$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa File: 17acb471-f0ec-3752-90a5-05f953ebd85f.roa (raw, json) Hash identifier: DVLWAFYagQx7L57uPgnTUGF71rL3mLIMj9gkC6GzvKw= Subject key identifier: 2D:16:83:AA:C9:B3:16:F7:05:02:54:97:31:A1:B1:32:18:5B:84:58 Certificate issuer: /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe Certificate serial: 010D0C9F4328584A9D30E68FE1F0E7A138AE2A80 Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 36352 IP address blocks: 128.254.228.0/22 maxlen: 22 162.245.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e6:8f:e1:f0:e7:a1:38:ae:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=cf15809e-b201-4b00-96fe-f7f3456e2124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:c1:5c:c8:de:19:47:d8:21:aa:17:86:c7: 74:f6:16:d9:18:d8:59:59:b9:81:24:14:1b:29:82: ef:8e:6f:81:f1:59:f0:31:7b:c8:6b:2f:c0:a0:31: 76:37:7f:81:b7:cb:49:10:a3:60:bb:b3:d7:c9:65: 28:83:94:40:ef:6f:a9:d8:30:07:08:a7:cf:ca:75: d6:18:0b:33:d9:13:ae:1e:5f:4b:3d:df:01:8b:85: 06:73:ac:2d:fa:97:a1:12:73:e9:c5:52:db:36:fe: 46:13:a1:f5:3e:61:22:5f:ed:07:95:77:e6:e4:f1: 72:4c:f3:a1:d6:f4:ea:3c:09:da:71:d3:6a:83:3a: 73:1b:83:70:e1:cb:87:ba:1c:1d:e2:40:a8:9f:fc: 56:22:1e:d6:32:f6:00:ab:62:f2:46:f5:c0:24:d6: 44:c3:ba:6b:fa:a5:88:a6:47:c1:f1:92:73:42:25: b7:14:0d:be:5d:64:d4:4b:92:cf:ef:89:45:b3:72: 78:9f:45:95:bc:23:d7:d1:55:eb:2c:12:7a:96:52: 0d:d4:40:b0:4e:5d:9b:66:62:f1:8c:b5:2f:dc:5a: bd:f7:0c:0c:73:0b:0a:ee:ea:e3:5b:16:f7:1c:5b: 5a:5e:ea:1f:3c:ba:8a:11:fa:19:39:9b:ae:6b:d7: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:16:83:AA:C9:B3:16:F7:05:02:54:97:31:A1:B1:32:18:5B:84:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl X509v3 Authority Key Identifier: keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.228.0/22 162.245.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fc:f8:d0:5c:24:94:ce:20:f6:d8:75:c6:fa:23:85:25:0e: c0:4e:7e:79:f6:31:84:37:45:34:0e:a3:82:6b:7b:6d:40:08: 26:a8:e8:54:3c:29:b5:6d:1d:3e:20:1c:a2:7d:86:36:c7:5d: 33:c6:28:ad:d7:52:9c:9d:34:ae:a3:06:37:a8:6e:e5:83:3a: d7:a7:dc:79:6c:f8:d0:e3:17:b1:3c:62:10:5f:22:75:58:65: 05:5d:fe:04:15:cd:4e:45:3d:64:6f:23:94:c0:3d:e2:79:84: e1:99:00:65:0d:79:0d:79:5e:c8:c2:01:51:b4:28:5f:4f:70: 6c:03:a5:46:e2:59:5d:cc:a4:92:d3:51:51:77:72:ef:f7:f8: e8:35:45:13:83:da:94:8e:8c:03:4b:4e:d9:b6:f0:69:0a:a7: 7a:ef:09:ea:d6:63:e7:ca:9c:2b:dd:46:3e:82:cd:a6:c8:3f: 73:a2:0a:56:77:f1:36:d9:de:2e:bf:f0:3c:e5:96:a0:2c:7b: 88:36:27:40:4d:db:75:c7:68:ee:97:10:38:e2:6f:41:6a:37: 1d:6a:32:24:08:55:30:d7:a7:4a:26:3a:3a:c6:97:e6:44:24: 32:d9:2b:fa:b6:3e:83:77:36:1b:4c:42:b1:3e:5d:b1:5f:16: 3c:37:83:18 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqdMOaP4fDnoTiuKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YWZmMzAtNDc4Ni00MzFjLTkwZTgtYWFmNzhjYzY0 Y2JlMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk Y2YxNTgwOWUtYjIwMS00YjAwLTk2ZmUtZjdmMzQ1NmUyMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO3BXMjeGUfYIaoXhsd09hbZGNhZWbmBJBQb KYLvjm+B8VnwMXvIay/AoDF2N3+Bt8tJEKNgu7PXyWUog5RA72+p2DAHCKfPynXW GAsz2ROuHl9LPd8Bi4UGc6wt+pehEnPpxVLbNv5GE6H1PmEiX+0HlXfm5PFyTPOh 1vTqPAnacdNqgzpzG4Nw4cuHuhwd4kCon/xWIh7WMvYAq2LyRvXAJNZEw7pr+qWI pkfB8ZJzQiW3FA2+XWTUS5LP74lFs3J4n0WVvCPX0VXrLBJ6llIN1ECwTl2bZmLx jLUv3Fq99wwMcwsK7urjWxb3HFtaXuofPLqKEfoZOZuua9fTPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC0Wg6rJsxb3BQJUlzGhsTIYW4RYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlh ZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3OGNjNjRjYmUvMTdhY2I0NzEtZjBlYy0z NzUyLTkwYTUtMDVmOTUzZWJkODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzY5YWZmMzAtNDc4Ni00MzFjLTkw ZTgtYWFmNzhjYzY0Y2JlL2M2OWFmZjMwLTQ3ODYtNDMxYy05MGU4LWFhZjc4Y2M2 NGNiZS5jcmwwHwYDVR0jBBgwFoAU4Qrm1Yk+AYyF+IGr+zP/YKM0L2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlhZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3 OGNjNjRjYmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgP7kAwQC ovVkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD78+NBcJJTOIPbYdcb6I4UlDsBOfnn2MYQ3RTQOo4Jre21A CCao6FQ8KbVtHT4gHKJ9hjbHXTPGKK3XUpydNK6jBjeobuWDOten3Hls+NDjF7E8 YhBfInVYZQVd/gQVzU5FPWRvI5TAPeJ5hOGZAGUNeQ15XsjCAVG0KF9PcGwDpUbi WV3MpJLTUVF3cu/3+Og1RROD2pSOjANLTtm28GkKp3rvCerWY+fKnCvdRj6CzabI P3OiClZ38TbZ3i6/8DzllqAse4g2J0BN23XHaO6XEDjib0FqNx1qMiQIVTDXp0om OjrGl+ZEJDLZK/q2PoN3NhtMQrE+XbFfFjw3gxg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:31 2025 by rpki-client