$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa File: 1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json) Hash identifier: JSMXzF8sUFRHloPuxFtOm5rGwUZMTECDI/ZOKwTEX9Y= Subject key identifier: 5B:79:24:A7:5A:04:88:C8:F0:9D:F2:03:BF:B3:59:96:78:6B:77:8E Certificate issuer: /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Certificate serial: 010D0C9F4328584A963698565208320CB8DC4180 Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 36667 IP address blocks: 198.35.120.0/21 maxlen: 24 2620:c:8000::/48 maxlen: 48 2620:109:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:98:56:52:08:32:0c:b8:dc:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=603f3227-7f19-41a1-b251-7454b0dbc90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:e3:dc:6d:7e:f9:bb:08:2b:18:94:e5:bb: e5:39:70:7f:75:52:ce:48:6d:14:42:37:e6:7e:55: d2:57:aa:f4:aa:86:79:f2:d5:e7:16:40:8d:36:9c: 5f:89:f9:c8:64:02:21:90:d4:72:24:4d:7a:3d:9f: 63:e4:dd:0c:89:f0:a1:2f:06:54:98:b4:c2:ad:e0: 2a:49:5b:04:8e:a8:01:6f:11:b8:98:4c:8e:ed:e8: 5c:5c:33:ad:30:8c:3c:3b:63:3c:b8:cb:54:7e:ee: cc:62:4a:cc:aa:db:a1:81:33:eb:13:5c:04:a0:fd: c6:f9:8e:d1:d5:8b:6f:81:08:30:7d:28:d7:ad:81: 2c:4e:05:4e:e5:a4:61:a6:04:b5:39:cc:94:b9:61: ba:f5:6e:9f:48:46:92:ec:b6:67:7f:57:b0:6d:ee: 69:91:65:e9:99:c9:f2:a9:b3:94:ff:b0:b6:50:70: 3f:d3:d7:9a:00:b0:36:dd:23:59:7a:eb:e5:fb:5e: 32:e3:c4:67:df:fe:ac:34:4c:65:e4:4f:f1:1a:71: 82:23:99:05:ea:c8:fe:b5:96:4f:2f:73:b1:84:94: 95:ba:ee:95:b9:c3:fb:8b:2c:be:65:98:22:5f:32: d4:c6:e1:1e:11:df:1f:43:67:2c:83:98:23:77:50: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:79:24:A7:5A:04:88:C8:F0:9D:F2:03:BF:B3:59:96:78:6B:77:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl X509v3 Authority Key Identifier: keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer sbgp-ipAddrBlock: critical IPv4: 198.35.120.0/21 IPv6: 2620:c:8000::/48 2620:109:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f2:17:6a:59:73:b5:83:35:e7:e7:27:c7:77:76:dd:8f:b1: 55:17:e0:da:cb:39:35:00:5c:39:17:cc:7e:93:56:e9:0e:a9: 71:3f:b0:19:e0:62:39:be:37:47:98:61:e0:12:7c:9f:d8:9f: 60:dc:0c:18:3e:aa:fe:0c:be:f1:f2:b2:aa:9e:5b:49:43:89: ab:72:4e:75:c9:5b:1c:f8:bc:db:1c:4a:84:0f:55:44:32:de: f0:29:26:ab:f6:b9:fe:e6:84:c5:2a:48:fa:dd:94:4e:18:e8: 89:fc:e3:36:3d:ea:0c:67:3b:9b:62:4f:54:db:84:f7:d0:ca: 8e:9d:46:fc:08:be:07:3a:b6:74:b1:b8:4b:8d:13:81:e5:1f: a3:57:f8:cb:88:90:4b:74:bf:8e:58:ba:ca:32:84:73:d8:4f: 93:d7:14:43:74:a0:bd:c3:62:e8:64:5b:ee:d1:9c:4e:8e:92: d3:0a:7a:69:45:58:7a:67:8c:bd:48:5c:a4:99:01:fd:18:75: 33:55:00:bf:6d:78:01:3e:58:db:89:2a:b2:6b:fb:43:df:3f: 41:fa:0c:41:40:12:75:ab:78:0b:61:5c:43:17:94:48:71:be: b4:ac:a7:12:3f:df:ed:04:9d:08:9b:ed:b2:28:34:fe:ab:e1: 85:87:4b:da -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEqWNphWUggyDLjcQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2 OTIyMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NjAzZjMyMjctN2YxOS00MWExLWIyNTEtNzQ1NGIwZGJjOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67j3G1++bsIKxiU5bvlOXB/dVLOSG0UQjfm flXSV6r0qoZ58tXnFkCNNpxfifnIZAIhkNRyJE16PZ9j5N0MifChLwZUmLTCreAq SVsEjqgBbxG4mEyO7ehcXDOtMIw8O2M8uMtUfu7MYkrMqtuhgTPrE1wEoP3G+Y7R 1YtvgQgwfSjXrYEsTgVO5aRhpgS1OcyUuWG69W6fSEaS7LZnf1ewbe5pkWXpmcny qbOU/7C2UHA/09eaALA23SNZeuvl+14y48Rn3/6sNExl5E/xGnGCI5kF6sj+tZZP L3OxhJSVuu6VucP7iyy+ZZgiXzLUxuEeEd8fQ2csg5gjd1AdoQIDAQABo4IDbzCC A2swHQYDVR0OBBYEFFt5JKdaBIjI8J3yA7+zWZZ4a3eOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQx ZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvMWM4ZTU1ZTQtYTk3Ny0z NWU3LWE5OGYtZWIyOGI2ZmE5MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZkMWZlM2ItN2UyNC00ZDI3LWJi MTAtYmViOWNlMmQ2OTIyL2FmZDFmZTNiLTdlMjQtNGQyNy1iYjEwLWJlYjljZTJk NjkyMi5jcmwwHwYDVR0jBBgwFoAU76MsHlY0EPKfNjNb4XPd5lnEiQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5 Y2UyZDY5MjIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDxiN4MBgE AgACMBIDBwAmIAAMgAADBwQmIAEJYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj/IXallztYM15+cnx3d2 3Y+xVRfg2ss5NQBcORfMfpNW6Q6pcT+wGeBiOb43R5hh4BJ8n9ifYNwMGD6q/gy+ 8fKyqp5bSUOJq3JOdclbHPi82xxKhA9VRDLe8Ckmq/a5/uaExSpI+t2UThjoifzj Nj3qDGc7m2JPVNuE99DKjp1G/Ai+Bzq2dLG4S40TgeUfo1f4y4iQS3S/jli6yjKE c9hPk9cUQ3SgvcNi6GRb7tGcTo6S0wp6aUVYemeMvUhcpJkB/Rh1M1UAv214AT5Y 24kqsmv7Q98/QfoMQUASdat4C2FcQxeUSHG+tKynEj/f7QSdCJvtsig0/qvhhYdL 2g== -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:59 2025 by rpki-client