$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa File: d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa (raw, json) Hash identifier: 9WqMEgsvUVbwzkaQQ1mc0xlXkGMgeYC1puXBjk7w9xw= Subject key identifier: 6E:AF:6C:25:12:F6:3E:A2:59:C5:DA:07:7C:3F:8D:8F:C8:23:C2:8B Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584AA6F62DA3BFE853A42F27B4E8 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 144.81.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2d:a3:bf:e8:53:a4:2f:27:b4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=b6a315f0-b33c-429b-8140-fbe1fd09325c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:d2:7a:ca:a3:a3:74:9b:ed:7b:e9:08:d8: 47:69:32:38:00:1d:0a:55:50:de:94:a8:43:35:16: 5a:be:64:70:65:96:ae:ff:3d:62:ba:4c:66:54:a9: 42:53:69:23:cd:0b:91:f1:6b:26:9b:80:e5:84:2b: ca:27:89:ff:80:3e:31:d1:df:aa:f1:24:4d:ec:83: d3:30:41:b7:d4:25:79:91:ff:40:96:88:6e:61:5c: d3:5c:65:55:f0:da:6b:a4:78:70:81:05:83:12:11: 89:bd:3d:44:0b:cc:3f:f5:30:52:84:5c:ac:81:a7: 66:7c:bb:5c:ad:97:e1:5a:ea:5d:5c:91:6a:b5:f7: 0e:d7:b5:96:90:f1:fd:25:73:f1:d2:52:ba:4b:13: d1:7a:d6:e8:28:cd:87:19:6d:f8:72:10:db:f7:59: 65:1f:af:da:a1:f5:22:28:b2:03:e6:f8:ac:ed:9f: ad:6b:93:47:a8:00:ab:bf:d8:ae:91:27:8b:37:9b: bf:9b:f0:3d:60:9a:81:97:2f:d2:16:30:e4:b9:03: 00:48:0a:90:dc:55:43:25:c0:44:4b:e6:30:3e:0d: 9f:1c:ea:f7:52:3c:99:bf:dd:de:79:01:de:be:6c: 49:39:ca:82:06:da:4c:83:0d:b8:4d:8d:3a:39:df: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:6C:25:12:F6:3E:A2:59:C5:DA:07:7C:3F:8D:8F:C8:23:C2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:03:d4:27:e8:93:e9:d0:4e:b4:df:fa:9a:d0:01:f3:d4:65: 5a:8f:05:64:e7:96:65:f0:17:89:38:f1:9e:a3:2d:00:d8:34: d7:e9:a4:37:89:c3:f4:4d:ec:a7:b3:f4:fd:f8:e9:c5:58:b0: 06:24:22:7d:17:ed:5c:79:84:ab:12:e8:32:75:aa:cc:00:f6: c7:33:5c:71:67:6c:40:bd:a1:80:47:c9:71:3a:78:5c:74:8e: a8:f4:5a:7e:71:3b:f9:6b:77:24:97:fc:6d:39:41:17:25:65: 33:84:78:e3:78:c4:e4:00:31:2c:d0:44:b4:2a:7e:66:93:69: 4d:77:c1:88:ee:cf:d0:c9:f8:5c:2f:3c:89:d7:29:f0:66:f4: 8f:b1:6f:4d:a5:0d:7f:b6:c3:63:24:69:90:e1:11:44:3b:a3: 42:0d:b0:18:92:05:d6:3a:41:5f:dd:68:f6:87:a2:2a:aa:60: 9e:75:98:64:dc:d5:25:6e:84:ae:53:6f:ea:03:d1:39:22:5e: 45:98:bf:1e:9d:15:44:de:c6:cc:f5:d6:35:10:35:1f:77:80: 0c:50:0a:4b:02:be:1a:a2:b1:a3:70:b7:1b:a8:1c:7d:81:97: 38:4c:6b:23:71:a9:2b:60:73:5f:c1:a7:5a:8f:8d:ef:c0:e8: e1:bc:e1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9i2jv+hTpC8ntOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YjZhMzE1ZjAtYjMzYy00MjliLTgxNDAtZmJlMWZkMDkzMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzrSesqjo3Sb7XvpCNhHaTI4AB0KVVDelKhD NRZavmRwZZau/z1iukxmVKlCU2kjzQuR8Wsmm4DlhCvKJ4n/gD4x0d+q8SRN7IPT MEG31CV5kf9AlohuYVzTXGVV8NprpHhwgQWDEhGJvT1EC8w/9TBShFysgadmfLtc rZfhWupdXJFqtfcO17WWkPH9JXPx0lK6SxPRetboKM2HGW34chDb91llH6/aofUi KLID5vis7Z+ta5NHqACrv9iukSeLN5u/m/A9YJqBly/SFjDkuQMASAqQ3FVDJcBE S+YwPg2fHOr3UjyZv93eeQHevmxJOcqCBtpMgw24TY06Od9AYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6vbCUS9j6iWcXaB3w/jY/II8KLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvZDZlMDdjNWEtYWU0YS0z YmM2LWFjMjgtNThiOTlkOTZiYmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkFGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4D1Cfok+nQTrTf+prQAfPUZVqPBWTnlmXwF4k48Z6jLQDYNNfppDeJ w/RN7Kez9P346cVYsAYkIn0X7Vx5hKsS6DJ1qswA9sczXHFnbEC9oYBHyXE6eFx0 jqj0Wn5xO/lrdySX/G05QRclZTOEeON4xOQAMSzQRLQqfmaTaU13wYjuz9DJ+Fwv PInXKfBm9I+xb02lDX+2w2MkaZDhEUQ7o0INsBiSBdY6QV/daPaHoiqqYJ51mGTc 1SVuhK5Tb+oD0TkiXkWYvx6dFUTexsz11jUQNR93gAxQCksCvhqisaNwtxuoHH2B lzhMayNxqStgc1/Bp1qPje/A6OG84Sw= -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:24 2025 by rpki-client