$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/d9d2edf2-a2b8-340a-871f-8915988ad447.roa File: d9d2edf2-a2b8-340a-871f-8915988ad447.roa (raw, json) Hash identifier: 5Bp7CwRO4Q9ndkV3KxcTuAweJBmkVvv3LPeGsM+/OL8= Subject key identifier: F5:0A:F2:AD:EA:86:9E:84:ED:06:8E:40:68:3E:55:F8:19:53:A9:91 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584AB7B63BE71F2C3322C1693780 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/d9d2edf2-a2b8-340a-871f-8915988ad447.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 23316 IP address blocks: 206.72.64.0/19 maxlen: 24 216.240.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:3b:e7:1f:2c:33:22:c1:69:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=f8295de7-4f40-4c06-a658-bbcaae102186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:db:18:0c:fb:24:34:bc:8c:b1:4d:e1:7a:0e: 50:4c:8d:bf:da:df:92:18:41:98:81:00:a7:4b:98: 47:13:12:26:5c:fa:8b:ca:20:59:58:b1:cb:5c:db: 34:63:99:b2:6a:22:bf:16:a6:7c:14:41:a5:3a:8b: c8:6f:73:29:19:a9:e4:1f:d0:6d:a3:be:46:f0:57: ab:d4:d3:63:8e:d8:2c:a5:9c:83:7e:0c:4c:8b:50: 97:81:b6:98:fc:41:4a:3c:24:a8:3b:f8:75:b6:02: ab:9a:dd:5c:5d:4d:5b:d9:0d:c9:d8:10:ea:d5:69: 7b:7f:c5:0e:13:5c:9e:29:79:ca:58:cc:bc:82:90: a2:f7:f0:c9:54:c1:a0:c1:ed:1b:cd:76:fa:59:f5: 56:94:90:cc:fb:19:58:24:c3:98:0f:27:71:27:ab: 36:aa:93:aa:7a:3b:c4:1a:2f:d3:66:dc:4e:36:1e: 6c:df:70:33:43:2d:69:92:1e:46:45:5f:89:53:d6: 46:da:f6:34:a7:fc:27:7f:f1:48:e2:9f:8a:ea:16: 25:bc:6a:d1:1a:5f:72:58:c6:ce:19:8e:99:1d:6a: a4:9c:35:50:3e:c1:bb:7e:07:e0:50:b7:04:0b:1d: 2e:43:4c:ed:91:19:6d:6d:16:3f:49:f1:17:59:2a: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:F2:AD:EA:86:9E:84:ED:06:8E:40:68:3E:55:F8:19:53:A9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/d9d2edf2-a2b8-340a-871f-8915988ad447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 206.72.64.0/19 216.240.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:de:e2:54:56:07:d5:5b:75:19:c5:c2:a8:fc:e1:91:6b:9c: 48:87:2e:17:ab:30:3e:6a:8f:70:8d:a7:e6:42:d6:50:38:ce: 35:0b:b4:93:77:05:ff:21:fd:87:00:58:1c:35:e7:cd:00:03: 96:79:bd:14:c3:32:d7:86:8c:52:45:4c:46:b0:96:5f:c2:b7: 6c:05:c7:e9:07:d0:ad:18:02:e1:fb:6c:3e:08:84:96:1a:56: 55:46:ba:8f:0b:60:b8:0b:d3:35:2b:88:3d:1c:fb:fa:d2:df: 6e:27:bc:36:ca:4e:e5:d0:3f:46:80:f6:ed:83:62:ce:a8:2c: b3:e9:b2:52:fb:af:aa:2d:ee:ae:d1:65:50:d4:83:a9:f4:41: c7:6c:c4:16:62:3e:c3:0f:aa:e9:9a:fc:3f:d9:65:52:f7:47: bc:a7:4a:d4:37:9f:2a:4d:2a:07:ee:95:45:61:cb:b1:5f:f9: 4a:2d:db:9d:46:ec:18:ce:54:0c:06:41:c9:0b:74:6c:42:a7: db:8c:1c:a4:c6:24:2d:3d:f7:df:ea:d0:56:72:f9:75:0e:b7: 28:d2:8d:c7:ab:f2:52:25:16:ad:a2:47:ca:56:b6:b3:7f:fe: c1:90:94:46:8c:a1:9a:d8:a8:20:6b:b4:20:4c:ed:e6:76:3a: e2:69:5c:24 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq3tjvnHywzIsFpN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjgyOTVkZTctNGY0MC00YzA2LWE2NTgtYmJjYWFlMTAyMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdsYDPskNLyMsU3heg5QTI2/2t+SGEGYgQCn S5hHExImXPqLyiBZWLHLXNs0Y5myaiK/FqZ8FEGlOovIb3MpGankH9Bto75G8Fer 1NNjjtgspZyDfgxMi1CXgbaY/EFKPCSoO/h1tgKrmt1cXU1b2Q3J2BDq1Wl7f8UO E1yeKXnKWMy8gpCi9/DJVMGgwe0bzXb6WfVWlJDM+xlYJMOYDydxJ6s2qpOqejvE Gi/TZtxONh5s33AzQy1pkh5GRV+JU9ZG2vY0p/wnf/FI4p+K6hYlvGrRGl9yWMbO GY6ZHWqknDVQPsG7fgfgULcECx0uQ0ztkRltbRY/SfEXWSrZ7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPUK8q3qhp6E7QaOQGg+VfgZU6mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvZDlkMmVkZjItYTJiOC0z NDBhLTg3MWYtODkxNTk4OGFkNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFzkhAAwQF 2PAgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKTe4lRWB9VbdRnFwqj84ZFrnEiHLherMD5qj3CNp+ZC1lA4 zjULtJN3Bf8h/YcAWBw1580AA5Z5vRTDMteGjFJFTEawll/Ct2wFx+kH0K0YAuH7 bD4IhJYaVlVGuo8LYLgL0zUriD0c+/rS324nvDbKTuXQP0aA9u2DYs6oLLPpslL7 r6ot7q7RZVDUg6n0QcdsxBZiPsMPquma/D/ZZVL3R7ynStQ3nypNKgfulUVhy7Ff +Uot251G7BjOVAwGQckLdGxCp9uMHKTGJC0999/q0FZy+XUOtyjSjcer8lIlFq2i R8pWtrN//sGQlEaMoZrYqCBrtCBM7eZ2OuJpXCQ= -----END CERTIFICATE-----Generated at Wed Aug 6 10:03:13 2025 by rpki-client