$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/2f2b9ee8-fc78-3536-9981-ac704f280d84.roa File: 2f2b9ee8-fc78-3536-9981-ac704f280d84.roa (raw, json) Hash identifier: k94m0i62KoXIQ3lNjtxSh26/T8S1oVLd9FOxMrYJcKM= Subject key identifier: 7D:36:16:0B:F9:89:55:E6:46:70:E4:B6:FF:5C:7E:9B:DE:CA:FE:65 Certificate issuer: /CN=7ed23894-86e6-4cc5-bf0f-6e077e092448 Certificate serial: 010D0C9F4328584AB65101B1B794C699F8848D00 Authority key identifier: FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/2f2b9ee8-fc78-3536-9981-ac704f280d84.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 3925 IP address blocks: 192.41.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:01:b1:b7:94:c6:99:f8:84:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed23894-86e6-4cc5-bf0f-6e077e092448 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=f3d94811-ce6f-434d-b042-61495da3f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:06:96:14:3e:01:5b:a8:91:2e:3c:3c:c1: bf:96:34:dc:f2:b4:09:73:f7:25:8c:6f:03:04:34: 24:94:2b:89:d5:05:ee:f4:c8:00:70:ef:7f:3b:fb: 24:2d:fb:b7:c9:61:7f:93:76:e8:10:28:67:3c:7f: 6b:73:8b:85:7f:71:03:5f:dc:f5:c6:17:85:14:3c: 26:56:4f:b5:48:df:c6:a5:3d:7b:f5:9f:af:5d:c8: f9:10:e0:b4:aa:3a:c2:45:e1:4c:23:65:b6:38:a1: f6:6c:24:e0:a1:18:1f:65:6c:03:ff:5d:c5:65:9b: 27:ff:48:bb:d9:50:36:aa:f5:2d:c1:2f:ae:3e:7d: 32:ab:64:4b:6e:87:31:05:41:90:68:21:c5:51:b1: c2:4c:cf:ec:6a:2a:8e:79:f3:58:66:d2:e7:d5:ad: f7:e8:af:f6:cf:18:e0:8d:f5:e8:70:6e:9c:5b:e2: de:c6:f5:aa:0b:7c:6f:75:be:6f:b7:f6:66:91:30: 20:6a:aa:1d:e5:10:01:25:2e:72:60:5d:56:7c:91: b8:57:32:e5:cf:d6:88:a3:30:c8:e6:86:a4:a2:75: 4e:c6:bf:c6:8e:5e:36:5d:3f:62:e0:a7:bc:52:be: 5b:d8:7c:d1:43:72:f1:5a:a4:c9:39:1b:ec:86:23: b7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:36:16:0B:F9:89:55:E6:46:70:E4:B6:FF:5C:7E:9B:DE:CA:FE:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/2f2b9ee8-fc78-3536-9981-ac704f280d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl X509v3 Authority Key Identifier: keyid:FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer sbgp-ipAddrBlock: critical IPv4: 192.41.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:81:e4:ac:96:cb:e5:ac:a0:07:85:5b:02:9c:9d:b8:99:1b: 3d:58:78:cd:97:10:c9:0c:ac:5a:17:bb:79:71:67:4a:66:05: 00:2c:14:14:a0:5d:69:3d:c3:ee:ab:e3:d7:14:9b:98:45:42: ed:43:f6:7d:16:1c:9e:b2:dd:ac:1a:ae:17:ee:0e:ee:fa:66: 68:cf:b5:e0:db:2c:74:c0:e8:34:71:42:fe:fc:a2:0b:e1:5a: 0d:35:8e:6a:73:43:33:22:5b:96:d0:49:ad:5a:ae:31:04:48: fd:b9:da:68:46:1a:14:d4:f2:b9:c9:99:55:dd:b6:fd:b7:15: d6:f2:81:ba:d4:90:fd:fe:68:c1:45:04:c3:95:86:f9:76:29: 0c:8e:10:d3:22:db:57:44:13:6b:05:93:b5:e5:50:60:b6:d0: 0c:f3:39:0c:c4:de:db:68:cf:dc:60:31:a6:f5:59:f1:48:c8: 4c:19:be:de:a9:5b:f6:c9:b1:4a:65:ff:55:6d:0a:78:25:4b: 21:8b:82:2a:a1:43:4e:a7:5d:e8:56:8e:c6:37:36:e5:98:28: f6:e5:8e:70:36:0e:73:0b:4b:00:09:ae:08:1a:11:6c:ca:01: 65:6e:da:fb:66:43:2d:7b:5c:a0:16:9d:a1:1f:a8:63:c9:b9: 90:cf:bd:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQGxt5TGmfiEjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkMjM4OTQtODZlNi00Y2M1LWJmMGYtNmUwNzdlMDky NDQ4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjNkOTQ4MTEtY2U2Zi00MzRkLWIwNDItNjE0OTVkYTNmN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolQGlhQ+AVuokS48PMG/ljTc8rQJc/cljG8D BDQklCuJ1QXu9MgAcO9/O/skLfu3yWF/k3boEChnPH9rc4uFf3EDX9z1xheFFDwm Vk+1SN/GpT179Z+vXcj5EOC0qjrCReFMI2W2OKH2bCTgoRgfZWwD/13FZZsn/0i7 2VA2qvUtwS+uPn0yq2RLbocxBUGQaCHFUbHCTM/saiqOefNYZtLn1a336K/2zxjg jfXocG6cW+LexvWqC3xvdb5vt/ZmkTAgaqod5RABJS5yYF1WfJG4VzLlz9aIozDI 5oakonVOxr/Gjl42XT9i4Ke8Ur5b2HzRQ3LxWqTJORvshiO38QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH02Fgv5iVXmRnDktv9cfpveyv5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWQy Mzg5NC04NmU2LTRjYzUtYmYwZi02ZTA3N2UwOTI0NDgvMmYyYjllZTgtZmM3OC0z NTM2LTk5ODEtYWM3MDRmMjgwZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VkMjM4OTQtODZlNi00Y2M1LWJm MGYtNmUwNzdlMDkyNDQ4LzdlZDIzODk0LTg2ZTYtNGNjNS1iZjBmLTZlMDc3ZTA5 MjQ0OC5jcmwwHwYDVR0jBBgwFoAU+3u4M1HVnhqgGm31Z6ATeAzXMX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWQyMzg5NC04NmU2LTRjYzUtYmYwZi02ZTA3 N2UwOTI0NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwCmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6B5KyWy+WsoAeFWwKcnbiZGz1YeM2XEMkMrFoXu3lxZ0pmBQAsFBSg XWk9w+6r49cUm5hFQu1D9n0WHJ6y3awarhfuDu76ZmjPteDbLHTA6DRxQv78ogvh Wg01jmpzQzMiW5bQSa1arjEESP252mhGGhTU8rnJmVXdtv23FdbygbrUkP3+aMFF BMOVhvl2KQyOENMi21dEE2sFk7XlUGC20AzzOQzE3ttoz9xgMab1WfFIyEwZvt6p W/bJsUpl/1VtCnglSyGLgiqhQ06nXehWjsY3NuWYKPbljnA2DnMLSwAJrggaEWzK AWVu2vtmQy17XKAWnaEfqGPJuZDPvZE= -----END CERTIFICATE-----Generated at Wed Aug 6 12:38:27 2025 by rpki-client