$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/c0b52f4d-0326-338f-9638-2cfd7695176e.roa File: c0b52f4d-0326-338f-9638-2cfd7695176e.roa (raw, json) Hash identifier: egJDDYYg/2o5OfK+pjsWYOjEFnAc4k4EFG+qjkr4RH0= Subject key identifier: 08:CB:C7:0F:A8:59:F3:B0:18:A7:FD:C0:E7:40:A8:5D:9A:1C:0C:CD Certificate issuer: /CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b Certificate serial: 010D0C9F4328584AB38624D3C49A9B476DEDCF00 Authority key identifier: 7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/c0b52f4d-0326-338f-9638-2cfd7695176e.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 400521 IP address blocks: 64.52.192.0/18 maxlen: 24 96.43.192.0/19 maxlen: 24 167.224.16.0/20 maxlen: 24 168.75.176.0/20 maxlen: 24 198.101.48.0/20 maxlen: 24 207.174.115.0/24 maxlen: 24 2605:1480::/32 maxlen: 48 2606:c040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:24:d3:c4:9a:9b:47:6d:ed:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=4494487a-f196-46be-b556-b6c015d25f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7b:4c:61:e2:e8:34:7a:2a:ba:24:30:5e:1e: 40:61:ac:0c:1e:8c:5d:80:f1:5d:77:4f:ab:83:cd: 81:76:6c:b2:7a:4e:e4:62:12:59:f7:e7:5a:cb:8d: 7f:9d:93:0c:b8:cc:67:0d:9d:29:39:f8:99:ff:a4: 58:49:9a:67:54:34:0e:05:31:83:75:bb:13:f1:b9: d1:49:56:b7:30:b3:96:0d:ba:51:a7:22:d5:60:26: 97:67:b1:59:72:72:da:8e:b9:dd:c7:29:56:d5:f9: bc:1f:e8:bd:e0:20:ac:3d:eb:c6:d5:91:fa:3c:64: 93:86:97:db:03:3c:c1:fc:3a:1d:fa:fa:b4:c5:d1: 7d:cf:f8:a8:2f:b3:3d:a7:a9:73:4d:6b:3b:12:f5: 9a:a4:d8:a9:aa:b9:f3:0d:5f:c5:05:ee:17:5b:1b: 3e:c0:11:97:31:84:ac:29:76:0a:75:63:a7:f1:d1: 81:ac:3f:e2:c6:8a:68:ed:e3:e3:c3:c4:bc:c3:56: 89:4d:ed:17:9a:fd:f9:25:a2:67:9a:7e:d0:71:c2: 3e:07:f2:0b:e7:9f:5f:4b:ca:0e:5a:32:53:1e:67: 16:0f:4f:8b:3b:6d:a7:6f:9a:38:5d:f5:e2:92:35: dc:7b:60:8a:ec:e7:ea:6b:c3:2b:ca:f5:3c:42:39: dd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CB:C7:0F:A8:59:F3:B0:18:A7:FD:C0:E7:40:A8:5D:9A:1C:0C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/c0b52f4d-0326-338f-9638-2cfd7695176e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.crl X509v3 Authority Key Identifier: keyid:7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer sbgp-ipAddrBlock: critical IPv4: 64.52.192.0/18 96.43.192.0/19 167.224.16.0/20 168.75.176.0/20 198.101.48.0/20 207.174.115.0/24 IPv6: 2605:1480::/32 2606:c040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:70:5e:77:77:18:c8:99:e5:c0:52:38:14:30:d3:c9:85:f0: 3c:d6:cd:32:c0:49:a3:7a:d4:b5:b5:d3:30:66:26:4f:8e:92: