$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa File: 2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa (raw, json) Hash identifier: h5aUH5zkTagDE018Qw2nNJKBWQ/TupgJvNOV8d6/ho0= Subject key identifier: 33:28:32:64:05:84:93:01:17:AB:D8:94:7A:CE:81:04:42:19:DF:BD Certificate issuer: /CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Certificate serial: 010D0C9F4328584AB91B8955BF2B7BAA322CD580 Authority key identifier: AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 198949 IP address blocks: 128.220.0.0/16 maxlen: 24 192.12.13.0/24 maxlen: 24 192.12.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:89:55:bf:2b:7b:aa:32:2c:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=48d1c85a-b79e-4789-8cad-12f7e2300427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:55:52:d7:79:64:70:06:ce:11:00:9d:c8: 55:da:02:b6:17:10:a4:cc:eb:82:e5:f3:cb:66:f2: 89:6a:10:26:f0:94:b9:10:6b:6a:c4:80:d9:2f:05: fb:22:08:56:d7:15:1a:f0:e7:d7:da:27:38:ee:59: 5a:fd:2f:8b:7b:34:36:38:b3:e1:16:d0:08:5b:5f: d3:cb:3d:d4:39:5e:56:c1:69:85:80:2b:c7:24:11: a0:f1:70:bb:c7:7a:f3:91:8e:e3:e6:3a:35:4e:6c: c2:2f:3b:6c:73:f3:e8:5e:79:48:b6:c1:6e:45:47: 19:52:66:88:6f:bf:55:94:ca:63:02:50:c5:90:0e: 25:94:19:d7:fd:ba:10:76:f3:52:5d:31:61:37:7f: 41:7c:f6:df:05:75:76:8b:71:69:dc:da:0b:0d:8c: bf:8b:bc:cf:66:1f:36:b7:99:66:db:79:4b:48:7f: 80:15:00:5c:c2:9c:df:91:8c:0f:1f:4e:fe:99:30: 6c:59:f9:1d:dd:60:14:b0:fb:93:96:be:25:f7:24: c8:d3:7e:12:7d:29:27:29:5b:1e:25:41:3b:7e:ae: 40:ca:d4:cf:4f:5d:39:fe:83:d9:2f:63:44:f4:5b: 20:b5:18:38:12:25:70:92:fb:11:a7:be:45:23:73: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:32:64:05:84:93:01:17:AB:D8:94:7A:CE:81:04:42:19:DF:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl X509v3 Authority Key Identifier: keyid:AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer sbgp-ipAddrBlock: critical IPv4: 128.220.0.0/16 192.12.13.0-192.12.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:83:27:cb:57:50:c2:d1:d4:4e:6c:5c:6c:1c:a5:53:78:98: 82:a3:8f:7f:8d:5e:34:c3:c2:2f:35:2a:aa:55:60:ca:ff:af: 30:92:ae:ea:d8:31:ce:91:b3:d5:6d:e4:30:55:b9:c6:5a:e7: e2:03:65:d2:fb:ab:38:9d:c1:1a:59:d2:34:f5:b6:a4:7a:6a: c0:21:23:ef:30:61:d1:49:2d:30:39:75:0a:54:a3:e9:21:c2: 28:e0:f6:59:8c:a6:10:be:a0:2a:dc:0d:c9:0a:2d:59:f8:7d: f0:fd:04:7e:e7:1a:30:54:59:c6:f2:5f:88:53:ea:1f:2b:93: 28:f5:d2:b3:e2:7d:c8:ea:0e:b5:62:4f:c9:86:47:32:47:ba: 55:e6:2a:09:e0:03:4f:f6:7d:2b:3f:e3:54:3a:0b:77:9e:0a: f4:05:6c:72:f0:ee:41:c3:d7:c3:19:ad:1b:d8:6a:08:a7:7b: e5:01:6e:3b:d4:58:35:ea:f5:54:5a:1f:ef:ec:9f:77:7d:7e: c8:cb:e5:33:62:01:55:9d:b5:33:a2:bc:53:fd:0f:8b:bc:b9: d1:3a:3e:7c:94:70:81:04:00:fd:f8:23:bf:ba:9b:71:87:5f: aa:bb:ae:1c:7c:b0:db:9c:60:97:b2:81:14:b0:0f:a9:6b:36: d9:b6:fc:74 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G4lVvyt7qjIs1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM5NmY2NGYtNjUwNi00Zjk5LWE2ZWYtNWU4YTI2NGIy ODQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDhkMWM4NWEtYjc5ZS00Nzg5LThjYWQtMTJmN2UyMzAwNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/hVUtd5ZHAGzhEAnchV2gK2FxCkzOuC5fPL ZvKJahAm8JS5EGtqxIDZLwX7IghW1xUa8OfX2ic47lla/S+LezQ2OLPhFtAIW1/T yz3UOV5WwWmFgCvHJBGg8XC7x3rzkY7j5jo1TmzCLztsc/PoXnlItsFuRUcZUmaI b79VlMpjAlDFkA4llBnX/boQdvNSXTFhN39BfPbfBXV2i3Fp3NoLDYy/i7zPZh82 t5lm23lLSH+AFQBcwpzfkYwPH07+mTBsWfkd3WAUsPuTlr4l9yTI034SfSknKVse JUE7fq5AytTPT105/oPZL2NE9FsgtRg4EiVwkvsRp75FI3M8xQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDMoMmQFhJMBF6vYlHrOgQRCGd+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2 ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThhMjY0YjI4NDUvMmRlNjllZDktMmFjZS0z YTdkLWExNzktZWM1NThkNjI0ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmM5NmY2NGYtNjUwNi00Zjk5LWE2 ZWYtNWU4YTI2NGIyODQ1LzJjOTZmNjRmLTY1MDYtNGY5OS1hNmVmLTVlOGEyNjRi Mjg0NS5jcmwwHwYDVR0jBBgwFoAUqib04Je2hcbOVS+jsmBjTVmqKQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThh MjY0YjI4NDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgNwwDAME AMAMDQMEAMAMDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCGgyfLV1DC0dRObFxsHKVTeJiCo49/jV40w8Iv NSqqVWDK/68wkq7q2DHOkbPVbeQwVbnGWufiA2XS+6s4ncEaWdI09bakemrAISPv MGHRSS0wOXUKVKPpIcIo4PZZjKYQvqAq3A3JCi1Z+H3w/QR+5xowVFnG8l+IU+of K5Mo9dKz4n3I6g61Yk/JhkcyR7pV5ioJ4ANP9n0rP+NUOgt3ngr0BWxy8O5Bw9fD Ga0b2GoIp3vlAW471Fg16vVUWh/v7J93fX7Iy+UzYgFVnbUzorxT/Q+LvLnROj58 lHCBBAD9+CO/uptxh1+qu64cfLDbnGCXsoEUsA+pazbZtvx0 -----END CERTIFICATE-----Generated at Tue Aug 5 16:40:54 2025 by rpki-client