$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa File: 78b3d770-5faa-388a-a628-512ab2ceaa32.roa (raw, json) Hash identifier: vJCA6JusaM89JJwwT9sAFZ6G/rL+dsh/doeRKfpnvWk= Subject key identifier: 5E:BC:44:8B:56:83:29:D8:45:28:5F:D0:67:3E:E1:2E:F9:46:7A:FB Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584AA8FDF7AD1864ACB7C2CD1B80 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 2914 IP address blocks: 142.147.128.0/22 maxlen: 22 142.147.132.0/23 maxlen: 23 142.147.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:fd:f7:ad:18:64:ac:b7:c2:cd:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=2fab4715-804a-4f75-8958-1488e74d25de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:0b:4d:22:92:26:ac:78:ad:ac:93:aa:f8: 5a:6d:7d:0b:da:cc:37:0d:1e:3d:9b:dc:58:b7:52: d6:45:8d:96:3f:f1:93:65:e2:8a:ae:77:c9:2a:a9: 7b:aa:df:12:e1:70:08:9f:5a:57:b7:da:d6:6c:9f: 40:dc:30:5f:c4:df:11:92:30:ad:44:9e:a7:61:7f: 92:b3:fd:61:09:58:b7:00:f7:0b:5e:82:22:de:65: 4f:bc:23:b4:3a:ab:60:4a:19:8b:35:89:ee:80:11: 7b:ae:14:b0:2a:b1:a3:3f:ff:2f:d2:17:5d:b8:83: 50:0c:77:ec:e1:aa:aa:91:0a:ba:b8:15:ba:cd:b2: 47:81:c5:7e:4b:99:f5:57:a5:dd:84:c4:c8:88:b0: c9:3e:6e:98:b2:63:0b:ad:19:0b:af:6b:53:13:8a: ee:2d:f5:ee:c9:5f:dc:2c:ff:0e:d4:2e:f7:b7:f7: 35:5c:8e:a9:c3:60:24:bf:5a:4b:d0:53:2b:d8:5d: d5:b7:db:6b:db:54:31:e7:2e:5b:f2:b2:3a:5e:5e: 5a:a8:33:ca:b8:70:c1:a1:34:e8:11:28:af:c3:c2: c5:e1:80:b4:20:8a:4f:75:89:76:ac:f5:b1:c1:8f: 74:f6:94:a1:8e:1b:c6:39:58:9b:e0:93:a5:81:da: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BC:44:8B:56:83:29:D8:45:28:5F:D0:67:3E:E1:2E:F9:46:7A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.128.0-142.147.133.255 142.147.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a1:64:2b:de:63:5b:38:6a:f5:da:00:35:4d:48:e9:88:92: 3d:4c:dd:25:09:c7:93:b2:08:56:37:74:dc:7a:01:8c:f1:da: 98:4a:fa:8c:e3:a0:2f:30:8b:34:b4:5f:6a:21:cd:5a:56:5d: 20:d6:81:6f:58:de:34:79:47:62:85:4f:22:b4:41:bb:e9:8a: 4d:53:02:95:32:a1:ff:0b:67:59:d8:89:b0:19:50:ed:cd:79: f8:6e:6f:bd:c3:d3:da:f4:91:f9:d2:2d:43:ff:8c:31:58:29: c4:09:5e:f1:61:c6:e3:db:79:c3:ef:7c:ff:83:f7:bf:c6:b3: b3:79:9e:64:4b:20:db:77:ee:fb:d9:72:8d:f6:88:82:fa:ca: 5e:83:67:1b:ff:0a:04:a9:af:93:57:86:50:72:99:f4:20:77: 00:49:c0:af:a8:dd:76:a8:b1:01:5d:67:83:80:e0:36:53:9d: cb:1b:48:9e:7a:11:ca:23:26:e8:a7:f1:25:28:bd:cb:6f:f2: 36:d0:56:26:89:7e:bd:19:26:f3:c6:87:aa:72:93:33:65:d0: 6f:8a:34:48:7e:99:04:11:de:ae:75:84:00:7d:c1:1b:e0:d8: 61:20:f1:bc:49:27:eb:20:9e:a0:27:a9:e9:08:c5:a8:c1:00: 37:23:92:bf -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEqo/fetGGSst8LNG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MmZhYjQ3MTUtODA0YS00Zjc1LTg5NTgtMTQ4OGU3NGQyNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33sLTSKSJqx4rayTqvhabX0L2sw3DR49m9xY t1LWRY2WP/GTZeKKrnfJKql7qt8S4XAIn1pXt9rWbJ9A3DBfxN8RkjCtRJ6nYX+S s/1hCVi3APcLXoIi3mVPvCO0OqtgShmLNYnugBF7rhSwKrGjP/8v0hdduINQDHfs 4aqqkQq6uBW6zbJHgcV+S5n1V6XdhMTIiLDJPm6YsmMLrRkLr2tTE4ruLfXuyV/c LP8O1C73t/c1XI6pw2Akv1pL0FMr2F3Vt9tr21Qx5y5b8rI6Xl5aqDPKuHDBoTTo ESivw8LF4YC0IIpPdYl2rPWxwY909pShjhvGOVib4JOlgdrMqQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFF68RItWgynYRShf0Gc+4S75Rnr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvNzhiM2Q3NzAtNWZhYS0z ODhhLWE2MjgtNTEyYWIyY2VhYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAeOk4AD BAGOk4QDBAOOk/AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAJ6FkK95jWzhq9doANU1I6YiSPUzdJQnHk7II Vjd03HoBjPHamEr6jOOgLzCLNLRfaiHNWlZdINaBb1jeNHlHYoVPIrRBu+mKTVMC lTKh/wtnWdiJsBlQ7c15+G5vvcPT2vSR+dItQ/+MMVgpxAle8WHG49t5w+98/4P3 v8azs3meZEsg23fu+9lyjfaIgvrKXoNnG/8KBKmvk1eGUHKZ9CB3AEnAr6jddqix AV1ng4DgNlOdyxtInnoRyiMm6KfxJSi9y2/yNtBWJol+vRkm88aHqnKTM2XQb4o0 SH6ZBBHernWEAH3BG+DYYSDxvEkn6yCeoCep6QjFqMEANyOSvw== -----END CERTIFICATE-----Generated at Mon Aug 4 18:31:37 2025 by rpki-client