$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa File: cd9eef01-ff5f-3461-982d-ae650cfc798a.roa (raw, json) Hash identifier: JQDYGwsj+kKbmWiE9Q+/5GMCoF4Gk2dOZAbYmxyIGL0= Subject key identifier: C5:7E:35:D1:3A:1B:C8:F7:4B:96:5C:64:AA:54:89:E8:5F:AD:8C:54 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584AC016411D64C06793C788E400 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 46455 IP address blocks: 74.214.0.0/20 maxlen: 24 143.223.224.0/20 maxlen: 20 146.12.128.0/19 maxlen: 24 146.12.192.0/20 maxlen: 24 158.247.32.0/20 maxlen: 24 195.85.64.0/23 maxlen: 24 195.85.118.0/23 maxlen: 24 206.82.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:41:1d:64:c0:67:93:c7:88:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=e364b4b3-84d3-44d7-8bf7-e9277bc3b544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:ed:d2:8b:e7:f5:78:b6:dc:51:e0:cb:bc: 40:2b:d8:4f:56:e1:ca:27:aa:f1:1a:ef:35:61:53: 1f:16:b7:18:78:11:aa:64:41:7c:64:e9:c7:79:5c: bc:e2:7f:9c:72:9a:dd:b0:31:6c:ac:78:9e:4e:37: e0:c0:03:be:b0:40:07:3d:b7:48:6c:42:d8:f1:ab: 1f:93:e7:7d:54:32:67:bc:e3:b1:f9:7d:c2:86:bd: 7c:fd:16:8f:64:83:82:01:5c:04:2a:58:f9:08:18: 0a:7e:da:64:20:d8:a3:5f:58:ed:3f:5f:7e:95:67: bc:4c:99:6f:1f:c3:9f:f3:c3:00:f3:d4:ff:0d:c6: 9e:e7:5c:06:3a:87:e1:0e:32:ba:87:4a:1b:32:39: 4a:8d:32:e5:6f:0f:a4:e0:be:d0:41:a3:0a:fd:55: 42:ee:42:af:c7:9d:5e:57:0c:4c:26:6f:f4:0b:1d: c6:f0:e7:e2:01:03:90:bb:8c:b8:23:25:3e:37:a2: 7e:8b:82:97:1f:19:de:59:73:d3:28:d1:e8:84:65: c6:44:48:88:d2:6d:61:5b:15:e5:78:20:b7:9b:46: 0b:e8:ef:be:36:a8:74:ac:e9:dc:43:8f:17:2d:fc: f3:58:0a:a9:a7:44:dc:35:91:5e:c7:76:3a:3e:cd: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:35:D1:3A:1B:C8:F7:4B:96:5C:64:AA:54:89:E8:5F:AD:8C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 74.214.0.0/20 143.223.224.0/20 146.12.128.0/19 146.12.192.0/20 158.247.32.0/20 195.85.64.0/23 195.85.118.0/23 206.82.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:86:73:1d:3e:7f:2a:e0:a0:bc:df:4a:91:37:97:8f:90:42: 3f:bb:10:75:9b:15:96:e2:35:dc:c7:f2:14:d3:ee:b2:6f:bd: 41:8b:da:c3:da:7f:02:ba:98:3a:96:be:95:5b:ab:b2:3e:4e: fa:0b:ea:81:4f:13:77:0f:2b:67:f3:50:97:75:80:ec:63:12: 33:97:f2:85:e5:de:02:9c:c5:bd:17:f5:7f:0e:68:7a:2f:5a: de:07:6c:3d:11:01:c1:1b:cf:be:93:1d:c5:e1:90:d6:8a:71: 75:3d:e2:65:02:47:7c:74:46:35:80:c5:d9:dc:b6:24:32:62: b4:3a:6f:b2:8d:33:3f:3a:a4:ff:9b:46:bf:00:c4:d3:c5:b1: 5a:8c:e2:68:52:f5:46:c3:cf:f3:b8:52:cb:85:54:e0:2e:9f: c4:1b:b9:4b:81:28:87:8e:f8:5a:1e:9d:bb:a7:fd:25:f1:b7: ab:d2:5f:4f:94:ee:3e:b4:f9:fb:8e:0e:d3:37:fb:a8:03:42: 8e:09:d5:8b:70:27:e3:52:14:4f:31:b8:a0:c5:6d:99:79:55: f4:2c:68:32:aa:1a:0b:4d:33:4a:7e:82:0f:78:0c:fe:9f:ac: 48:82:14:f6:ea:5b:cf:d9:87:b9:7f:30:20:12:1a:bf:e6:7f: 93:4e:35:c3 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWErAFkEdZMBnk8eI5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZTM2NGI0YjMtODRkMy00NGQ3LThiZjctZTkyNzdiYzNiNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr3t0ovn9Xi23FHgy7xAK9hPVuHKJ6rxGu81 YVMfFrcYeBGqZEF8ZOnHeVy84n+ccprdsDFsrHieTjfgwAO+sEAHPbdIbELY8asf k+d9VDJnvOOx+X3Chr18/RaPZIOCAVwEKlj5CBgKftpkINijX1jtP19+lWe8TJlv H8Of88MA89T/Dcae51wGOofhDjK6h0obMjlKjTLlbw+k4L7QQaMK/VVC7kKvx51e VwxMJm/0Cx3G8OfiAQOQu4y4IyU+N6J+i4KXHxneWXPTKNHohGXGREiI0m1hWxXl eCC3m0YL6O++Nqh0rOncQ48XLfzzWAqpp0TcNZFex3Y6Ps1u5QIDAQABo4IDfzCC A3swHQYDVR0OBBYEFMV+NdE6G8j3S5ZcZKpUiehfrYxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvY2Q5ZWVmMDEtZmY1Zi0z NDYxLTk4MmQtYWU2NTBjZmM3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEStYAAwQE j9/gAwQFkgyAAwQEkgzAAwQEnvcgAwQBw1VAAwQBw1V2AwQDzlJgMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEaGcx0+fyrgoLzfSpE3l4+QQj+7EHWbFZbiNdzH8hTT7rJvvUGL2sPafwK6mDqW vpVbq7I+TvoL6oFPE3cPK2fzUJd1gOxjEjOX8oXl3gKcxb0X9X8OaHovWt4HbD0R AcEbz76THcXhkNaKcXU94mUCR3x0RjWAxdnctiQyYrQ6b7KNMz86pP+bRr8AxNPF sVqM4mhS9UbDz/O4UsuFVOAun8QbuUuBKIeO+Foenbun/SXxt6vSX0+U7j60+fuO DtM3+6gDQo4J1YtwJ+NSFE8xuKDFbZl5VfQsaDKqGgtNM0p+gg94DP6frEiCFPbq W8/Zh7l/MCASGr/mf5NONcM= -----END CERTIFICATE-----Generated at Sat Aug 9 22:46:04 2025 by rpki-client