72u1ixAgU/nn2oO5HKewGBEb I3E2cSOX1jhcmy04yK0KeSS94TRSC3JnjBT+NiqIHBTqjKL5PUJFHfvoevD4UKmo rnTs4/QMIHAKK/XZ2hLl85C3NCp+fG1Z1XDC+YjJ7hpepa0= -----END CERTIFICATE-----Generated at Sat Aug 9 20:34:24 2025 by rpki-client