$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa File: dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json) Hash identifier: X66s9F945pMHtt1Vk5Iu6SYZxlZT/fCwNrSiQ7aSY2w= Subject key identifier: 9A:A3:F3:A2:AB:E2:FE:75:6C:9D:EC:66:9F:DE:25:23:6D:DA:AF:16 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584AADF11FC36E314C6E645CA380 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13638 IP address blocks: 65.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1f:c3:6e:31:4c:6e:64:5c:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=ea0ad010-4d1c-464a-be22-f34de9288426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:4e:09:1f:bd:a9:b2:3a:fe:53:04:a6:77: d9:73:5e:e0:60:97:0b:7b:9b:c9:7a:2a:f6:7d:bf: 5e:76:b9:1b:27:26:0f:e8:d1:48:04:79:93:72:c0: f9:76:4f:09:c9:2f:44:94:ad:41:e0:d8:05:fa:9a: 33:80:d9:3e:eb:09:53:53:39:fc:8f:a2:6d:b9:4a: 89:c4:53:b4:66:06:31:e1:f7:24:a8:38:ac:4d:25: a4:2c:97:6d:96:37:ce:54:12:71:8c:b7:0d:bd:2f: 4e:35:9e:d1:21:f2:f0:63:13:78:a8:97:f4:63:81: 2b:ed:19:b2:2a:47:0f:ab:12:9d:ce:d8:6f:eb:2e: 5a:32:69:dc:fe:0d:64:4f:57:97:05:54:b5:1d:3d: 4f:64:64:1b:3e:54:60:4a:db:8c:e2:f5:2c:73:3f: b2:5b:59:4d:75:fa:f8:d9:4d:f3:c1:eb:e2:a8:5c: 25:c4:09:d9:a8:09:44:84:ee:bc:c8:1c:4c:00:4d: 51:65:f9:d4:6b:6d:7d:18:76:1c:d5:1a:2a:61:43: f0:86:a5:d3:3d:a7:84:43:59:be:d8:cd:fc:f4:3a: 2d:13:08:e4:0f:34:90:f3:d8:88:c6:98:59:55:65: 75:83:f4:d8:39:0f:88:e2:1a:a3:c2:8f:4b:86:31: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:F3:A2:AB:E2:FE:75:6C:9D:EC:66:9F:DE:25:23:6D:DA:AF:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 65.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f7:3a:b8:a2:d1:2e:47:d1:f7:b2:7e:ec:9a:bd:63:45:cb: 7a:56:bc:73:00:aa:48:f9:a5:6d:19:32:38:c2:13:49:bb:0d: 94:72:a6:78:b2:18:88:b3:f5:4f:87:37:1f:7e:32:5a:45:77: fe:65:5b:75:05:7c:b2:02:b2:70:f1:de:fa:96:48:38:82:6d: ae:23:98:3f:7c:50:ae:74:34:b9:bd:26:39:cb:17:94:18:31: 98:64:bf:7c:36:6c:9f:1c:90:49:04:fd:46:41:92:2c:d3:59: 73:ad:0e:8f:9d:33:21:dc:66:d4:17:69:14:11:aa:d6:e8:07: 4a:86:40:0b:72:32:5e:f3:ec:d8:2a:9a:f4:e2:82:18:f6:64: 86:9e:e5:f9:0f:2d:4a:29:5e:3c:13:b3:ea:de:09:40:a9:4b: 2e:bd:07:0b:41:e7:ba:82:71:b4:95:61:1c:55:7d:eb:05:df: 2c:87:c0:f3:ec:fa:a1:2f:0e:ca:de:ac:47:de:e7:2f:82:de: 95:e7:82:76:5c:94:db:c2:1a:1b:f6:bb:06:3c:4c:52:ae:af: 88:f4:37:0a:bc:dd:7d:b9:60:78:1e:c6:d9:f6:af:61:9c:64: 96:4e:9b:6d:06:9f:d8:67:3f:5b:fc:15:a2:34:93:d0:4a:bc: a3:ab:38:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R/DbjFMbmRco4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWEwYWQwMTAtNGQxYy00NjRhLWJlMjItZjM0ZGU5Mjg4NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGBOCR+9qbI6/lMEpnfZc17gYJcLe5vJeir2 fb9edrkbJyYP6NFIBHmTcsD5dk8JyS9ElK1B4NgF+pozgNk+6wlTUzn8j6JtuUqJ xFO0ZgYx4fckqDisTSWkLJdtljfOVBJxjLcNvS9ONZ7RIfLwYxN4qJf0Y4Er7Rmy KkcPqxKdzthv6y5aMmnc/g1kT1eXBVS1HT1PZGQbPlRgStuM4vUscz+yW1lNdfr4 2U3zweviqFwlxAnZqAlEhO68yBxMAE1RZfnUa219GHYc1RoqYUPwhqXTPaeEQ1m+ 2M389DotEwjkDzSQ89iIxphZVWV1g/TYOQ+I4hqjwo9LhjHPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqj86Kr4v51bJ3sZp/eJSNt2q8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvZGZlZjkxMDMtYjIzYy0z NDJjLTgzZGEtMTU5ZmQ1NzgwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI73Orii0S5H0feyfuyavWNFy3pWvHMAqkj5pW0ZMjjCE0m7DZRypniy GIiz9U+HNx9+MlpFd/5lW3UFfLICsnDx3vqWSDiCba4jmD98UK50NLm9JjnLF5QY MZhkv3w2bJ8ckEkE/UZBkizTWXOtDo+dMyHcZtQXaRQRqtboB0qGQAtyMl7z7Ngq mvTighj2ZIae5fkPLUopXjwTs+reCUCpSy69BwtB57qCcbSVYRxVfesF3yyHwPPs +qEvDsrerEfe5y+C3pXngnZclNvCGhv2uwY8TFKur4j0Nwq83X25YHgextn2r2Gc ZJZOm20Gn9hnP1v8FaI0k9BKvKOrOJc= -----END CERTIFICATE-----Generated at Thu Aug 7 17:30:58 2025 by rpki-client