$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa File: d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (raw, json) Hash identifier: iSXwjr3vjdiHqAsuyuTsqAsQqRPsUngfhEkZ4sNLk2o= Subject key identifier: 5B:17:DA:42:2F:56:C3:BB:08:81:E2:C7:2A:F2:A4:13:23:32:EC:E1 Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F4328584A612B1CBCA96AC75AA0E48700 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 23162 IP address blocks: 128.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1c:bc:a9:6a:c7:5a:a0:e4:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=3bb3a778-9022-4587-98bb-8152c8e4c327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:23:c1:3d:93:23:d3:de:92:be:3e:5d:c1: 06:77:e2:00:23:ab:2f:9a:58:f6:41:49:eb:a5:a7: d3:11:29:09:99:4e:63:9a:50:68:ae:32:05:87:d9: fd:ad:7d:2c:3f:44:d6:7b:7a:e1:4a:07:1b:62:46: fc:91:0e:9b:8b:f4:2e:14:7c:6c:20:9b:95:36:ac: 7c:f4:d7:18:f4:33:ba:c9:d6:73:46:01:a7:27:78: af:60:98:24:70:ca:89:a8:c9:27:93:73:f1:e3:62: 2e:7b:e5:6a:49:50:01:03:35:b9:83:23:45:69:66: 21:da:9d:ae:bc:63:8f:6a:f2:c4:e1:0c:60:57:a0: 04:d0:fa:f1:18:ac:fa:24:48:d8:63:4e:0f:89:2c: 82:2d:8d:3d:d9:d6:32:e9:2a:48:f9:20:aa:cb:17: 7c:a7:21:3a:ca:2c:74:6b:6d:e3:d9:fa:9f:97:5a: dc:f2:9d:83:48:54:4c:94:ee:73:35:23:ac:45:32: 6e:31:21:ed:7d:8f:6f:7f:f3:30:36:64:f0:ac:92: e5:ac:03:78:67:69:50:94:eb:fc:e9:fc:35:21:a2: a5:da:4b:b9:7b:ca:7c:65:33:39:94:9c:d3:1c:e0: f9:2d:2c:92:85:de:c2:07:40:03:6d:ac:6c:19:62: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:17:DA:42:2F:56:C3:BB:08:81:E2:C7:2A:F2:A4:13:23:32:EC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b4:c8:3e:36:ed:42:3c:38:99:ba:75:8e:bc:91:7e:e6:93: 92:21:51:22:b7:17:14:b7:19:94:3d:fa:5b:f2:53:20:16:62: 63:6f:97:1a:37:13:55:1a:63:ad:9f:a4:0a:09:f6:d8:c6:4e: 09:76:2c:c0:40:ac:41:e1:4f:b5:e5:88:75:53:1d:20:e0:b2: 68:a7:47:99:a5:75:24:e6:27:ef:a3:80:db:c1:25:c1:30:e7: 66:88:f1:a5:f6:e6:e6:6d:f5:dc:ce:6d:95:fd:86:3b:87:62: 05:1a:84:cf:64:24:1b:75:b0:42:42:f9:09:f1:1e:db:66:ca: b3:a4:29:0d:20:09:ad:52:54:83:e8:a1:72:ff:09:eb:0b:96: 67:16:b9:59:70:1a:01:fb:df:92:16:df:20:0f:9c:06:9f:e9: 23:a6:e5:9e:1d:ac:a3:5e:1c:a4:35:0f:0d:e0:93:5e:ef:49: 66:6f:88:25:0c:1d:5b:7a:3f:b7:d7:f1:6e:50:11:69:d8:05: 4c:82:de:21:a3:4c:ab:cb:1b:c7:07:b1:49:4f:d8:9a:b4:30: 0c:2f:01:38:9b:e1:0a:21:59:60:71:07:02:2e:14:74:5d:c1: b5:bb:c4:da:13:a9:ff:8b:66:1b:a2:f3:ed:af:92:ce:fb:9f: 40:41:e9:16 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEphKxy8qWrHWqDkhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk M2JiM2E3NzgtOTAyMi00NTg3LTk4YmItODE1MmM4ZTRjMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp44jwT2TI9Pekr4+XcEGd+IAI6svmlj2QUnr pafTESkJmU5jmlBorjIFh9n9rX0sP0TWe3rhSgcbYkb8kQ6bi/QuFHxsIJuVNqx8 9NcY9DO6ydZzRgGnJ3ivYJgkcMqJqMknk3Px42Iue+VqSVABAzW5gyNFaWYh2p2u vGOPavLE4QxgV6AE0PrxGKz6JEjYY04PiSyCLY092dYy6SpI+SCqyxd8pyE6yix0 a23j2fqfl1rc8p2DSFRMlO5zNSOsRTJuMSHtfY9vf/MwNmTwrJLlrAN4Z2lQlOv8 6fw1IaKl2ku5e8p8ZTM5lJzTHOD5LSyShd7CB0ADbaxsGWItrwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFsX2kIvVsO7CIHixyrypBMjMuzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDliNWM4MGUtZWMyYS0z YTQ0LWE1NmYtZmM2NTk1NjVmZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANrTIPjbtQjw4mbp1jryRfuaTkiFRIrcXFLcZlD36W/JTIBZiY2+XGjcT VRpjrZ+kCgn22MZOCXYswECsQeFPteWIdVMdIOCyaKdHmaV1JOYn76OA28ElwTDn Zojxpfbm5m313M5tlf2GO4diBRqEz2QkG3WwQkL5CfEe22bKs6QpDSAJrVJUg+ih cv8J6wuWZxa5WXAaAfvfkhbfIA+cBp/pI6blnh2so14cpDUPDeCTXu9JZm+IJQwd W3o/t9fxblARadgFTILeIaNMq8sbxwexSU/YmrQwDC8BOJvhCiFZYHEHAi4UdF3B tbvE2hOp/4tmG6Lz7a+SzvufQEHpFg== -----END CERTIFICATE-----Generated at Mon Aug 4 18:23:15 2025 by rpki-client