$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa File: 13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa (raw, json) Hash identifier: +AzxhEStvgcCd+DsXW8Xd2QvbRbmuOfMDzF2tbgsAzA= Subject key identifier: 64:0D:6F:FF:1C:CC:70:4A:D1:DC:E9:AE:76:FD:DF:CB:04:2D:86:C7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584AC01652A1A7B78AEC65912B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 11427 IP address blocks: 68.182.212.0/22 maxlen: 22 68.182.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:52:a1:a7:b7:8a:ec:65:91:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=5496e87f-fe27-4e87-9ddc-47711541d50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:08:9f:5a:83:fa:37:e2:5f:2e:96:55:ed: 44:df:a8:9d:09:bb:f2:eb:d5:59:92:9f:47:7b:ec: 91:b4:c2:33:6f:1a:d0:12:82:0a:31:bb:36:49:d7: 79:a1:37:25:81:0e:74:ce:80:21:6f:11:6e:9d:83: da:c6:5d:c4:74:16:34:42:6c:f4:88:4f:08:5b:50: cd:91:0b:7b:c6:25:65:bc:4b:4b:4a:c2:94:b2:f3: 2a:c1:23:cc:54:4d:2c:64:1f:d9:41:39:2e:d8:35: 04:17:03:9b:1c:83:9d:51:08:7e:cf:97:92:8a:e0: 25:04:53:54:e1:88:ae:a4:da:a9:04:4f:29:bd:bd: df:6a:f0:6b:a0:bd:00:95:41:0c:2e:aa:44:d6:31: 3b:67:3e:86:ef:20:43:96:2e:ec:5e:8e:d0:3e:08: 9d:39:d0:ae:44:97:5e:6b:2f:2e:35:c8:b3:21:42: cd:df:eb:3a:ba:7e:d5:6d:ab:ce:41:e5:2b:e5:a3: 4e:fc:ca:61:91:dd:0d:79:99:b5:5d:ec:76:ac:ba: d5:be:72:bd:c6:c4:bc:4d:1c:1f:9a:e1:6a:e2:b4: 79:7e:ad:ec:28:e0:8c:74:93:69:08:1d:89:99:e2: 3e:3f:da:fa:6c:be:ce:b6:11:60:cb:76:c2:3b:e1: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0D:6F:FF:1C:CC:70:4A:D1:DC:E9:AE:76:FD:DF:CB:04:2D:86:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.212.0-68.182.219.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d2:a8:8a:af:ad:f5:de:94:f8:5f:ab:1e:06:5c:01:f8:79: 9d:3e:2b:6b:e9:e5:4a:e4:41:67:ec:ac:21:a9:d1:ee:b8:1f: b9:27:31:de:91:63:49:41:1a:0a:50:44:15:d9:99:77:0c:6b: b9:2c:12:ad:ed:d2:aa:17:d2:72:71:f9:00:61:a7:c1:72:b4: 8e:20:50:a0:14:4c:73:b7:f8:db:66:72:16:43:65:5d:a0:46: a9:94:22:8a:36:52:66:71:41:77:09:1a:92:49:d1:b2:01:23: c5:d1:50:69:54:68:52:3a:01:7e:3c:1a:f8:f7:5a:f3:eb:d8: 5d:10:ee:02:c6:44:0c:97:c2:94:be:fe:91:f6:95:f8:bb:88: d9:32:d6:63:08:25:f4:e4:a5:5b:63:e9:e2:11:f6:53:ae:10: 0a:28:34:57:f5:1e:20:6a:8d:d8:0e:b5:ad:61:d9:06:39:e9: c1:0d:f8:64:4f:f2:c7:d7:a1:04:a3:15:3f:73:b0:68:d9:f2: ca:d0:1a:33:94:4c:37:95:e0:70:13:36:71:95:0a:4e:07:a8: 7b:98:32:09:ec:6f:74:cf:b6:87:91:4b:77:68:c9:30:ed:37: 56:7b:1e:be:01:3c:bf:f9:8b:f7:62:05:2f:f6:92:c4:2f:22: 97:c3:af:fd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErAFlKhp7eK7GWRK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NTQ5NmU4N2YtZmUyNy00ZTg3LTlkZGMtNDc3MTE1NDFkNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJYIn1qD+jfiXy6WVe1E36idCbvy69VZkp9H e+yRtMIzbxrQEoIKMbs2Sdd5oTclgQ50zoAhbxFunYPaxl3EdBY0Qmz0iE8IW1DN kQt7xiVlvEtLSsKUsvMqwSPMVE0sZB/ZQTku2DUEFwObHIOdUQh+z5eSiuAlBFNU 4YiupNqpBE8pvb3favBroL0AlUEMLqpE1jE7Zz6G7yBDli7sXo7QPgidOdCuRJde ay8uNcizIULN3+s6un7VbavOQeUr5aNO/Mphkd0NeZm1Xex2rLrVvnK9xsS8TRwf muFq4rR5fq3sKOCMdJNpCB2JmeI+P9r6bL7OthFgy3bCO+H/3QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGQNb/8czHBK0dzprnb938sELYbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTNhNmM0MzctZTQ1OS0z YzA1LWIzZWQtMGZlNTJjZWU4ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJEttQD BAJEttgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAN9Koiq+t9d6U+F+rHgZcAfh5nT4ra+nlSuRBZ+ysIanR 7rgfuScx3pFjSUEaClBEFdmZdwxruSwSre3SqhfScnH5AGGnwXK0jiBQoBRMc7f4 22ZyFkNlXaBGqZQiijZSZnFBdwkakknRsgEjxdFQaVRoUjoBfjwa+Pda8+vYXRDu AsZEDJfClL7+kfaV+LuI2TLWYwgl9OSlW2Pp4hH2U64QCig0V/UeIGqN2A61rWHZ BjnpwQ34ZE/yx9ehBKMVP3OwaNnyytAaM5RMN5XgcBM2cZUKTgeoe5gyCexvdM+2 h5FLd2jJMO03VnsevgE8v/mL92IFL/aSxC8il8Ov/Q== -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:35 2025 by rpki-client