$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: h1LODH6OWLpGUW6uaYz7LffdvcJy04Kby92MMLCEpWo= Subject key identifier: 4A:53:50:11:8A:9E:FC:AA:F1:68:B7:C4:E5:C4:0E:A9:27:33:18:0E Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F4328584A9BCB6D6651732E8928FACF4C Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.12.208.0/24 maxlen: 24 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 204.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6d:66:51:73:2e:89:28:fa:cf:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=5f92d8ab-1024-4aae-a8f4-e6493576534b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:d5:0d:9b:3b:58:5a:bc:8a:19:43:c1:c4: 29:6f:2f:f6:56:16:b8:09:c0:85:bf:67:02:07:18: 12:b7:20:6f:a2:b1:d6:75:3c:ef:ad:89:ff:83:77: d1:44:f4:dd:8c:5a:ff:ac:8e:b6:fb:2a:7b:55:e4: 32:5c:17:c5:0a:f5:b3:dd:cf:3f:3c:70:ee:46:58: 21:af:52:9f:47:74:0c:00:12:53:69:3a:9a:cb:d1: 2c:99:4f:5d:25:43:c3:31:8a:aa:3a:6c:71:31:d8: eb:5f:d5:11:20:71:23:ac:b2:6b:c8:2a:33:9c:f6: 18:ca:df:6b:6f:f2:d9:3f:1f:17:39:ca:ae:59:a6: 13:37:28:92:b1:e3:72:9e:04:9f:30:9c:18:a0:cd: 8a:83:9a:ac:a8:bc:92:ec:1c:05:f7:d0:9a:94:91: 98:3e:ba:7b:45:51:bb:50:1f:38:ed:39:0f:0a:be: e7:9d:8c:ba:fa:c6:2b:b5:d1:9f:37:35:ca:ce:f0: 7d:c8:0f:e7:90:35:eb:85:6e:4e:9f:bc:9c:c5:e5: 1f:93:e8:8d:fc:94:ea:87:7f:52:64:4d:32:e6:d2: c2:d3:9a:fe:c7:6e:96:32:e6:a7:44:97:af:27:b8: a3:76:a5:27:3c:c4:51:b8:bc:8f:0c:bf:f9:ab:ce: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:53:50:11:8A:9E:FC:AA:F1:68:B7:C4:E5:C4:0E:A9:27:33:18:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8a:3c:f7:8b:a9:67:ef:09:f1:db:29:b2:5c:3f:c3:ca:a6: 43:52:5f:ea:b2:b7:fb:86:53:81:e8:5e:4b:15:4d:46:56:9b: 22:05:b6:5b:01:5a:b8:8b:d4:72:c8:d1:68:89:52:e7:cb:5e: ce:fc:9f:04:63:76:87:de:12:93:42:5a:92:11:85:b4:ac:62: 29:52:83:a9:3b:d4:d3:cf:d7:c5:ef:78:3f:15:28:cd:15:c3: a3:97:1b:cf:a4:5a:73:0f:71:a7:83:70:33:c6:24:c7:3d:ec: 6d:f0:7b:d8:49:1e:58:56:93:ce:bc:9f:17:35:1f:b2:92:e3: 38:5a:d8:96:06:9b:9a:f9:2f:9c:c8:73:e9:83:ac:26:22:6f: 52:98:63:45:7a:c5:b0:53:5c:15:7d:38:ef:dd:62:5a:b7:9c: 76:00:23:b8:55:43:cf:21:10:0a:6e:08:83:82:81:2a:44:dc: 9e:c7:4d:36:a5:b8:ee:91:38:fe:51:1b:3f:38:c3:00:ee:82: e2:66:12:14:b9:01:ba:7b:87:e0:76:df:c9:21:4a:8b:4b:dc: b4:b4:f2:cc:d1:32:f1:08:b1:3d:2a:1d:57:0c:0e:0a:f2:74: cc:90:82:c0:ab:ea:fb:70:fa:d4:2f:a6:63:2d:61:4a:9c:92: a8:ad:e6:cf -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWEqby21mUXMuiSj6z0wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk NWY5MmQ4YWItMTAyNC00YWFlLWE4ZjQtZTY0OTM1NzY1MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc7VDZs7WFq8ihlDwcQpby/2Vha4CcCFv2cC BxgStyBvorHWdTzvrYn/g3fRRPTdjFr/rI62+yp7VeQyXBfFCvWz3c8/PHDuRlgh r1KfR3QMABJTaTqay9EsmU9dJUPDMYqqOmxxMdjrX9URIHEjrLJryCoznPYYyt9r b/LZPx8XOcquWaYTNyiSseNyngSfMJwYoM2Kg5qsqLyS7BwF99CalJGYPrp7RVG7 UB847TkPCr7nnYy6+sYrtdGfNzXKzvB9yA/nkDXrhW5On7ycxeUfk+iN/JTqh39S ZE0y5tLC05r+x26WMuanRJevJ7ijdqUnPMRRuLyPDL/5q87bXQIDAQABo4IDgDCC A3wwHQYDVR0OBBYEFEpTUBGKnvyq8Wi3xOXEDqknMxgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxAwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADADNADBADANEYDBADAQV8DAwDMeTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBJijz3i6ln7wnx2ymyXD/DyqZDUl/qsrf7hlOB6F5LFU1GVpsiBbZbAVq4i9Ry yNFoiVLny17O/J8EY3aH3hKTQlqSEYW0rGIpUoOpO9TTz9fF73g/FSjNFcOjlxvP pFpzD3Gng3AzxiTHPext8HvYSR5YVpPOvJ8XNR+ykuM4WtiWBpua+S+cyHPpg6wm Im9SmGNFesWwU1wVfTjv3WJat5x2ACO4VUPPIRAKbgiDgoEqRNyex002pbjukTj+ URs/OMMA7oLiZhIUuQG6e4fgdt/JIUqLS9y0tPLM0TLxCLE9Kh1XDA4K8nTMkILA q+r7cPrUL6ZjLWFKnJKorebP -----END CERTIFICATE-----Generated at Fri Aug 8 00:00:56 2025 by rpki-client