$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa File: 12f25d35-c636-31fa-a0b4-d96b47fb707f.roa (raw, json) Hash identifier: 9qDZfTbU/3D0vKjQfHGUPyJl/QSG6pbCgN06mjCLQhY= Subject key identifier: DC:AB:0D:7F:EE:04:8D:29:08:A7:E3:AF:BA:35:68:A1:A6:5E:27:D4 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584AC01643760169A1E64C6D0090 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 13445 IP address blocks: 170.133.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:43:76:01:69:a1:e6:4c:6d:00:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=13a9fe45-cb70-4434-8778-0caede87ca1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:53:79:e7:2b:c3:3c:cc:f0:3e:b6:de:85: 1a:2c:ca:e8:bf:9a:b4:2e:5b:80:fc:65:b3:2c:32: 27:06:c5:21:39:39:41:c1:1c:1b:47:5f:ea:1a:53: 99:d0:22:ed:cf:ef:aa:1a:a6:a0:ce:ed:93:d7:7e: a4:6b:33:3d:75:93:74:4c:9b:b4:1b:fc:d9:dc:cf: eb:4c:b0:e2:94:62:97:01:74:ed:62:6a:27:09:bb: 28:7b:3f:c2:6d:3b:97:ee:62:88:a2:d4:e4:82:55: 71:37:00:eb:d7:ab:94:47:95:b1:e6:31:4c:c1:39: 03:55:04:a3:3e:f3:b8:b0:7d:11:1e:f7:dd:c3:43: 6c:06:55:e4:2e:e8:86:29:5a:18:f5:a6:bf:8a:5b: 90:64:60:32:80:65:8f:82:f5:1c:ad:50:51:8b:33: a9:5c:58:70:03:43:b2:f0:81:61:5b:02:c2:fc:c5: c8:76:f6:98:6a:55:c7:31:2c:6b:69:0f:3f:63:36: c6:d5:33:67:a7:41:6b:80:b7:2b:b9:47:2e:e2:d2: d3:32:c0:88:4a:cb:75:e0:eb:59:74:31:6d:4b:69: f1:8d:bc:69:77:e8:7d:54:9c:44:87:62:0b:fa:9a: cc:d2:d7:62:de:4d:ad:40:22:c8:3a:b8:c3:70:36: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:0D:7F:EE:04:8D:29:08:A7:E3:AF:BA:35:68:A1:A6:5E:27:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.133.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:2e:82:d1:cc:c5:a8:ec:1d:c2:b0:67:4f:c4:54:a4:59:ce: d7:e4:48:0f:26:16:5d:54:da:1e:2f:86:52:39:7a:71:f2:f7: 36:fd:cf:5a:3f:0b:2d:f3:f0:13:27:9e:57:cb:1a:60:73:37: b9:cf:a6:a9:12:2f:98:e2:e7:3b:ce:39:5f:25:1a:fa:f5:ad: 41:a5:fd:3f:3b:c7:3f:3b:ce:2b:81:2d:44:5f:64:f9:bb:ec: 1d:6c:27:7c:61:56:cc:2d:47:c9:3a:47:e9:d9:9f:26:51:26: f6:d1:e2:51:e4:f7:c4:95:84:27:f0:d8:b8:66:e9:12:3e:e8: 81:cd:96:9c:f3:95:0d:78:5e:1a:10:00:78:2f:53:87:ec:67: 3f:ec:ef:57:05:87:49:10:1d:a4:b9:a0:b9:0a:2f:a5:4e:a1: c3:24:65:3b:01:93:5a:87:e1:67:af:96:b0:e2:28:cd:8f:16: 00:f6:58:0c:d1:b1:c8:5c:ad:7c:20:90:29:a1:d7:36:88:c4: e2:bf:60:e6:ff:8e:a4:27:6c:22:1e:27:ce:36:1c:86:a3:be: 48:19:e7:12:d4:5b:59:b4:4b:ec:00:11:8b:31:10:6c:9b:85: 3c:47:4a:e0:77:c6:63:5c:c0:e4:ea:83:7c:4c:5f:8d:9d:54: df:1f:50:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkN2AWmh5kxtAJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MTNhOWZlNDUtY2I3MC00NDM0LTg3NzgtMGNhZWRlODdjYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6pTeecrwzzM8D623oUaLMrov5q0LluA/GWz LDInBsUhOTlBwRwbR1/qGlOZ0CLtz++qGqagzu2T136kazM9dZN0TJu0G/zZ3M/r TLDilGKXAXTtYmonCbsoez/CbTuX7mKIotTkglVxNwDr16uUR5Wx5jFMwTkDVQSj PvO4sH0RHvfdw0NsBlXkLuiGKVoY9aa/iluQZGAygGWPgvUcrVBRizOpXFhwA0Oy 8IFhWwLC/MXIdvaYalXHMSxraQ8/YzbG1TNnp0FrgLcruUcu4tLTMsCISst14OtZ dDFtS2nxjbxpd+h9VJxEh2IL+prM0tdi3k2tQCLIOrjDcDYCZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyrDX/uBI0pCKfjr7o1aKGmXifUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMTJmMjVkMzUtYzYzNi0z MWZhLWEwYjQtZDk2YjQ3ZmI3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqoWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALougtHMxajsHcKwZ0/EVKRZztfkSA8mFl1U2h4vhlI5enHy9zb9z1o/ Cy3z8BMnnlfLGmBzN7nPpqkSL5ji5zvOOV8lGvr1rUGl/T87xz87ziuBLURfZPm7 7B1sJ3xhVswtR8k6R+nZnyZRJvbR4lHk98SVhCfw2Lhm6RI+6IHNlpzzlQ14XhoQ AHgvU4fsZz/s71cFh0kQHaS5oLkKL6VOocMkZTsBk1qH4WevlrDiKM2PFgD2WAzR schcrXwgkCmh1zaIxOK/YOb/jqQnbCIeJ842HIajvkgZ5xLUW1m0S+wAEYsxEGyb hTxHSuB3xmNcwOTqg3xMX42dVN8fUP0= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:31 2025 by rpki-client