de:0a:6d:95:3a:c8:49:04:b8:55:0e:7f:df:31:90:52:91:10: ee:02:2a:f9:25:9c:7d:9d:2b:f3:10:f8:7b:47:db:41:3b:6b: 83:f6:1c:89:9a:5c:1c:0f:fc:33:6d:90:e7:bc:cd:db:4e:54: c0:a8:55:55:fe:b2:9e:d5:62:e0:b5:75:c0:c4:33:7e:5b:db: 67:8d:2e:a8:74:e7:da:3a:6b:a2:9c:c0:eb:d6:59:3e:ce:11: 45:db:52:40:09:5f:3f:42:77:a9:b1:62:ac:84:41:eb:ca:36: 4f:6e:95:65:44:f2:3f:0c:d4:24:17:d1:67:54:f3:cc:43:d1: 9d:c7:dc:4b:1b:e5:67:2e:08:7a:38:6d:08:4e:fc:04:34:7d: 38:a5:8b:9e:f2:26:46:15:f7:8a:7d:ab:e6:21:86:f5:7f:09: 02:0d:db:8d:83:28:cd:0b:91:79:db:50:1e:84:ea:19:08:5b: 22:28:8b:52:4f:3e:0f:6b:40:7d:dd:62:05:50:29:50:0a:3e: da:fa:af:ce:ae:96:6e:14:4e:c4:9d:65:c6:60:94:f6:de:82: 95:ff:ea:35 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEqzhiTTxJqbR23tzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVjZjkwZWMtN2NiNS00NzY1LWJjYzMtYTQzOWIwY2Ji NzJiMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk NDQ5NDQ4N2EtZjE5Ni00NmJlLWI1NTYtYjZjMDE1ZDI1ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHtMYeLoNHoquiQwXh5AYawMHoxdgPFdd0+r g82Bdmyyek7kYhJZ9+day41/nZMMuMxnDZ0pOfiZ/6RYSZpnVDQOBTGDdbsT8bnR SVa3MLOWDbpRpyLVYCaXZ7FZcnLajrndxylW1fm8H+i94CCsPevG1ZH6PGSThpfb AzzB/Dod+vq0xdF9z/ioL7M9p6lzTWs7EvWapNipqrnzDV/FBe4XWxs+wBGXMYSs KXYKdWOn8dGBrD/ixopo7ePjw8S8w1aJTe0Xmv35JaJnmn7QccI+B/IL559fS8oO WjJTHmcWD0+LO22nb5o4XfXikjXce2CK7Ofqa8MryvU8QjndFwIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFAjLxw+oWfOwGKf9wOdAqF2aHAzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWNm OTBlYy03Y2I1LTQ3NjUtYmNjMy1hNDM5YjBjYmI3MmIvYzBiNTJmNGQtMDMyNi0z MzhmLTk2MzgtMmNmZDc2OTUxNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVjZjkwZWMtN2NiNS00NzY1LWJj YzMtYTQzOWIwY2JiNzJiLzZlY2Y5MGVjLTdjYjUtNDc2NS1iY2MzLWE0MzliMGNi YjcyYi5jcmwwHwYDVR0jBBgwFoAUfVbEXEg8yFTQd1WnGqpTUPfROLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWNmOTBlYy03Y2I1LTQ3NjUtYmNjMy1hNDM5 YjBjYmI3MmIuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQGQDTAAwQF YCvAAwQEp+AQAwQEqEuwAwQExmUwAwQAz65zMBQEAgACMA4DBQAmBRSAAwUAJgbA QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBDcF53dxjImeXAUjgUMNPJhfA81s0ywEmjetS1tdMwZiZPjpLe Cm2VOshJBLhVDn/fMZBSkRDuAir5JZx9nSvzEPh7R9tBO2uD9hyJmlwcD/wzbZDn vM3bTlTAqFVV/rKe1WLgtXXAxDN+W9tnjS6odOfaOmuinMDr1lk+zhFF21JACV8/ QnepsWKshEHryjZPbpVlRPI/DNQkF9FnVPPMQ9Gdx9xLG+VnLgh6OG0ITvwENH04 pYue8iZGFfeKfavmIYb1fwkCDduNgyjNC5F521AehOoZCFsiKItSTz4Pa0B93WIF UClQCj7a+q/OrpZuFE7EnWXGYJT23oKV/+o1 -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:59 2025 by rpki-client