$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa File: 5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa (raw, json) Hash identifier: kVCP6XNSLeisjOFJOZ5+rkeNIx18jvpwF40VVoQfh5Y= Subject key identifier: EC:EA:3A:82:17:58:57:F9:07:8C:57:12:B5:5C:2D:37:58:66:EC:72 Certificate issuer: /CN=ff7959e1-b47c-43d5-89e1-72b6a534e066 Certificate serial: 010D0C9F4328584AA85BA2A4971FD98003A10708 Authority key identifier: AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 29997 IP address blocks: 204.16.252.0/22 maxlen: 24 2620:0:2e60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a2:a4:97:1f:d9:80:03:a1:07:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7959e1-b47c-43d5-89e1-72b6a534e066 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=eae13f66-9583-472b-9bc1-b31536b34fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:48:72:55:fc:66:8f:b3:0d:cb:e1:66:22:40: f5:3e:6b:e0:4d:77:47:57:5a:1c:4d:ba:08:d2:08: cd:8b:e4:09:41:7c:ba:65:49:23:b2:93:c6:52:e9: 23:4f:ed:6b:82:f6:59:e8:47:d5:ae:8b:70:3b:9c: f4:5f:e4:cb:a5:93:99:5f:4f:31:cb:74:5a:43:28: 20:52:e0:d3:e5:de:a4:8c:94:d8:e9:30:71:d4:b7: 0b:88:0b:8d:a8:e1:ba:b2:e3:8d:cf:8b:3c:a1:66: 3b:50:3d:07:b3:9a:20:4c:b5:38:bf:58:d2:e4:83: 38:c3:21:e7:03:29:e7:22:ba:a2:d4:3e:01:4c:3f: 77:09:f7:27:8f:ec:26:5e:da:e7:d2:ee:54:52:cb: 41:f4:18:d1:ec:ac:12:de:18:9c:73:50:ef:34:f9: 8c:90:c2:e7:e7:2a:83:6d:4e:53:3a:9b:68:e1:c3: 15:dc:aa:5e:b9:04:37:68:72:15:ce:c6:45:07:fe: d7:6f:9d:7b:e3:5f:f7:76:d3:ce:1a:90:5c:bd:9a: ce:82:bf:de:65:83:46:1e:b2:34:53:41:4f:9c:1e: f7:89:f7:ec:42:cf:15:8a:a2:bf:80:62:00:70:c7: bf:1c:6f:7a:d1:20:35:bf:42:c6:f4:e5:10:eb:c5: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EA:3A:82:17:58:57:F9:07:8C:57:12:B5:5C:2D:37:58:66:EC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl X509v3 Authority Key Identifier: keyid:AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer sbgp-ipAddrBlock: critical IPv4: 204.16.252.0/22 IPv6: 2620:0:2e60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:dc:a0:aa:72:94:88:ed:21:91:f6:87:ef:84:32:24:3b:ea: bf:ca:d9:20:39:ba:88:e5:87:19:dc:6d:ca:3d:d9:3d:c9:9a: 28:7d:ed:cf:d4:ee:86:9d:98:15:64:92:be:bd:74:51:dc:32: 06:a3:3d:e8:38:93:34:1a:02:a8:9c:eb:a9:93:77:0b:13:10: 3a:48:41:bd:1b:92:31:4f:63:f0:f9:fb:73:6f:22:ca:f6:f0: d5:95:4a:94:ef:41:9a:0b:8e:45:20:23:c0:c1:e0:e8:9e:f1: 3f:75:b1:02:c4:96:a3:ea:23:b0:35:d8:a1:e3:d1:a6:5e:15: b6:f1:62:6e:58:1f:37:9d:af:34:6b:b9:49:4a:de:54:c8:20: 94:e4:6f:11:f3:db:d2:68:56:b8:d7:1e:b6:c5:d2:29:db:55: 8a:9a:77:26:62:41:bb:ab:4e:0f:33:97:60:ad:ff:35:09:e6: db:6e:65:6e:b3:6b:aa:bb:72:9b:b7:fa:bf:50:72:7a:c9:ce: a6:4c:09:69:40:1b:eb:de:14:f7:25:b2:49:99:e6:06:29:f2: 21:1d:e6:e5:84:c7:4d:eb:66:a2:8c:70:67:df:81:e5:1c:b0: 80:b5:be:f4:d8:77:c7:ab:a0:b5:bd:3c:70:ff:9f:95:be:fa: 35:9d:41:ce -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqoW6Kklx/ZgAOhBwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5ZTEtNzJiNmE1MzRl MDY2MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZWFlMTNmNjYtOTU4My00NzJiLTliYzEtYjMxNTM2YjM0ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0hyVfxmj7MNy+FmIkD1PmvgTXdHV1ocTboI 0gjNi+QJQXy6ZUkjspPGUukjT+1rgvZZ6EfVrotwO5z0X+TLpZOZX08xy3RaQygg UuDT5d6kjJTY6TBx1LcLiAuNqOG6suONz4s8oWY7UD0Hs5ogTLU4v1jS5IM4wyHn AynnIrqi1D4BTD93Cfcnj+wmXtrn0u5UUstB9BjR7KwS3hicc1DvNPmMkMLn5yqD bU5TOpto4cMV3KpeuQQ3aHIVzsZFB/7Xb51741/3dtPOGpBcvZrOgr/eZYNGHrI0 U0FPnB73iffsQs8ViqK/gGIAcMe/HG960SA1v0LG9OUQ68XyKwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOzqOoIXWFf5B4xXErVcLTdYZuxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5 NTllMS1iNDdjLTQzZDUtODllMS03MmI2YTUzNGUwNjYvNWEwZmIwYTQtMGExZi0z NTBmLTk4MGMtYjM0YWQ2NWM3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5 ZTEtNzJiNmE1MzRlMDY2L2ZmNzk1OWUxLWI0N2MtNDNkNS04OWUxLTcyYjZhNTM0 ZTA2Ni5jcmwwHwYDVR0jBBgwFoAUrzLB5jW47PfmZnYUm+zn/Veo2r8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5NTllMS1iNDdjLTQzZDUtODllMS03MmI2 YTUzNGUwNjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCzBD8MA8E AgACMAkDBwQmIAAALmAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAudygqnKUiO0hkfaH74QyJDvqv8rZIDm6 iOWHGdxtyj3ZPcmaKH3tz9Tuhp2YFWSSvr10UdwyBqM96DiTNBoCqJzrqZN3CxMQ OkhBvRuSMU9j8Pn7c28iyvbw1ZVKlO9BmguORSAjwMHg6J7xP3WxAsSWo+ojsDXY oePRpl4VtvFiblgfN52vNGu5SUreVMgglORvEfPb0mhWuNcetsXSKdtVipp3JmJB u6tODzOXYK3/NQnm225lbrNrqrtym7f6v1ByesnOpkwJaUAb694U9yWySZnmBiny IR3m5YTHTetmooxwZ9+B5RywgLW+9Nh3x6ugtb08cP+flb76NZ1Bzg== -----END CERTIFICATE-----Generated at Mon Aug 4 14:09:14 2025 by rpki-client