$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa File: a32b5942-107e-3e4d-88ed-01a410959f3e.roa (raw, json) Hash identifier: PkQctwsdKPzKJbXYdLG/ZYvU8atBdqctxyNDy5MK2gc= Subject key identifier: 6C:D6:EB:51:32:11:D0:17:C4:05:51:FE:DB:1D:2D:6F:89:63:16:60 Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F4328584AC2E0E8AAD8CE2BD9FAB7F440 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 22697 IP address blocks: 128.116.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e8:aa:d8:ce:2b:d9:fa:b7:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=21da0d81-bf23-4aaf-8615-b4ba862c38fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e7:c8:6a:b4:8c:87:b3:ae:90:7d:11:59:9b: ce:c4:a4:3d:37:02:11:34:69:05:09:e9:f0:a6:cb: 09:77:a1:f2:21:ee:d7:28:3d:4e:b5:06:24:60:59: be:54:0d:64:9f:61:03:12:7e:9a:08:c0:c4:4b:2e: 66:cc:05:16:d9:57:18:5c:c0:73:d1:8c:23:53:56: 82:06:bc:33:b5:77:86:7c:8c:33:a1:32:0e:40:1e: eb:63:09:c1:3b:14:8d:8d:d3:5a:da:df:c3:7d:eb: 6a:50:78:0f:f9:d5:54:0f:03:b2:1a:78:11:05:e2: f5:7c:c6:fe:1e:57:20:cf:73:85:1f:82:f5:b6:0c: 00:72:95:34:59:bd:3b:62:05:bf:5e:b7:c6:37:41: 5a:de:0c:d7:45:d0:cc:3a:59:88:c7:7b:43:3e:27: 93:54:ea:a0:09:89:e8:2d:f9:b2:c2:de:e5:d4:de: e5:4d:81:8b:ae:c0:60:25:f5:79:3b:d7:6c:58:8b: 36:54:4a:fa:14:d7:02:f7:b3:da:2e:54:42:08:a4: 73:b5:55:da:1b:db:6b:45:42:f5:60:5b:77:54:a2: 41:4a:d7:8c:c4:7d:14:10:f0:8c:39:f8:b5:f8:37: 11:c7:4a:ae:52:7e:00:7e:d6:6e:74:1d:b7:a5:03: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D6:EB:51:32:11:D0:17:C4:05:51:FE:DB:1D:2D:6F:89:63:16:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 128.116.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4d:c2:13:a9:65:62:41:7d:b9:75:9f:55:51:e7:47:5c:11: 9c:c1:42:7b:be:2b:9f:9c:80:bb:35:4e:8e:2e:03:c7:1c:d2: 97:bd:ad:c4:fe:1b:1e:21:e6:bb:ef:67:c8:2a:92:6c:d8:fd: ff:cc:f3:56:11:0b:32:53:4a:24:fa:af:99:d9:5c:0e:44:f6: 55:31:8e:d1:18:fa:f0:fe:9c:1d:ec:ee:47:4a:e5:1a:49:97: 15:57:5d:7a:b5:4f:a6:4b:37:0f:6e:82:88:7f:48:d4:3e:5d: 5d:9a:84:5d:28:d4:bc:32:80:f6:98:0d:d3:e4:d3:88:a8:2c: eb:38:51:71:c9:76:24:8a:3a:8d:91:99:45:54:58:28:74:4b: e6:20:ac:5f:30:fe:0d:48:b7:e6:41:cc:07:49:52:fa:50:60: 48:07:0a:45:51:9c:3b:d3:d3:83:a0:32:e2:59:fd:5a:23:66: 2f:27:d9:67:85:46:1a:2a:2a:29:d9:b4:f7:90:7c:ef:2e:2a: eb:b4:d6:58:26:a2:52:9f:f8:7c:29:0a:34:a7:5c:91:bc:3b: 6d:ac:ae:e9:29:12:e8:ad:d6:58:5b:a8:26:c2:75:6d:97:90: 27:d0:fd:86:cc:46:86:b8:68:94:a9:4e:0c:46:6a:24:da:0f: 22:13:cd:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Oiq2M4r2fq39EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MjFkYTBkODEtYmYyMy00YWFmLTg2MTUtYjRiYTg2MmMzOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+fIarSMh7OukH0RWZvOxKQ9NwIRNGkFCenw pssJd6HyIe7XKD1OtQYkYFm+VA1kn2EDEn6aCMDESy5mzAUW2VcYXMBz0YwjU1aC BrwztXeGfIwzoTIOQB7rYwnBOxSNjdNa2t/DfetqUHgP+dVUDwOyGngRBeL1fMb+ Hlcgz3OFH4L1tgwAcpU0Wb07YgW/XrfGN0Fa3gzXRdDMOlmIx3tDPieTVOqgCYno Lfmywt7l1N7lTYGLrsBgJfV5O9dsWIs2VEr6FNcC97PaLlRCCKRztVXaG9trRUL1 YFt3VKJBSteMxH0UEPCMOfi1+DcRx0quUn4AftZudB23pQNVpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzW61EyEdAXxAVR/tsdLW+JYxZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvYTMyYjU5NDItMTA3ZS0z ZTRkLTg4ZWQtMDFhNDEwOTU5ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgHQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxNwhOpZWJBfbl1n1VR50dcEZzBQnu+K5+cgLs1To4uA8cc0pe9rcT+ Gx4h5rvvZ8gqkmzY/f/M81YRCzJTSiT6r5nZXA5E9lUxjtEY+vD+nB3s7kdK5RpJ lxVXXXq1T6ZLNw9ugoh/SNQ+XV2ahF0o1LwygPaYDdPk04ioLOs4UXHJdiSKOo2R mUVUWCh0S+YgrF8w/g1It+ZBzAdJUvpQYEgHCkVRnDvT04OgMuJZ/VojZi8n2WeF RhoqKinZtPeQfO8uKuu01lgmolKf+HwpCjSnXJG8O22srukpEuit1lhbqCbCdW2X kCfQ/YbMRoa4aJSpTgxGaiTaDyITzUY= -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:28 2025 by rpki-client