$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa File: 658f8956-451b-3b57-883e-5ede69e83e94.roa (raw, json) Hash identifier: 9DupS3YxHINChZOY6JxT2OCt9egaij/QxQQJJdKulS4= Subject key identifier: 32:AA:39:74:54:A9:7E:B9:BD:2A:18:AD:29:1A:41:E6:CD:E6:EE:00 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584AB91B9460C3646DFA071AD320 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 3737 IP address blocks: 204.186.0.0/16 maxlen: 24 209.50.128.0/19 maxlen: 24 209.173.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:94:60:c3:64:6d:fa:07:1a:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=74b60057-55e8-4c2a-9262-3a0828b47649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:56:1b:26:43:7d:17:cd:1f:34:1f:26:bb:01: 47:ce:20:0e:25:99:a8:8c:3a:b0:4d:89:0a:de:13: 7c:74:51:9e:62:e5:5c:b4:a8:91:7c:28:98:57:a6: 7e:9e:f8:9d:88:4c:79:73:3d:e0:47:9c:ab:ba:af: 96:bc:ae:ad:b6:52:63:92:eb:da:c2:af:e7:94:5d: b3:00:8c:3c:2d:e3:9a:1c:31:31:8e:f1:a5:98:b5: 2a:64:14:f4:93:c2:c3:6a:17:6e:21:18:9f:eb:fa: 31:f1:4b:be:15:2d:69:0e:42:ba:b9:4a:0c:9b:0a: 54:7c:06:11:9a:a6:82:ae:f7:85:39:12:c0:1e:a2: 57:36:57:4c:78:d8:6b:38:13:04:fa:42:16:1a:57: 86:a9:15:99:2d:81:a9:9b:0c:db:9e:a6:ae:d4:3f: f5:3e:be:28:41:23:e9:53:37:28:1d:05:ad:db:84: 54:c8:7a:0f:7a:b1:77:3a:f8:81:6c:98:1a:7d:ae: 2d:dc:2a:d9:08:7c:3f:c7:d7:5d:4e:c8:b3:a9:4e: d1:8e:a0:ef:75:eb:d8:96:65:52:20:fc:2a:a5:88: 77:d0:91:de:5d:d2:ae:89:04:75:3c:7a:73:03:69: f7:55:c5:d5:8b:e4:d7:70:a3:71:b8:36:ec:ca:0f: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AA:39:74:54:A9:7E:B9:BD:2A:18:AD:29:1A:41:E6:CD:E6:EE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 204.186.0.0/16 209.50.128.0/19 209.173.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0c:c4:12:d5:95:47:0c:ae:ea:b2:98:d1:65:e0:07:56:9e: 0a:b4:ad:92:f6:ad:77:9a:67:5d:3f:16:a0:12:81:34:39:80: 24:e6:df:0b:ce:22:e1:75:b4:8a:82:90:9b:ed:b3:93:ee:13: fd:87:01:e9:54:03:76:0b:98:48:17:e1:fe:9a:f9:c1:a9:23: 30:e3:86:1e:ba:08:8c:4d:b1:1b:40:03:c0:ba:9c:9b:b7:49: a2:75:cd:ae:8b:54:2f:d1:48:ec:f4:e0:82:b8:0d:4c:2c:ad: 49:6c:b9:87:78:16:a3:ad:bb:cc:76:33:7a:99:a2:fe:64:e4: c7:49:09:49:e7:68:3c:9a:a0:9e:d6:59:9c:28:2a:b2:31:b7: 16:1e:f3:a8:42:60:54:95:75:0e:dd:d9:1a:27:81:c2:01:dc: 0e:11:f1:bc:7f:74:15:83:d6:3a:28:a7:fc:a7:5f:bf:2d:5b: ce:7e:0c:db:98:c4:74:2e:45:cd:75:21:15:41:eb:65:b3:bf: 76:d4:83:fe:ce:5f:45:3e:dd:e5:a8:f2:61:ed:be:f3:34:7f: 55:7f:8f:8a:53:d1:61:25:df:f8:e5:3d:1d:e8:e5:18:bc:10: 1f:53:72:c2:d9:f8:2b:4f:91:df:ad:59:a8:1b:87:17:d7:50: f2:93:c5:f1 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEq5G5Rgw2Rt+gca0yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzRiNjAwNTctNTVlOC00YzJhLTkyNjItM2EwODI4YjQ3NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFYbJkN9F80fNB8muwFHziAOJZmojDqwTYkK 3hN8dFGeYuVctKiRfCiYV6Z+nvidiEx5cz3gR5yruq+WvK6ttlJjkuvawq/nlF2z AIw8LeOaHDExjvGlmLUqZBT0k8LDahduIRif6/ox8Uu+FS1pDkK6uUoMmwpUfAYR mqaCrveFORLAHqJXNldMeNhrOBME+kIWGleGqRWZLYGpmwzbnqau1D/1Pr4oQSPp UzcoHQWt24RUyHoPerF3OviBbJgafa4t3CrZCHw/x9ddTsizqU7RjqDvdevYlmVS IPwqpYh30JHeXdKuiQR1PHpzA2n3VcXVi+TXcKNxuDbsyg9m+wIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFDKqOXRUqX65vSoYrSkaQebN5u4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNjU4Zjg5NTYtNDUxYi0z YjU3LTg4M2UtNWVkZTY5ZTgzZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAzLoDBAXR MoADBAXRrQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAawzEEtWVRwyu6rKY0WXgB1aeCrStkvatd5pnXT8W oBKBNDmAJObfC84i4XW0ioKQm+2zk+4T/YcB6VQDdguYSBfh/pr5wakjMOOGHroI jE2xG0ADwLqcm7dJonXNrotUL9FI7PTggrgNTCytSWy5h3gWo627zHYzepmi/mTk x0kJSedoPJqgntZZnCgqsjG3Fh7zqEJgVJV1Dt3ZGieBwgHcDhHxvH90FYPWOiin /Kdfvy1bzn4M25jEdC5FzXUhFUHrZbO/dtSD/s5fRT7d5ajyYe2+8zR/VX+PilPR YSXf+OU9HejlGLwQH1Nywtn4K0+R361ZqBuHF9dQ8pPF8Q== -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:52 2025 by rpki-client