$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa File: b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa (raw, json) Hash identifier: KfZ5R2IF9rBfAKxlkVdbpnh3/yAqSzBmzscX6maYJl0= Subject key identifier: E2:AE:C4:B0:3C:13:50:17:81:82:D1:34:4F:F1:E2:2E:09:C0:6E:0F Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584AB4EB6E87C1488A89BACF9900 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 25649 IP address blocks: 199.187.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6e:87:c1:48:8a:89:ba:cf:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6dfb46c8-3acb-403f-ab44-cd3bde46d17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:71:bb:b1:a3:d6:56:7c:d9:67:08:6b:0e: 58:d9:be:d9:5a:a6:41:ba:a6:25:14:b4:e1:a4:22: 3c:c6:c9:01:a1:6b:81:f2:7e:c8:f6:d7:ce:cc:19: ae:66:ee:71:b5:2a:ab:61:4d:b6:f5:21:23:e4:3b: 11:8d:db:e8:3a:ac:a0:b4:a4:9c:2c:57:b1:58:40: 62:74:0b:d3:fc:56:87:8e:95:3b:6a:ef:a2:b3:46: 72:f6:4b:9e:07:62:23:53:9f:61:7d:19:06:3d:d7: 18:f0:a0:9b:75:00:7e:b6:90:8a:1a:47:58:40:5c: 12:f4:97:58:75:ae:4b:ee:8d:39:84:bc:5d:63:61: fb:bc:6c:2a:bf:ae:4d:54:bf:72:d0:da:e6:b2:5e: 43:ae:ac:27:a6:86:8e:26:55:eb:c9:88:3a:d6:d9: 99:12:bc:d5:ed:a5:a0:ef:56:7f:e3:51:f4:33:41: 84:e5:90:12:4f:b2:70:ed:85:fc:6f:74:56:87:c7: b3:ce:cf:f7:3a:41:b1:1d:45:fb:30:a1:40:24:3e: 22:db:04:45:03:33:4d:60:8b:27:95:4a:f9:5e:dd: 4a:f6:dd:30:52:76:67:05:89:6e:b1:69:8c:02:69: b1:cf:4c:e0:23:c0:b6:54:ae:bf:c2:c0:4d:36:e4: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:C4:B0:3C:13:50:17:81:82:D1:34:4F:F1:E2:2E:09:C0:6E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.187.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1b:5b:00:a6:e4:49:be:b7:c0:65:4b:e8:39:c7:cd:aa:f0: b8:f1:a9:e5:17:6c:a3:9c:8c:01:73:36:9f:c8:f1:2e:33:7b: 4d:b9:e2:b2:2f:f7:f6:f9:c3:6f:17:a3:51:a1:99:20:56:76: 11:4f:f3:f2:33:04:6f:9b:77:36:3c:57:01:5e:af:79:82:8f: fb:c4:df:f0:79:87:ea:80:a1:44:38:e2:e2:06:b3:f8:53:5e: 26:b1:cd:42:e3:62:19:83:45:58:80:73:59:47:b6:bb:9a:0b: 1a:92:09:fd:f8:2f:5f:f9:7c:27:be:ec:f9:8b:2d:72:71:38: 15:2f:3f:23:75:32:32:7b:87:df:fe:76:fa:9f:2a:11:af:aa: e5:27:5f:63:05:6a:dc:97:a8:1c:38:f9:66:c6:3b:51:2c:45: 94:69:68:4f:09:07:2e:80:df:86:41:e8:db:a2:f7:b4:26:7a: a3:c7:f7:4f:09:64:37:23:c1:54:0d:8f:3e:b8:1e:d9:10:58: a5:0a:12:bb:ec:49:c7:f0:07:5b:3c:40:13:bd:66:d5:3a:7f: af:d5:6b:6e:93:a4:d9:5c:9d:2d:c8:8c:94:e4:e4:44:ae:8b: 61:19:98:79:3b:a8:62:0d:67:e8:d5:30:e4:1c:38:cd:21:ab: be:f9:5d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0626HwUiKibrPmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NmRmYjQ2YzgtM2FjYi00MDNmLWFiNDQtY2QzYmRlNDZkMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtJxu7Gj1lZ82WcIaw5Y2b7ZWqZBuqYlFLTh pCI8xskBoWuB8n7I9tfOzBmuZu5xtSqrYU229SEj5DsRjdvoOqygtKScLFexWEBi dAvT/FaHjpU7au+is0Zy9kueB2IjU59hfRkGPdcY8KCbdQB+tpCKGkdYQFwS9JdY da5L7o05hLxdY2H7vGwqv65NVL9y0Nrmsl5DrqwnpoaOJlXryYg61tmZErzV7aWg 71Z/41H0M0GE5ZAST7Jw7YX8b3RWh8ezzs/3OkGxHUX7MKFAJD4i2wRFAzNNYIsn lUr5Xt1K9t0wUnZnBYlusWmMAmmxz0zgI8C2VK6/wsBNNuTwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKuxLA8E1AXgYLRNE/x4i4JwG4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYjllMDkxZDgtOGE0Yi0z YjRmLWJlNDQtYzgzODE4ZjE2YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcbWwCm5Em+t8BlS+g5x82q8LjxqeUXbKOcjAFzNp/I8S4ze0254rIv 9/b5w28Xo1GhmSBWdhFP8/IzBG+bdzY8VwFer3mCj/vE3/B5h+qAoUQ44uIGs/hT XiaxzULjYhmDRViAc1lHtruaCxqSCf34L1/5fCe+7PmLLXJxOBUvPyN1MjJ7h9/+ dvqfKhGvquUnX2MFatyXqBw4+WbGO1EsRZRpaE8JBy6A34ZB6Nui97QmeqPH908J ZDcjwVQNjz64HtkQWKUKErvsScfwB1s8QBO9ZtU6f6/Va26TpNlcnS3IjJTk5ESu i2EZmHk7qGINZ+jVMOQcOM0hq775XYY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:18 2025 by rpki-client