$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa File: 973766df-850f-388b-aa20-592987be5996.roa (raw, json) Hash identifier: TcqInvaBSsJF7cXp4tFTsFHNsYdDWg+8lI5Y4llOAVA= Subject key identifier: CF:20:FA:77:7E:C7:57:F9:B0:BD:09:BB:66:D3:91:95:03:75:11:D0 Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F4328584AD936660F589385B0CEB92D00 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 22135 IP address blocks: 173.242.0.0/24 maxlen: 24 173.242.1.0/24 maxlen: 24 173.242.2.0/24 maxlen: 24 173.242.3.0/24 maxlen: 24 173.242.4.0/24 maxlen: 24 173.242.5.0/24 maxlen: 24 173.242.6.0/24 maxlen: 24 173.242.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:66:0f:58:93:85:b0:ce:b9:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=2bd3327d-cbba-4a94-8fd0-6857ec4001de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:ab:99:5a:87:d1:cd:e4:2d:35:be:13:5b: 07:d6:85:63:90:4e:49:e9:f4:d1:87:f5:0c:46:98: 8c:36:8b:56:9d:60:4c:28:e4:29:d8:ed:82:a9:4d: 40:fe:06:b8:b3:48:6a:22:c4:c7:cc:08:60:04:b6: 3a:a7:70:15:03:0e:51:4d:2b:05:8e:41:c3:2e:73: 29:28:72:d6:72:d2:6c:4a:1d:0c:4e:d9:63:62:f0: a2:03:01:72:e5:7e:c9:e9:ee:d9:93:be:aa:cc:d0: a0:19:cf:e9:56:75:ea:6c:de:e1:3e:43:5a:8f:b4: bf:aa:a1:b9:21:c7:3c:2f:81:5d:a5:7c:48:7f:0f: 52:fe:92:51:7e:48:4e:73:ab:3e:d9:b8:26:20:74: 13:25:36:99:78:be:66:13:91:58:fa:b8:71:36:43: 56:aa:1a:af:0e:8d:96:2d:c3:38:32:6a:ea:f5:86: 7e:a2:a5:58:c0:92:aa:a6:e6:d6:25:1c:f6:9e:85: d7:bc:6d:a2:77:2a:06:70:de:2e:4c:b0:47:9d:01: 0f:9e:3a:76:8f:1b:c0:0e:06:a0:64:78:2d:c2:06: 76:f0:4f:70:95:30:88:dc:a3:a6:02:10:4f:3e:78: ef:3e:f7:f4:26:0d:07:5e:8c:3b:80:bb:8d:14:77: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:FA:77:7E:C7:57:F9:B0:BD:09:BB:66:D3:91:95:03:75:11:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:81:1c:47:58:28:00:5b:86:39:c6:3f:48:3a:bd:29:91:60: 2f:27:14:c3:85:cc:90:73:af:a2:84:a4:5d:27:45:9b:9d:07: 80:52:42:02:83:87:61:3c:17:d7:d0:1f:fd:c2:f2:3e:54:a8: 23:f3:9d:cf:0d:2e:ee:48:de:23:8f:4d:36:db:58:fd:bf:ef: 7e:9a:d0:21:46:89:ef:eb:c6:57:31:38:7f:a3:aa:05:77:65: 18:36:60:fa:6d:1c:9f:5e:48:ea:8e:59:2a:15:ef:99:e9:b7: 93:b3:24:b8:06:67:c9:bb:ea:d0:90:a2:23:5f:02:0c:7b:6a: f4:93:05:6e:bc:c4:4a:39:20:63:f5:91:f4:c6:49:e4:c8:cc: 75:fc:a3:5b:39:3d:ea:68:8e:00:37:09:dc:82:21:2d:3c:c6: 9c:bb:42:92:ba:f0:ca:df:74:43:59:4c:ac:ee:e8:2f:a7:fd: b8:d9:20:20:9b:b2:bf:4b:c9:92:ce:9f:e7:e6:6b:cc:4b:ec: 34:44:d5:47:96:5d:2b:c5:09:c6:58:bd:73:5b:c8:06:28:cb: 17:aa:4c:eb:4c:c7:0b:d9:e6:6e:63:3f:05:54:78:88:1e:79: 1a:8e:48:73:18:78:b6:04:93:14:10:aa:da:c9:8e:25:e2:06: 88:f3:72:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmYPWJOFsM65LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MmJkMzMyN2QtY2JiYS00YTk0LThmZDAtNjg1N2VjNDAwMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJirmVqH0c3kLTW+E1sH1oVjkE5J6fTRh/UM RpiMNotWnWBMKOQp2O2CqU1A/ga4s0hqIsTHzAhgBLY6p3AVAw5RTSsFjkHDLnMp KHLWctJsSh0MTtljYvCiAwFy5X7J6e7Zk76qzNCgGc/pVnXqbN7hPkNaj7S/qqG5 Icc8L4FdpXxIfw9S/pJRfkhOc6s+2bgmIHQTJTaZeL5mE5FY+rhxNkNWqhqvDo2W LcM4Mmrq9YZ+oqVYwJKqpubWJRz2noXXvG2idyoGcN4uTLBHnQEPnjp2jxvADgag ZHgtwgZ28E9wlTCI3KOmAhBPPnjvPvf0Jg0HXow7gLuNFHc3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8g+nd+x1f5sL0Ju2bTkZUDdRHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvOTczNzY2ZGYtODUwZi0z ODhiLWFhMjAtNTkyOTg3YmU1OTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrfIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGBHEdYKABbhjnGP0g6vSmRYC8nFMOFzJBzr6KEpF0nRZudB4BSQgKD h2E8F9fQH/3C8j5UqCPznc8NLu5I3iOPTTbbWP2/736a0CFGie/rxlcxOH+jqgV3 ZRg2YPptHJ9eSOqOWSoV75npt5OzJLgGZ8m76tCQoiNfAgx7avSTBW68xEo5IGP1 kfTGSeTIzHX8o1s5PepojgA3CdyCIS08xpy7QpK68MrfdENZTKzu6C+n/bjZICCb sr9LyZLOn+fma8xL7DRE1UeWXSvFCcZYvXNbyAYoyxeqTOtMxwvZ5m5jPwVUeIge eRqOSHMYeLYEkxQQqtrJjiXiBojzctM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:01 2025 by rpki-client