$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af2700c1-46fe-36a5-9c15-322c3b593ffa.roa File: af2700c1-46fe-36a5-9c15-322c3b593ffa.roa (raw, json) Hash identifier: B1s9Bi18lgJQuyONZ+F89naJkEAKRpm6gLaSm4ibLVY= Subject key identifier: 1B:51:FE:17:79:9B:23:93:47:8F:F3:4F:FF:6C:A9:46:E0:95:71:31 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584AC016558C219B6945C08CC300 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af2700c1-46fe-36a5-9c15-322c3b593ffa.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 11377 IP address blocks: 134.128.64.0/19 maxlen: 19 134.128.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:55:8c:21:9b:69:45:c0:8c:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=924be61c-0da0-41ea-b640-a1055f335065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:1c:38:f1:35:a1:c4:ee:12:67:c9:1d:e4: 5d:8a:ee:80:2d:0f:fc:10:e3:99:4e:4f:e0:c6:67: 5c:e1:f7:34:a1:ff:a2:8b:b3:0c:ae:28:c1:cf:24: 06:1f:f8:ef:04:52:4f:97:8b:d3:50:29:70:4e:c4: 8c:6b:b5:d9:27:54:ed:e8:8a:fb:a8:f7:95:15:10: 5e:f4:6b:1d:f1:f3:3a:96:33:8f:db:53:81:6c:f0: 30:ec:81:16:db:18:98:0a:a2:9a:60:e7:8e:cd:2a: d1:7f:e4:5f:42:48:24:06:4b:e4:1a:0f:d2:78:12: 97:7b:60:7d:9b:0a:10:5d:bf:1c:af:fb:37:1f:3e: 81:ee:6d:00:53:fb:c3:89:43:77:82:a1:52:76:c2: 02:ab:e0:76:10:0c:38:40:ff:e7:a8:6e:51:fe:e6: 29:dc:43:04:c8:50:4d:8f:3e:d6:20:57:d7:d4:e5: 07:cd:d6:c7:58:15:3b:69:10:ce:1c:6a:7e:92:19: dd:3b:33:e2:3c:9d:53:d3:43:78:21:76:c7:f6:48: 26:b8:5e:f1:51:52:a3:c7:28:44:88:e1:cf:4d:b7: 33:92:36:3d:f6:42:49:7f:2a:f7:61:31:94:21:72: c2:c9:e7:ac:c2:d5:16:f4:f6:d7:71:19:d2:4b:c8: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:51:FE:17:79:9B:23:93:47:8F:F3:4F:FF:6C:A9:46:E0:95:71:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af2700c1-46fe-36a5-9c15-322c3b593ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 134.128.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2d:e9:6b:d3:71:b5:70:42:f7:70:50:3e:6b:9b:e9:f8:40: 50:d5:04:fb:7a:b4:d4:0d:14:7f:a0:c5:da:1e:6b:9b:f1:d8: 68:4c:ff:dd:b0:33:1d:68:ad:d6:3f:f9:b1:1a:95:dd:68:35: b0:6b:b1:69:cf:52:75:b6:a4:d4:9e:1d:ac:64:14:73:34:1d: ab:22:3d:d2:1d:d2:fd:21:8b:1c:2e:9d:d7:4b:bb:ac:a7:ba: 1f:89:d6:3e:2f:b5:81:f0:b3:a3:52:93:64:30:f7:d8:3b:88: 3f:9b:3f:af:39:f4:1a:36:84:c1:86:05:1a:97:3f:f1:58:a7: e9:ee:22:ee:73:cf:9c:83:98:1b:70:97:b5:40:29:46:77:2d: 06:0d:47:18:7c:b0:13:59:51:b3:5e:2e:7f:5f:42:d4:99:37: ef:13:57:4e:74:35:f6:4f:20:f0:10:57:8c:1a:c6:c6:9c:a0: 1f:c1:59:22:d7:e3:23:1d:67:d1:49:e9:2f:cd:29:c3:cd:68: cf:57:3c:e5:44:f7:45:21:e2:91:ef:7e:7c:b9:fc:d6:01:48: 72:ae:53:0c:c0:75:8a:ac:42:f9:d9:e8:12:e1:94:06:4b:da: 61:ac:ba:fc:83:0f:f2:de:21:fd:50:86:63:d1:7f:4d:52:4b: 12:07:72:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFlWMIZtpRcCMwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OTI0YmU2MWMtMGRhMC00MWVhLWI2NDAtYTEwNTVmMzM1MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ocOPE1ocTuEmfJHeRdiu6ALQ/8EOOZTk/g xmdc4fc0of+ii7MMrijBzyQGH/jvBFJPl4vTUClwTsSMa7XZJ1Tt6Ir7qPeVFRBe 9Gsd8fM6ljOP21OBbPAw7IEW2xiYCqKaYOeOzSrRf+RfQkgkBkvkGg/SeBKXe2B9 mwoQXb8cr/s3Hz6B7m0AU/vDiUN3gqFSdsICq+B2EAw4QP/nqG5R/uYp3EMEyFBN jz7WIFfX1OUHzdbHWBU7aRDOHGp+khndOzPiPJ1T00N4IXbH9kgmuF7xUVKjxyhE iOHPTbczkjY99kJJfyr3YTGUIXLCyeeswtUW9PbXcRnSS8hW0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtR/hd5myOTR4/zT/9sqUbglXExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYWYyNzAwYzEtNDZmZS0z NmE1LTljMTUtMzIyYzNiNTkzZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhoBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGot6WvTcbVwQvdwUD5rm+n4QFDVBPt6tNQNFH+gxdoea5vx2GhM/92w Mx1ordY/+bEald1oNbBrsWnPUnW2pNSeHaxkFHM0HasiPdId0v0hixwunddLu6yn uh+J1j4vtYHws6NSk2Qw99g7iD+bP6859Bo2hMGGBRqXP/FYp+nuIu5zz5yDmBtw l7VAKUZ3LQYNRxh8sBNZUbNeLn9fQtSZN+8TV050NfZPIPAQV4waxsacoB/BWSLX 4yMdZ9FJ6S/NKcPNaM9XPOVE90Uh4pHvfny5/NYBSHKuUwzAdYqsQvnZ6BLhlAZL 2mGsuvyDD/LeIf1QhmPRf01SSxIHcmk= -----END CERTIFICATE-----Generated at Wed Aug 6 19:35:46 2025 by rpki-client