$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa File: 3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa (raw, json) Hash identifier: 4167qQULQN6BVQjqV0V4Relj3f4Y4WZOmc2h8RBHYto= Subject key identifier: DF:B6:55:A8:1A:0B:FE:0A:31:BB:52:4C:90:41:C3:34:05:E9:EB:B4 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584AC01645446BDC00B265167290 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 611 IP address blocks: 198.164.129.0/24 maxlen: 24 198.164.130.0/24 maxlen: 24 198.164.131.0/24 maxlen: 24 198.164.132.0/23 maxlen: 24 198.164.136.0/22 maxlen: 24 198.164.144.0/22 maxlen: 24 198.164.156.0/24 maxlen: 24 198.164.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:45:44:6b:dc:00:b2:65:16:72:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=1d396c79-d959-4570-ba12-26f1a31d73d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:f4:49:2d:14:93:39:27:19:fc:82:13:73: 45:f0:ee:96:f0:f7:a0:e3:56:9e:b0:d5:d9:f5:24: 88:06:98:dd:dc:aa:ea:82:35:cb:3f:f6:4a:35:1b: 2d:2f:28:03:36:2b:4d:39:07:04:e4:21:5e:45:71: a8:98:fe:b1:3f:19:9a:0f:d1:ff:a0:28:4d:81:b3: 24:e6:eb:06:32:14:4b:41:8a:5b:ee:fe:93:ac:5e: 18:a5:17:b5:47:8c:eb:78:c4:79:33:f7:8c:81:5e: 7b:8a:f2:39:e3:90:a4:65:28:ce:8f:8b:81:91:3a: a7:95:81:99:39:d9:93:a4:52:a0:43:1a:4b:7a:3b: 64:88:80:b6:04:31:73:bf:55:2f:0e:ef:3e:9d:e0: 54:59:c2:dc:39:27:21:70:14:9d:f1:7e:a6:af:1f: d4:17:b6:da:c5:f4:00:78:6d:a7:57:ee:d4:b7:cd: 8f:32:01:cc:84:0d:34:65:74:d1:65:47:2f:46:c4: cf:10:6e:a9:f7:23:41:a4:7d:eb:43:bf:de:65:e0: 19:f8:36:87:ab:0d:26:a0:93:78:88:b9:46:4b:2c: 51:40:66:54:3b:57:23:cb:b4:e5:9b:24:eb:77:96: 4b:ad:99:b3:01:2f:dd:12:21:f4:5b:76:f0:80:a6: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:55:A8:1A:0B:FE:0A:31:BB:52:4C:90:41:C3:34:05:E9:EB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.129.0-198.164.133.255 198.164.136.0/22 198.164.144.0/22 198.164.156.0/24 198.164.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:be:c1:13:00:58:b9:15:f8:c8:f9:00:8f:fe:39:bc:46:0f: 42:aa:1d:e2:44:6b:36:62:78:50:0a:50:a7:0d:6a:c6:8e:c4: ff:65:33:93:f9:fb:ab:49:94:d7:98:de:45:1f:48:ae:c8:8b: 51:e6:55:02:e4:b2:02:2a:f4:e3:42:12:7a:36:e1:26:26:6e: aa:20:ed:f1:25:52:cd:27:4b:1a:a9:43:d2:ab:84:7e:b5:11: 15:40:e6:04:1a:c5:d9:5b:f3:9f:05:d2:c4:34:5b:e9:83:f5: 48:d6:d5:60:7b:9d:5f:af:2d:12:80:21:bf:b5:3d:a0:a6:66: 05:76:66:8a:66:44:1d:f3:a6:9b:e1:bc:55:74:43:b3:45:8c: 02:33:70:f0:7e:66:40:e0:b6:8b:0b:83:fc:4d:a1:d6:6f:e1: 3c:60:be:88:5f:eb:9d:6f:4d:10:7e:a6:d5:cb:ec:40:b3:a2: c5:43:91:4b:1a:d4:ba:ff:a8:ee:38:82:d7:a1:b7:92:59:1e: 9b:07:14:b6:55:d3:52:7f:c3:90:f5:01:8f:7a:ac:b3:02:b3: 45:24:50:7f:7c:62:85:f1:09:9e:35:9f:1a:b6:7b:4f:7e:a3: a2:50:0c:b7:96:02:fe:74:a4:ee:26:38:aa:0c:7a:5e:aa:df: bc:e1:a5:cc -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWErAFkVEa9wAsmUWcpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MWQzOTZjNzktZDk1OS00NTcwLWJhMTItMjZmMWEzMWQ3M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJr0SS0UkzknGfyCE3NF8O6W8Peg41aesNXZ 9SSIBpjd3KrqgjXLP/ZKNRstLygDNitNOQcE5CFeRXGomP6xPxmaD9H/oChNgbMk 5usGMhRLQYpb7v6TrF4YpRe1R4zreMR5M/eMgV57ivI545CkZSjOj4uBkTqnlYGZ OdmTpFKgQxpLejtkiIC2BDFzv1UvDu8+neBUWcLcOSchcBSd8X6mrx/UF7baxfQA eG2nV+7Ut82PMgHMhA00ZXTRZUcvRsTPEG6p9yNBpH3rQ7/eZeAZ+DaHqw0moJN4 iLlGSyxRQGZUO1cjy7TlmyTrd5ZLrZmzAS/dEiH0W3bwgKZLlwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFN+2VagaC/4KMbtSTJBBwzQF6eu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvM2FlYmM1YTctNzY5Ni0z YWI3LWE5ZGYtYzczYWVmYWVhYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBADGpIED BAHGpIQDBALGpIgDBALGpJADBADGpJwDBADGpJ4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAor7BEwBYuRX4 yPkAj/45vEYPQqod4kRrNmJ4UApQpw1qxo7E/2Uzk/n7q0mU15jeRR9IrsiLUeZV AuSyAir040ISejbhJiZuqiDt8SVSzSdLGqlD0quEfrURFUDmBBrF2VvznwXSxDRb 6YP1SNbVYHudX68tEoAhv7U9oKZmBXZmimZEHfOmm+G8VXRDs0WMAjNw8H5mQOC2 iwuD/E2h1m/hPGC+iF/rnW9NEH6m1cvsQLOixUORSxrUuv+o7jiC16G3klkemwcU tlXTUn/DkPUBj3qsswKzRSRQf3xihfEJnjWfGrZ7T36jolAMt5YC/nSk7iY4qgx6 XqrfvOGlzA== -----END CERTIFICATE-----Generated at Thu Aug 7 01:59:26 2025 by rpki-client