$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e892c0-a25c-3c43-a024-6eae7ab6f1e6.roa File: c7e892c0-a25c-3c43-a024-6eae7ab6f1e6.roa (raw, json) Hash identifier: E67Il+hHjUByO2bsNWX6WJ+aLLFYga3l+QJzjL7LLRw= Subject key identifier: 40:DE:D1:CF:DD:DD:F9:D8:38:28:79:2A:3B:A1:6D:63:C2:04:01:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AAB265396DD17886392BF3000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e892c0-a25c-3c43-a024-6eae7ab6f1e6.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 21342 IP address blocks: 23.74.25.0/24 maxlen: 24 23.77.195.0/24 maxlen: 24 72.246.46.0/24 maxlen: 24 96.7.49.0/24 maxlen: 24 96.7.50.0/24 maxlen: 24 96.7.136.0/24 maxlen: 24 96.7.137.0/24 maxlen: 24 96.7.138.0/24 maxlen: 24 96.7.139.0/24 maxlen: 24 96.17.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:53:96:dd:17:88:63:92:bf:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=c8805987-f37a-4ced-bd66-e6aed4ade48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:f1:70:36:fa:cb:c8:ff:c0:89:5c:7d:b3: 74:a6:9b:7a:79:b2:02:e4:13:40:d0:b6:75:0b:bb: ab:be:75:fc:c2:5b:fb:e3:4b:f2:e7:36:64:23:bd: b2:d7:f1:7d:64:42:72:2e:6e:1a:be:bc:e4:4f:41: 9c:b8:1c:07:c3:25:7c:32:93:1c:dc:36:a7:64:42: e0:f6:55:8f:d7:db:7c:88:7f:6b:36:b5:03:96:d7: 1f:75:0e:8c:d6:cd:1e:97:e6:68:15:90:b0:b3:f8: 87:9c:6d:54:88:52:ce:1b:9b:62:ca:23:18:8f:cb: 26:8a:35:f7:ef:47:87:6a:15:b1:6e:8d:74:e4:26: d0:66:8b:ed:e0:76:6f:5e:35:41:9b:31:d2:5f:9d: 03:df:29:ac:9d:8b:e4:3e:ed:93:2c:28:11:6b:50: 48:79:ce:ae:bf:87:94:5f:f0:ae:63:89:da:94:bb: 2a:48:5e:af:1a:77:9f:80:7d:a9:b0:0a:7b:ac:92: 83:45:c1:a7:f7:38:62:54:b4:60:4f:cf:d3:6c:6d: b7:a9:6e:fb:84:b1:77:90:c6:7f:3b:dd:4d:0a:2c: cf:74:9e:5b:e2:41:46:78:12:65:77:e6:43:37:5c: c4:92:8d:de:f5:05:88:1f:3d:49:97:1b:45:51:be: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:D1:CF:DD:DD:F9:D8:38:28:79:2A:3B:A1:6D:63:C2:04:01:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e892c0-a25c-3c43-a024-6eae7ab6f1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.74.25.0/24 23.77.195.0/24 72.246.46.0/24 96.7.49.0-96.7.50.255 96.7.136.0/22 96.17.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d1:24:a4:d1:b4:4c:67:09:2e:b6:d0:99:d3:77:0c:53:c2: fb:e0:e1:3f:08:27:cd:56:f9:8d:c6:c2:12:9d:2d:96:c0:38: c3:6f:ec:0a:37:5c:dd:a1:7d:b3:ff:d8:3e:50:2b:89:c7:5e: e0:ed:8a:88:dc:d3:84:4f:1e:02:61:00:4f:88:b2:53:04:cc: 83:2a:02:c3:81:ad:7c:56:40:41:31:c1:7e:9e:a9:79:e6:68: 2b:ac:b3:67:77:be:4e:bf:47:a3:50:89:d4:7a:31:08:e4:48: 6a:a5:87:c7:e1:9d:b4:be:97:f3:9b:f3:59:44:1c:5a:99:c5: 12:c0:f2:52:fb:c1:6e:a3:25:f1:79:f5:c3:91:bc:c9:5c:29: be:77:65:85:34:15:25:ff:e0:c6:db:5c:a1:40:41:40:c3:3a: ae:12:7f:02:07:ff:07:25:59:de:a5:4e:f1:60:2b:be:81:b9: 42:a2:d2:a6:83:97:13:92:dc:0e:03:fe:35:15:37:e5:f0:db: 06:cb:f0:11:24:d4:92:47:63:e3:c1:b0:07:14:63:c3:1a:21: d3:cc:9d:52:97:98:6c:64:54:5d:3a:6d:26:1c:95:4c:fa:6f: ec:6c:03:40:28:e3:3f:6f:ac:b0:bf:53:b3:c8:27:6a:fb:1e: 8d:a2:9a:76 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEqrJlOW3ReIY5K/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk Yzg4MDU5ODctZjM3YS00Y2VkLWJkNjYtZTZhZWQ0YWRlNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNvxcDb6y8j/wIlcfbN0ppt6ebIC5BNA0LZ1 C7urvnX8wlv740vy5zZkI72y1/F9ZEJyLm4avrzkT0GcuBwHwyV8MpMc3DanZELg 9lWP19t8iH9rNrUDltcfdQ6M1s0el+ZoFZCws/iHnG1UiFLOG5tiyiMYj8smijX3 70eHahWxbo105CbQZovt4HZvXjVBmzHSX50D3ymsnYvkPu2TLCgRa1BIec6uv4eU X/CuY4nalLsqSF6vGnefgH2psAp7rJKDRcGn9zhiVLRgT8/TbG23qW77hLF3kMZ/ O91NCizPdJ5b4kFGeBJld+ZDN1zEko3e9QWIHz1JlxtFUb68KwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFEDe0c/d3fnYOCh5KjuhbWPCBAF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdlODkyYzAtYTI1Yy0z YzQzLWEwMjQtNmVhZTdhYjZmMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAF0oZAwQA F03DAwQASPYuMAwDBABgBzEDBABgBzIDBAJgB4gDBABgEW4wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUdEk pNG0TGcJLrbQmdN3DFPC++DhPwgnzVb5jcbCEp0tlsA4w2/sCjdc3aF9s//YPlAr icde4O2KiNzThE8eAmEAT4iyUwTMgyoCw4GtfFZAQTHBfp6peeZoK6yzZ3e+Tr9H o1CJ1HoxCORIaqWHx+GdtL6X85vzWUQcWpnFEsDyUvvBbqMl8Xn1w5G8yVwpvndl hTQVJf/gxttcoUBBQMM6rhJ/Agf/ByVZ3qVO8WArvoG5QqLSpoOXE5LcDgP+NRU3 5fDbBsvwESTUkkdj48GwBxRjwxoh08ydUpeYbGRUXTptJhyVTPpv7GwDQCjjP2+s sL9Ts8gnavsejaKadg== -----END CERTIFICATE-----Generated at Mon Aug 4 18:24:10 2025 by rpki-client