$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa File: 17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa (raw, json) Hash identifier: HllA8anme63p7aEOpmQAGfhQcb3zvLirzViauTRlqiI= Subject key identifier: 63:EF:AF:72:C7:43:3F:C3:54:66:31:44:56:C7:17:E8:AB:43:FC:35 Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Certificate serial: 010D0C9F4328584AB220D6266EC8758DC126DE80 Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 16880 IP address blocks: 216.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d6:26:6e:c8:75:8d:c1:26:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=c1fd3c9e-48cf-4e2a-914d-497f36ef6d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:1f:14:6b:55:48:8a:9e:e4:c2:2b:6e:b8: c1:02:42:a9:e1:99:1d:e3:32:ac:d4:3d:5d:06:c7: 5d:74:04:14:e9:a2:15:8e:0d:e0:fd:98:36:95:1e: f6:0b:21:c9:b5:f1:46:ea:c7:e1:3a:c8:71:c4:b0: 97:c7:f2:d1:43:e5:16:27:af:c7:79:f7:15:a9:72: 4e:5d:1c:87:e0:ef:30:9c:d8:66:5d:f3:db:2d:b6: a8:f7:89:99:5d:41:ec:ba:90:52:19:d0:0e:ba:d2: 93:b5:1d:f8:8a:8f:9d:53:8f:c0:d9:7f:ba:13:f7: e8:6a:c9:a8:78:61:e3:fa:3e:a2:70:d0:02:70:9b: e4:49:c0:db:41:d5:3b:97:8f:27:96:cc:a0:9e:b3: b7:d4:f6:3c:95:62:d0:cf:a2:aa:24:0e:32:61:97: 3f:0d:45:28:79:4a:ed:92:f0:a4:4b:d9:e9:e7:84: 25:5f:bb:2f:67:40:a7:78:02:8f:0d:ae:ab:89:42: 83:19:4d:25:6e:b1:35:c0:6e:a4:3a:07:fc:09:61: 96:22:22:fe:19:ce:ca:98:de:33:29:79:be:17:9f: 25:6e:5a:d0:b7:58:e8:d9:29:b1:4b:bc:39:9a:12: 13:0b:bd:43:33:4e:b0:6a:13:78:31:a2:8f:d0:06: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EF:AF:72:C7:43:3F:C3:54:66:31:44:56:C7:17:E8:AB:43:FC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl X509v3 Authority Key Identifier: keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer sbgp-ipAddrBlock: critical IPv4: 216.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:65:20:39:ac:e2:e8:02:b3:ef:b9:66:25:95:fe:a9:df:98: 34:c3:e9:a8:8d:bc:69:ab:ba:96:d2:dd:ca:52:e4:7a:57:bd: bd:27:0f:bf:c8:5d:0c:11:e5:44:d9:df:f6:96:0e:b0:cb:ea: 51:a9:e2:86:fa:ac:21:0a:75:fc:6d:f6:e9:3b:82:a7:0f:21: d7:52:75:44:aa:64:10:98:40:52:50:7e:08:b9:10:a7:7b:6d: de:a1:a8:61:66:89:f3:d7:5a:05:4d:5c:e1:65:99:fe:fa:11: c0:b6:46:5d:1c:f8:98:e0:c2:55:e7:f2:7b:d1:45:a7:77:01: 32:46:e4:60:dd:16:bc:9e:7f:11:7b:9c:f6:57:5b:cc:d3:45: 9c:33:ea:3a:67:5d:11:e0:36:92:67:60:82:cd:33:2a:d0:f2: 53:ac:1d:c4:1d:e0:c2:6e:18:51:07:c4:73:3a:3f:af:b9:c8: d8:1b:72:60:fb:f7:45:4d:46:72:a7:4b:2d:ea:be:f4:60:c4: 4c:df:8c:79:39:97:66:3b:31:4e:77:7f:f1:07:48:a1:fd:d9: a1:6c:c4:80:fd:89:a3:33:2d:42:57:d2:44:f8:4f:9a:ab:e5: 63:2e:9c:f4:1f:9f:aa:de:23:39:79:58:4a:8a:c2:5b:36:66: 2f:9e:bb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINYmbsh1jcEm3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3MmE3OTgtYTk3OS00ZjUxLTg1YWUtZTBlZWMzZGNi OWY3MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzFmZDNjOWUtNDhjZi00ZTJhLTkxNGQtNDk3ZjM2ZWY2ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDofFGtVSIqe5MIrbrjBAkKp4Zkd4zKs1D1d BsdddAQU6aIVjg3g/Zg2lR72CyHJtfFG6sfhOshxxLCXx/LRQ+UWJ6/HefcVqXJO XRyH4O8wnNhmXfPbLbao94mZXUHsupBSGdAOutKTtR34io+dU4/A2X+6E/foasmo eGHj+j6icNACcJvkScDbQdU7l48nlsygnrO31PY8lWLQz6KqJA4yYZc/DUUoeUrt kvCkS9np54QlX7svZ0CneAKPDa6riUKDGU0lbrE1wG6kOgf8CWGWIiL+Gc7KmN4z KXm+F58lblrQt1jo2SmxS7w5mhITC71DM06wahN4MaKP0AaloQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPvr3LHQz/DVGYxRFbHF+irQ/w1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcy YTc5OC1hOTc5LTRmNTEtODVhZS1lMGVlYzNkY2I5ZjcvMTdkNTgzOTgtNGFjMS0z YmRjLTk1NmYtYzVkNGQzNDYzZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzY3MmE3OTgtYTk3OS00ZjUxLTg1 YWUtZTBlZWMzZGNiOWY3L2M2NzJhNzk4LWE5NzktNGY1MS04NWFlLWUwZWVjM2Rj YjlmNy5jcmwwHwYDVR0jBBgwFoAUuikoNWCwwHyqzvaenrqtsKIgNgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcyYTc5OC1hOTc5LTRmNTEtODVhZS1lMGVl YzNkY2I5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNlIDms4ugCs++5ZiWV/qnfmDTD6aiNvGmrupbS3cpS5HpXvb0nD7/I XQwR5UTZ3/aWDrDL6lGp4ob6rCEKdfxt9uk7gqcPIddSdUSqZBCYQFJQfgi5EKd7 bd6hqGFmifPXWgVNXOFlmf76EcC2Rl0c+JjgwlXn8nvRRad3ATJG5GDdFryefxF7 nPZXW8zTRZwz6jpnXRHgNpJnYILNMyrQ8lOsHcQd4MJuGFEHxHM6P6+5yNgbcmD7 90VNRnKnSy3qvvRgxEzfjHk5l2Y7MU53f/EHSKH92aFsxID9iaMzLUJX0kT4T5qr 5WMunPQfn6reIzl5WEqKwls2Zi+eu9E= -----END CERTIFICATE-----Generated at Tue Aug 5 08:16:18 2025 by rpki-client