$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa File: ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa (raw, json) Hash identifier: y2mRpgFd1+F21Fd9TRHy8TNcs/8ZFrxh4LSv4TuVl1A= Subject key identifier: C3:31:D5:CB:65:15:A5:F2:47:A1:3A:E5:38:B2:77:48:B3:D0:05:91 Certificate issuer: /CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68 Certificate serial: 010D0C9F4328584AA6F62DCCFB2F64CCD9A0B900 Authority key identifier: 69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 11399 IP address blocks: 137.165.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2d:cc:fb:2f:64:cc:d9:a0:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=2abcad77-74e8-4a20-b76e-994935eeb8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:ea:5e:ea:bc:65:90:38:cb:e2:7b:0c:bd: 9f:0e:2d:98:33:ce:d1:5a:4a:a6:18:9a:24:bb:b8: c2:e7:77:75:b4:1e:29:54:ac:27:18:c6:a4:76:a7: 7d:65:f1:8c:d7:d6:28:25:53:3c:6a:ae:f7:96:7d: 00:2c:ee:34:78:d9:8e:1d:df:bf:03:bd:c9:07:0b: 0b:62:46:23:87:4a:c2:50:2e:dc:e7:58:5b:8c:06: fe:13:46:67:de:d7:bf:d8:b2:bd:0d:b8:b3:ad:54: ce:f6:a9:1d:5b:3f:d8:11:e5:97:bf:07:9c:3c:fc: d9:06:d3:cd:3a:4c:e4:c1:7a:ad:f5:2f:21:e8:10: d7:02:97:01:7e:12:47:ca:a6:06:18:8c:81:06:3d: 82:96:45:65:0c:7d:b1:b6:e4:be:00:2f:43:a4:15: 4e:97:82:3d:31:35:42:c5:97:eb:33:13:12:a3:bb: 80:47:bd:fc:39:5c:cd:ce:db:04:af:20:40:d7:16: fb:5d:16:56:59:4f:b0:72:14:06:c3:c1:7a:7a:26: bc:f5:8b:6b:ae:ca:22:8b:75:92:f8:04:70:d7:4f: 61:fc:8f:b2:ae:1d:42:55:6d:8d:b9:5c:3b:38:50: 11:fd:7c:ff:f2:5e:a7:8b:49:26:07:ab:59:7b:1a: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:31:D5:CB:65:15:A5:F2:47:A1:3A:E5:38:B2:77:48:B3:D0:05:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl X509v3 Authority Key Identifier: keyid:69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer sbgp-ipAddrBlock: critical IPv4: 137.165.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a9:f2:8f:4a:9b:2c:83:13:52:f4:94:1f:ca:d4:e1:75:6b: cf:81:4a:82:39:82:25:7b:99:81:6a:4e:e9:17:36:71:55:da: fc:a4:ae:3b:c7:97:c4:84:c7:cc:34:f4:20:30:d8:08:b7:81: b8:0d:56:1e:32:e5:49:c8:ed:a8:72:ba:49:31:28:99:4b:42: 5f:47:5a:37:b2:81:51:bd:36:4b:55:60:83:ac:45:e9:0a:cd: 2b:e6:5f:88:af:ac:b9:41:ed:af:cf:38:90:6c:43:02:38:c8: 3d:95:40:78:1a:e6:5f:ff:23:d9:37:f9:18:1e:aa:b0:47:ac: 65:33:cd:c6:3b:56:e2:ad:4c:2f:24:80:61:ea:89:7e:1d:81: 13:e5:57:ad:a2:c9:3e:35:bf:f0:2f:57:58:57:57:c0:b2:b0: 56:39:59:b6:fe:f7:1d:54:0f:11:d9:5a:2a:b2:5d:88:f9:21: 4b:01:6b:dd:ea:14:8f:90:50:8b:5b:8e:b8:80:cb:ba:ef:41: dc:89:0f:18:b2:15:db:3c:68:d5:c2:ef:7b:3e:65:e7:8d:d8: e2:54:89:5b:2b:54:66:9d:1b:3a:d7:d5:4f:32:de:6f:b0:a9: ee:63:30:4f:c8:e0:72:7c:c9:20:a5:07:8e:4d:7e:e0:24:cb: 03:e8:a9:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9i3M+y9kzNmguQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FlYjFjZjMtOWI2Ny00ZTY1LTkzZWUtMzk5NjBhMzky YjY4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MmFiY2FkNzctNzRlOC00YTIwLWI3NmUtOTk0OTM1ZWViOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+fqXuq8ZZA4y+J7DL2fDi2YM87RWkqmGJok u7jC53d1tB4pVKwnGMakdqd9ZfGM19YoJVM8aq73ln0ALO40eNmOHd+/A73JBwsL YkYjh0rCUC7c51hbjAb+E0Zn3te/2LK9DbizrVTO9qkdWz/YEeWXvwecPPzZBtPN OkzkwXqt9S8h6BDXApcBfhJHyqYGGIyBBj2ClkVlDH2xtuS+AC9DpBVOl4I9MTVC xZfrMxMSo7uAR738OVzNztsEryBA1xb7XRZWWU+wchQGw8F6eia89Ytrrsoii3WS +ARw109h/I+yrh1CVW2NuVw7OFAR/Xz/8l6ni0kmB6tZexrBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMx1ctlFaXyR6E65Tiyd0iz0AWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YWVi MWNmMy05YjY3LTRlNjUtOTNlZS0zOTk2MGEzOTJiNjgvYWI3MmFlN2EtYmJiNi0z ODNiLWJjZDUtZjBjOThjMGFiMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2FlYjFjZjMtOWI2Ny00ZTY1LTkz ZWUtMzk5NjBhMzkyYjY4LzdhZWIxY2YzLTliNjctNGU2NS05M2VlLTM5OTYwYTM5 MmI2OC5jcmwwHwYDVR0jBBgwFoAUaWEw9ZbcRLw1B/SBlYpkMmT4fKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YWViMWNmMy05YjY3LTRlNjUtOTNlZS0zOTk2 MGEzOTJiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiaUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACup8o9KmyyDE1L0lB/K1OF1a8+BSoI5giV7mYFqTukXNnFV2vykrjvH l8SEx8w09CAw2Ai3gbgNVh4y5UnI7ahyukkxKJlLQl9HWjeygVG9NktVYIOsRekK zSvmX4ivrLlB7a/POJBsQwI4yD2VQHga5l//I9k3+RgeqrBHrGUzzcY7VuKtTC8k gGHqiX4dgRPlV62iyT41v/AvV1hXV8CysFY5Wbb+9x1UDxHZWiqyXYj5IUsBa93q FI+QUItbjriAy7rvQdyJDxiyFds8aNXC73s+ZeeN2OJUiVsrVGadGzrX1U8y3m+w qe5jME/I4HJ8ySClB45NfuAkywPoqXk= -----END CERTIFICATE-----Generated at Tue Aug 5 23:05:42 2025 by rpki-client