$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa File: cebb264b-8916-3bf8-971e-9c880ec664a8.roa (raw, json) Hash identifier: 15fP6lhk9158E8xcA0/QlWW+huJhOwn8Zcw4T4VWCdg= Subject key identifier: 33:05:BD:2A:21:7B:C9:DA:99:31:E2:44:54:BB:06:A2:37:3B:38:B7 Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Certificate serial: 010D0C9F4328584A9A66352F9BA964AEFDFB2100 Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 53698 IP address blocks: 23.174.128.0/24 maxlen: 24 23.174.129.0/24 maxlen: 24 23.175.16.0/24 maxlen: 24 165.140.128.0/23 maxlen: 24 192.33.139.0/24 maxlen: 24 209.209.4.0/22 maxlen: 24 2604:6040::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:35:2f:9b:a9:64:ae:fd:fb:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=5b303168-633b-40a4-8db8-af55c8b0eace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:de:58:20:3f:af:73:67:bc:dc:3b:9a:ec:71: 27:ae:ed:1c:3e:ac:62:f7:15:e0:9c:94:14:0d:25: 43:a8:68:04:6d:5c:64:9f:fd:50:f3:4b:f9:21:16: 4f:ed:d8:80:0d:aa:76:1d:5b:d0:7a:5d:57:6d:e5: 31:cd:20:6d:3c:3b:09:d4:3e:fe:bb:d9:49:0a:c9: 3d:4c:18:9c:bf:4b:13:a8:92:34:b3:ab:40:03:9d: c7:7a:33:62:50:3e:50:80:50:6a:a9:33:3c:74:5d: ba:96:89:29:38:77:4a:1a:9b:75:bc:37:09:95:fa: e2:69:30:34:5b:55:87:8f:80:e4:fc:e6:86:50:b0: 85:d6:bd:3e:b0:9a:cd:a2:f7:89:34:2f:d6:0f:98: 31:97:8d:a9:63:8c:d1:64:72:38:3a:88:be:48:48: 21:87:43:99:61:3c:42:32:cd:fc:0b:5e:64:39:79: 34:16:be:0e:6a:76:ed:7c:47:b6:7a:10:6a:51:60: 9a:40:51:4a:0d:ab:59:a8:21:4b:6d:74:fc:b8:7b: c3:e2:4d:00:3b:2f:e9:b6:cd:70:cb:50:f6:9b:11: 85:b7:44:06:78:c1:2a:6c:bf:19:c0:c1:42:a4:cf: 74:b1:22:5e:9d:96:ec:06:dc:e2:1c:f6:57:e6:e8: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:05:BD:2A:21:7B:C9:DA:99:31:E2:44:54:BB:06:A2:37:3B:38:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl X509v3 Authority Key Identifier: keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer sbgp-ipAddrBlock: critical IPv4: 23.174.128.0/23 23.175.16.0/24 165.140.128.0/23 192.33.139.0/24 209.209.4.0/22 IPv6: 2604:6040::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f7:a1:42:3b:3a:43:10:4c:ad:f9:1a:f2:25:39:09:8b:74: 37:65:3c:43:76:4e:7d:ea:18:7c:d0:ef:33:96:66:41:d0:bd: 61:fc:cd:22:69:e8:3c:bf:68:a6:03:2e:8b:88:a4:2a:04:84: 19:c4:14:a9:69:f6:31:40:ee:fc:21:3b:44:2e:cc:75:57:7b: c9:6f:f6:86:7c:6d:bf:6f:2f:9a:78:ea:42:17:50:ce:e2:58: 45:c9:5f:94:0b:67:ea:2c:d1:96:e0:2e:e9:08:48:dc:f5:ae: 4d:d3:09:d4:e2:d9:c5:99:70:24:cc:74:2e:fb:9b:7c:4a:e3: 46:1b:10:e5:98:7c:dd:97:d6:ec:30:fd:19:46:59:36:4e:a5: fe:b2:be:72:dd:b0:f5:65:1e:e0:f8:67:96:a5:f4:a4:72:a0: 08:52:32:9d:79:e3:38:d7:86:12:59:5d:14:93:ae:f9:7c:37: 74:76:f0:cf:75:15:4d:2b:9f:b9:51:72:16:3b:c4:67:b0:ba: e6:28:14:73:e4:31:a2:ec:7d:17:e9:f2:24:f4:a0:2c:db:51: 5a:a2:a8:f1:82:23:5a:39:60:e2:fb:fc:e7:8b:5c:f3:4b:60: de:ac:61:3d:83:56:a1:99:ce:84:4c:e0:0f:78:ae:6b:04:75: 13:e0:07:c7 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEqaZjUvm6lkrv37IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZTM1ZjktYmZlMS00YzY5LWJiMzItY2QyNTJjMTI1 YzY1MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk NWIzMDMxNjgtNjMzYi00MGE0LThkYjgtYWY1NWM4YjBlYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN5YID+vc2e83Dua7HEnru0cPqxi9xXgnJQU DSVDqGgEbVxkn/1Q80v5IRZP7diADap2HVvQel1XbeUxzSBtPDsJ1D7+u9lJCsk9 TBicv0sTqJI0s6tAA53HejNiUD5QgFBqqTM8dF26lokpOHdKGpt1vDcJlfriaTA0 W1WHj4Dk/OaGULCF1r0+sJrNoveJNC/WD5gxl42pY4zRZHI4Ooi+SEghh0OZYTxC Ms38C15kOXk0Fr4OanbtfEe2ehBqUWCaQFFKDatZqCFLbXT8uHvD4k0AOy/pts1w y1D2mxGFt0QGeMEqbL8ZwMFCpM90sSJenZbsBtziHPZX5uhq3QIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFDMFvSohe8namTHiRFS7BqI3Ozi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MTVl MzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1MmMxMjVjNjUvY2ViYjI2NGItODkxNi0z YmY4LTk3MWUtOWM4ODBlYzY2NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjE1ZTM1ZjktYmZlMS00YzY5LWJi MzItY2QyNTJjMTI1YzY1LzYxNWUzNWY5LWJmZTEtNGM2OS1iYjMyLWNkMjUyYzEy NWM2NS5jcmwwHwYDVR0jBBgwFoAUfPNnR7JaJ7Vbv8yDaNxdsrhE0sIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MTVlMzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1 MmMxMjVjNjUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBF66AAwQA F68QAwQBpYyAAwQAwCGLAwQC0dEEMA4EAgACMAgDBgQmBGBAADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBs 96FCOzpDEEyt+RryJTkJi3Q3ZTxDdk596hh80O8zlmZB0L1h/M0iaeg8v2imAy6L iKQqBIQZxBSpafYxQO78ITtELsx1V3vJb/aGfG2/by+aeOpCF1DO4lhFyV+UC2fq LNGW4C7pCEjc9a5N0wnU4tnFmXAkzHQu+5t8SuNGGxDlmHzdl9bsMP0ZRlk2TqX+ sr5y3bD1ZR7g+GeWpfSkcqAIUjKdeeM414YSWV0Uk675fDd0dvDPdRVNK5+5UXIW O8RnsLrmKBRz5DGi7H0X6fIk9KAs21FaoqjxgiNaOWDi+/zni1zzS2DerGE9g1ah mc6ETOAPeK5rBHUT4AfH -----END CERTIFICATE-----Generated at Thu Aug 7 17:36:06 2025 by rpki-client