$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa File: 54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa (raw, json) Hash identifier: jPoA+ktmexqV5vZ6O+aZ4uodMRW9sgOtzfRiYwhkSzs= Subject key identifier: CB:F5:B0:53:1C:B2:71:B5:DF:14:17:26:AF:2C:2A:96:5C:10:08:63 Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Certificate serial: 010D0C9F4328584AB220CCE3CF8D9A1B794EF8C0 Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 1299 IP address blocks: 209.95.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:cc:e3:cf:8d:9a:1b:79:4e:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=faef501c-920a-451f-8f4b-ad904415c2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2c:a1:a8:72:5d:cd:e3:8c:71:ce:52:03:df: 77:e0:c1:a6:eb:87:dd:f6:01:d9:05:14:bb:f2:3d: bc:9c:e4:af:0b:04:48:a5:7d:d8:52:88:63:d0:a3: d4:e3:2e:75:04:56:7d:f0:da:c2:85:08:7b:97:1f: 90:cf:d4:3d:37:99:79:32:66:e3:bb:63:6b:86:35: 22:5a:7c:93:df:e6:b8:66:97:1d:60:b3:81:12:35: 48:ee:88:cd:97:bd:c8:81:4e:a3:a9:d6:66:7d:ad: 9a:dd:36:9d:f7:e6:0b:56:20:28:94:a3:45:1b:88: ba:b5:e5:b4:c0:d1:c9:20:17:15:ab:c4:43:c9:eb: 83:b5:9a:62:6f:1a:df:2d:f8:0d:dd:23:a6:d5:8b: cd:6e:f3:34:65:b1:b6:ab:75:81:09:9c:33:51:07: 88:8a:46:66:86:67:ac:5e:ff:e3:0c:7c:51:2c:00: a8:5b:e0:8e:30:2e:55:8b:53:30:4d:07:55:25:25: 5c:6e:9e:38:42:1c:f5:b7:77:45:a6:8c:98:24:c8: 97:79:a6:1b:86:f7:58:42:94:7b:7c:a7:dc:65:28: c5:07:14:df:a1:d5:78:28:09:40:93:b1:c8:e4:a6: 7d:51:93:96:b7:37:03:20:b3:31:e2:ac:5b:a8:ae: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F5:B0:53:1C:B2:71:B5:DF:14:17:26:AF:2C:2A:96:5C:10:08:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl X509v3 Authority Key Identifier: keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer sbgp-ipAddrBlock: critical IPv4: 209.95.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:10:b4:09:13:96:ad:09:ab:7d:25:d5:c5:d2:4c:e9:e0:05: 86:21:fc:5e:67:c5:38:f8:91:a5:52:f2:9e:c2:19:80:8b:dc: 5f:eb:b9:e7:c6:68:d9:bf:ff:92:23:ca:9f:00:80:61:70:6d: 6f:92:61:a8:fc:cd:a8:75:69:56:cb:99:99:82:df:cf:ce:6b: 57:30:63:92:fe:e1:9e:ae:37:86:c7:07:d4:6b:5a:c1:9c:b8: 67:1a:7a:48:61:66:f8:8f:f2:9d:d7:4a:a8:de:c8:a1:00:ca: 55:18:2a:27:14:14:47:67:16:03:63:cb:87:68:0c:e6:24:d2: 02:33:57:7a:d2:89:bc:2d:7c:ec:37:26:d9:ce:03:ab:98:a5: 9b:67:50:52:8e:27:d6:b8:f4:f8:79:c7:b3:ec:f3:09:58:35: c2:83:61:a5:04:75:4f:f2:c2:ff:21:8d:12:f1:44:7f:ef:1d: b6:fc:0d:c6:62:93:45:ec:c9:23:b3:72:9f:ee:61:32:16:b0: 11:45:ea:3b:36:0c:74:ae:e5:f6:c0:64:50:e1:e6:89:e6:99: 97:ec:34:cb:67:50:fc:a0:ae:62:d9:02:c4:9a:fc:9a:1b:f9: 7a:a4:6f:e1:e5:73:10:37:df:f4:a3:fd:d8:9e:40:ba:27:a3: 08:0f:9b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMzjz42aG3lO+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMjliNDQtOGY1Yy00NDYyLWJiMTMtZDcyYjRlMTVl MjBkMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmFlZjUwMWMtOTIwYS00NTFmLThmNGItYWQ5MDQ0MTVjMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSyhqHJdzeOMcc5SA9934MGm64fd9gHZBRS7 8j28nOSvCwRIpX3YUohj0KPU4y51BFZ98NrChQh7lx+Qz9Q9N5l5Mmbju2NrhjUi WnyT3+a4ZpcdYLOBEjVI7ojNl73IgU6jqdZmfa2a3Tad9+YLViAolKNFG4i6teW0 wNHJIBcVq8RDyeuDtZpibxrfLfgN3SOm1YvNbvM0ZbG2q3WBCZwzUQeIikZmhmes Xv/jDHxRLACoW+COMC5Vi1MwTQdVJSVcbp44Qhz1t3dFpoyYJMiXeaYbhvdYQpR7 fKfcZSjFBxTfodV4KAlAk7HI5KZ9UZOWtzcDILMx4qxbqK7KhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv1sFMcsnG13xQXJq8sKpZcEAhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Y2Iy OWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJiNGUxNWUyMGQvNTRiMGZiMmMtYjVkMS0z NjViLTljYWUtY2I4NjFjZDFhYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGNiMjliNDQtOGY1Yy00NDYyLWJi MTMtZDcyYjRlMTVlMjBkLzhjYjI5YjQ0LThmNWMtNDQ2Mi1iYjEzLWQ3MmI0ZTE1 ZTIwZC5jcmwwHwYDVR0jBBgwFoAUkt30C92YmGTsWtzg9MAgG7Bke3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Y2IyOWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJi NGUxNWUyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0V+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsQtAkTlq0Jq30l1cXSTOngBYYh/F5nxTj4kaVS8p7CGYCL3F/ruefG aNm//5Ijyp8AgGFwbW+SYaj8zah1aVbLmZmC38/Oa1cwY5L+4Z6uN4bHB9RrWsGc uGcaekhhZviP8p3XSqjeyKEAylUYKicUFEdnFgNjy4doDOYk0gIzV3rSibwtfOw3 JtnOA6uYpZtnUFKOJ9a49Ph5x7Ps8wlYNcKDYaUEdU/ywv8hjRLxRH/vHbb8DcZi k0XsySOzcp/uYTIWsBFF6js2DHSu5fbAZFDh5onmmZfsNMtnUPygrmLZAsSa/Job +Xqkb+HlcxA33/Sj/dieQLonowgPm0Y= -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:25 2025 by rpki-client