$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa File: 8b6fff14-b094-3713-a051-4308275fdb21.roa (raw, json) Hash identifier: nSTd2xkgCR7/NjU/tdJHJVZAHvWnXfy6BwmtAYE4qTI= Subject key identifier: 19:2A:35:6C:B2:1E:35:84:F4:B9:2B:0B:28:B7:F2:1E:DE:08:25:DA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F6202A5F095BCDE249DB60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 5065 IP address blocks: 216.132.124.0/24 maxlen: 24 216.132.125.0/24 maxlen: 24 216.132.132.0/24 maxlen: 24 216.132.133.0/24 maxlen: 24 216.132.134.0/24 maxlen: 24 216.132.135.0/24 maxlen: 24 216.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:20:2a:5f:09:5b:cd:e2:49:db:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=66837e75-bbf2-41d4-a30a-08e16e1e8622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:af:ef:a3:65:08:09:62:04:c1:d9:c6:d8: 57:53:2b:ba:be:b2:bb:d7:09:ef:d7:1b:76:6a:cb: f8:9e:ab:de:b4:00:08:1c:78:e5:c6:de:c2:d6:ba: 5b:16:41:32:3f:7b:e6:13:02:d1:f7:82:ea:8a:32: 69:23:01:58:e6:d6:bf:57:20:77:71:3b:ec:8e:f6: 3e:ef:6b:31:d9:51:07:ef:70:ff:9e:32:1d:4c:c3: a5:c4:9b:18:b6:43:b8:be:71:0d:57:b0:e1:17:0b: 48:66:68:5b:c4:96:ce:89:85:64:e0:d9:99:83:42: d9:c2:54:4c:83:21:64:0c:77:4e:f1:75:63:50:83: 56:ee:8b:0a:f2:50:00:f2:a3:a3:27:50:08:b7:55: 52:77:83:60:65:83:94:16:ed:52:d5:3e:32:51:57: 68:e9:3d:3b:5d:19:2b:bc:b2:98:35:b9:ec:86:f9: 6f:04:b1:13:4f:21:fa:b7:99:28:58:f9:84:54:a4: c8:a2:28:c3:21:87:82:d5:de:2e:27:ca:3d:03:5a: ee:d2:31:3f:4b:bb:54:ad:7b:49:61:4a:60:ec:dd: b7:49:0d:78:fd:5e:c6:f4:bd:b5:d7:3a:01:38:60: 3f:b2:9f:6f:45:92:b4:b9:e2:24:3d:ba:99:95:e4: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2A:35:6C:B2:1E:35:84:F4:B9:2B:0B:28:B7:F2:1E:DE:08:25:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.124.0/23 216.132.132.0/22 216.132.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6b:40:04:ad:b8:07:6a:07:c7:47:a4:1f:73:30:ea:6e:0c: 8a:5b:5c:23:28:a1:8d:07:32:8a:94:94:c7:ad:44:d6:c4:53: cd:7f:27:be:b9:ec:1c:e3:e7:81:69:46:4f:34:9b:c7:b6:d4: 9e:be:fa:e8:e5:58:5b:b5:30:62:3f:99:51:c4:64:fe:95:a8: 32:f3:bb:02:af:7a:c6:e4:4a:5e:c3:ba:c9:c2:f0:45:33:62: 93:53:2a:b8:2f:4e:83:5c:c2:7d:12:61:a2:f4:ed:b7:5d:aa: 93:0d:40:62:13:b9:f8:36:7a:c4:43:78:bb:8a:c0:ed:3c:9c: 3e:f6:7b:05:59:5f:a8:40:e9:4b:9f:9c:04:8c:b2:e0:c7:63: 16:35:86:0b:38:bd:09:ac:fd:29:e4:cb:56:6a:8f:39:b6:1a: 95:44:85:7e:df:df:9a:f1:58:a5:93:9d:24:de:a4:bf:35:1f: 42:48:7b:70:2f:02:a0:54:12:d0:44:9b:88:9b:6e:24:a3:e5: 7d:8d:c6:d1:4c:4a:61:63:14:f8:3c:6b:ec:4d:b7:bd:85:47: dc:5f:3b:53:9d:0f:4f:80:67:da:10:71:be:2b:52:3e:22:1e: c4:be:6e:58:53:f7:b3:1d:25:e6:b8:1c:26:c8:8c:4a:df:7d: d6:e9:fe:48 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEqm9iAqXwlbzeJJ22AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NjY4MzdlNzUtYmJmMi00MWQ0LWEzMGEtMDhlMTZlMWU4NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnViv76NlCAliBMHZxthXUyu6vrK71wnv1xt2 asv4nqvetAAIHHjlxt7C1rpbFkEyP3vmEwLR94LqijJpIwFY5ta/VyB3cTvsjvY+ 72sx2VEH73D/njIdTMOlxJsYtkO4vnENV7DhFwtIZmhbxJbOiYVk4NmZg0LZwlRM gyFkDHdO8XVjUINW7osK8lAA8qOjJ1AIt1VSd4NgZYOUFu1S1T4yUVdo6T07XRkr vLKYNbnshvlvBLETTyH6t5koWPmEVKTIoijDIYeC1d4uJ8o9A1ru0jE/S7tUrXtJ YUpg7N23SQ14/V7G9L211zoBOGA/sp9vRZK0ueIkPbqZleRJvQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBkqNWyyHjWE9LkrCyi38h7eCCXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGI2ZmZmMTQtYjA5NC0z NzEzLWEwNTEtNDMwODI3NWZkYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQB2IR8AwQC 2ISEAwQA2ISUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKprQAStuAdqB8dHpB9zMOpuDIpbXCMooY0HMoqU lMetRNbEU81/J7657Bzj54FpRk80m8e21J6++ujlWFu1MGI/mVHEZP6VqDLzuwKv esbkSl7DusnC8EUzYpNTKrgvToNcwn0SYaL07bddqpMNQGITufg2esRDeLuKwO08 nD72ewVZX6hA6UufnASMsuDHYxY1hgs4vQms/Snky1Zqjzm2GpVEhX7f35rxWKWT nSTepL81H0JIe3AvAqBUEtBEm4ibbiSj5X2NxtFMSmFjFPg8a+xNt72FR9xfO1Od D0+AZ9oQcb4rUj4iHsS+blhT97MdJea4HCbIjErffdbp/kg= -----END CERTIFICATE-----Generated at Sun Aug 10 04:14:28 2025 by rpki-client