$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa File: 2bceb09a-8c68-38f7-9325-555d892ae3b0.roa (raw, json) Hash identifier: lfldhUKUgs0/6rkR+7ocfegBDiN5jlbUpv98ejIdbw8= Subject key identifier: 61:0A:26:4C:DC:04:CF:4B:94:4B:8A:E1:45:06:F3:D4:78:CF:78:71 Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Certificate serial: 010D0C9F4328584A5E6064822C2CD8587C297480 Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 394453 IP address blocks: 199.253.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:64:82:2c:2c:d8:58:7c:29:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=8f498109-b97e-409a-80e0-c02880d59eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:3b:f1:de:56:e3:e2:ca:3a:19:1c:2f:9e: 24:17:6f:64:1b:a0:97:75:0a:0f:a6:1f:41:8a:ea: ac:73:78:d1:45:58:13:fb:3e:03:60:e1:ce:49:56: 31:d4:41:c8:4d:7e:fe:16:73:b7:e7:fc:af:30:33: 43:97:9d:71:34:48:21:84:8f:d1:a6:6a:6e:de:51: 1a:66:14:ec:42:d4:9e:3f:05:8a:49:c3:d0:6a:d6: 1d:d3:2f:15:a8:60:b9:e6:ce:d0:eb:7b:ee:39:f1: 8a:bb:85:cc:43:d8:50:30:01:33:b2:97:40:32:66: 47:8e:88:88:52:e5:9b:6d:1b:e9:88:32:fc:9f:47: 74:c3:14:e8:05:37:db:46:84:7c:3f:ad:ae:7a:76: 6f:d3:0f:27:0b:aa:42:21:b0:16:ed:80:05:10:5f: b0:2a:d4:ba:0e:f1:df:f1:96:8b:d9:04:16:b1:36: 74:0b:ab:d1:68:3e:99:7e:67:6a:37:4f:a6:01:9a: a0:0f:3a:9e:87:66:d4:1f:9a:4b:26:06:9f:dd:dc: b7:f8:48:4b:72:a5:19:f7:30:68:ca:ae:49:06:7d: c4:8a:31:52:94:ef:6f:4f:90:99:d5:ee:7a:0d:68: e6:3e:83:0f:81:d6:d3:bb:15:13:69:7b:65:37:f4: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0A:26:4C:DC:04:CF:4B:94:4B:8A:E1:45:06:F3:D4:78:CF:78:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl X509v3 Authority Key Identifier: keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer sbgp-ipAddrBlock: critical IPv4: 199.253.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:8f:0b:bb:b1:7a:86:7c:df:26:b6:d3:bc:7b:47:52:9f:65: 22:d4:d3:82:77:df:fe:c3:ab:aa:9e:b1:ed:94:c8:5b:d3:4d: 4e:a8:26:3e:85:43:0c:6e:0e:8c:5f:52:b9:c8:cb:98:79:6a: b2:3a:d0:99:21:8a:ad:c8:4c:22:57:d2:b6:9d:84:8f:21:7d: 9c:f9:48:83:cd:a9:cb:b7:1e:21:df:d2:b1:9f:a2:29:dc:80: a3:d5:42:55:31:99:73:9e:e5:6b:a8:e8:3c:e1:8a:c0:2f:ae: ce:58:d8:ed:cd:9b:14:e9:3c:78:59:17:a6:7b:c2:62:50:04: 6a:1d:6e:2f:08:25:36:ab:8f:bd:d2:2a:e3:67:15:2f:96:30: d1:19:31:19:05:c0:aa:ff:f2:cc:76:05:70:c4:0b:7f:e1:59: e7:e6:2b:21:be:1f:f5:0a:a9:04:fc:6d:16:5b:bf:02:6b:d2: 8f:c3:85:3c:9c:ac:9d:24:25:0e:c4:1b:15:d8:d1:34:13:96: 5f:e2:12:0d:e1:7f:9e:f7:7f:c5:0d:7a:cd:8f:a3:45:5a:62: eb:84:83:40:93:a1:5a:ec:68:15:78:a9:11:f8:77:80:b7:de: e8:af:4b:0e:da:63:3d:ee:34:1d:5b:16:4d:41:5e:72:b2:f6: b8:4a:05:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGSCLCzYWHwpdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMw NTUxMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk OGY0OTgxMDktYjk3ZS00MDlhLTgwZTAtYzAyODgwZDU5ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgms78d5W4+LKOhkcL54kF29kG6CXdQoPph9B iuqsc3jRRVgT+z4DYOHOSVYx1EHITX7+FnO35/yvMDNDl51xNEghhI/Rpmpu3lEa ZhTsQtSePwWKScPQatYd0y8VqGC55s7Q63vuOfGKu4XMQ9hQMAEzspdAMmZHjoiI UuWbbRvpiDL8n0d0wxToBTfbRoR8P62uenZv0w8nC6pCIbAW7YAFEF+wKtS6DvHf 8ZaL2QQWsTZ0C6vRaD6ZfmdqN0+mAZqgDzqeh2bUH5pLJgaf3dy3+EhLcqUZ9zBo yq5JBn3EijFSlO9vT5CZ1e56DWjmPoMPgdbTuxUTaXtlN/Tj3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEKJkzcBM9LlEuK4UUG89R4z3hxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYx NDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvMmJjZWIwOWEtOGM2OC0z OGY3LTkzMjUtNTU1ZDg5MmFlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWRmMTQyZGYtNmRlMi00N2RjLWJl NGYtYmYwOWJkZWMwNTUxLzlkZjE0MmRmLTZkZTItNDdkYy1iZTRmLWJmMDliZGVj MDU1MS5jcmwwHwYDVR0jBBgwFoAU9p1ZPdpWapm9hqkVZ8a+YNfZvIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5 YmRlYzA1NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6PC7uxeoZ83ya207x7R1KfZSLU04J33/7Dq6qese2UyFvTTU6oJj6F QwxuDoxfUrnIy5h5arI60Jkhiq3ITCJX0radhI8hfZz5SIPNqcu3HiHf0rGfoinc gKPVQlUxmXOe5Wuo6DzhisAvrs5Y2O3NmxTpPHhZF6Z7wmJQBGodbi8IJTarj73S KuNnFS+WMNEZMRkFwKr/8sx2BXDEC3/hWefmKyG+H/UKqQT8bRZbvwJr0o/DhTyc rJ0kJQ7EGxXY0TQTll/iEg3hf573f8UNes2Po0VaYuuEg0CToVrsaBV4qRH4d4C3 3uivSw7aYz3uNB1bFk1BXnKy9rhKBdg= -----END CERTIFICATE-----Generated at Tue Aug 5 16:39:19 2025 by rpki-client