$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/0128e648-0f56-3191-ab17-c97698a8e8e5.roa File: 0128e648-0f56-3191-ab17-c97698a8e8e5.roa (raw, json) Hash identifier: I/LPPRg/LjWICnJVfnjR9Oxirqesn5sWE8Xgbfmuf6k= Subject key identifier: 78:02:AE:52:D1:D5:0B:EB:C5:B0:47:C8:BA:9B:8D:4D:2D:A8:4B:D6 Certificate issuer: /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600 Certificate serial: 010D0C9F4328584AD23BB1D2103F5F69EBC78300 Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/0128e648-0f56-3191-ab17-c97698a8e8e5.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 46446 IP address blocks: 69.71.192.0/20 maxlen: 24 74.116.240.0/21 maxlen: 24 158.247.66.0/23 maxlen: 24 162.210.144.0/22 maxlen: 24 170.199.222.0/23 maxlen: 24 192.67.253.0/24 maxlen: 24 192.78.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b1:d2:10:3f:5f:69:eb:c7:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=9797fca2-377b-4c37-adb9-31038648a292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:de:b1:96:ee:e2:de:e7:6f:75:b0:38:27: a6:92:7c:c1:90:b7:4c:cb:04:2b:3f:3e:84:49:9a: b4:8b:6f:e6:17:db:87:09:37:e1:fd:0f:6b:4d:18: b5:3c:e4:9c:ba:1c:45:61:8d:cd:8f:b2:d4:b0:ee: 90:73:5a:11:20:ff:a6:6e:7f:96:cf:89:a1:58:3c: fe:f7:d8:94:2d:2c:2a:9b:f5:2a:90:a3:b5:e9:b2: a4:96:03:dc:6f:5c:ed:c9:35:72:5f:e8:2d:ee:72: fb:32:5b:ab:5f:4c:09:dc:27:18:94:3b:69:ed:8e: c3:fa:9c:7d:f8:fd:b0:c1:f8:b4:52:25:b7:35:74: fc:70:00:7f:76:9b:4e:7a:19:14:84:2e:cd:21:ff: c9:5b:63:ef:1f:3e:da:f0:5c:e7:d7:29:2c:27:ec: 5c:d0:38:33:b7:be:6e:30:c2:d3:8a:f1:c5:31:1a: 42:da:13:5d:17:be:b2:7e:5e:c9:f3:dc:ce:ca:58: 8b:df:d8:c1:83:f1:4e:f1:bc:68:27:4a:ca:1c:b0: a8:de:42:06:d0:05:19:7d:0b:f4:c1:6f:26:46:e8: bb:9a:d7:f2:32:e2:eb:97:22:96:c3:be:37:db:8d: 08:8f:16:41:67:69:30:63:8e:73:5e:9b:12:b2:db: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:02:AE:52:D1:D5:0B:EB:C5:B0:47:C8:BA:9B:8D:4D:2D:A8:4B:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/0128e648-0f56-3191-ab17-c97698a8e8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl X509v3 Authority Key Identifier: keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer sbgp-ipAddrBlock: critical IPv4: 69.71.192.0/20 74.116.240.0/21 158.247.66.0/23 162.210.144.0/22 170.199.222.0/23 192.67.253.0/24 192.78.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cf:de:e9:c8:85:67:90:aa:2b:20:78:53:eb:7f:a6:fc:97: b4:ae:be:90:01:00:a0:de:28:83:01:10:1a:7c:84:3b:ce:ee: 64:23:8d:7d:df:1e:8e:83:6d:8d:f3:e0:99:55:d8:58:ff:78: 21:b5:58:f2:14:63:f6:74:1a:04:6c:f3:2c:e2:1d:14:cd:47: bd:2c:f9:f4:b5:ad:37:68:34:73:d7:86:f4:af:6b:86:f8:51: 6f:63:1a:4f:2c:3b:47:fa:1e:5d:eb:a7:f6:4e:1a:6c:7f:5d: c3:5a:21:99:0e:f3:c2:44:d1:fe:14:70:de:96:2b:ad:11:21: 7a:e1:2c:05:f9:62:17:4e:b2:2f:a7:2e:4f:33:40:db:49:9f: c3:49:d5:2d:bd:21:a6:60:66:bd:c7:e7:8f:80:95:65:80:74: 08:21:3c:a3:7e:c9:95:45:68:fb:43:33:57:8d:18:03:15:2e: 48:84:6a:b5:4d:a4:cd:68:62:fd:c4:00:1c:12:30:cf:1d:c0: 81:33:2f:9b:b6:0f:96:0e:00:ca:bb:01:b9:25:5e:d5:af:2a: 8a:fa:0b:36:12:66:34:bd:cf:59:f1:20:4f:f3:5a:60:ea:3c: 3d:c5:a4:30:64:1b:59:2b:8c:2b:0c:b3:a1:d7:99:7a:51:c5: 7a:fb:2b:f6 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWErSO7HSED9faevHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4N2M4ZWEtZDVhYy00ZjU5LTk0Y2QtNWRlN2E1YzUx NjAwMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTc5N2ZjYTItMzc3Yi00YzM3LWFkYjktMzEwMzg2NDhhMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gjesZbu4t7nb3WwOCemknzBkLdMywQrPz6E SZq0i2/mF9uHCTfh/Q9rTRi1POScuhxFYY3Nj7LUsO6Qc1oRIP+mbn+Wz4mhWDz+ 99iULSwqm/UqkKO16bKklgPcb1ztyTVyX+gt7nL7MlurX0wJ3CcYlDtp7Y7D+px9 +P2wwfi0UiW3NXT8cAB/dptOehkUhC7NIf/JW2PvHz7a8Fzn1yksJ+xc0Dgzt75u MMLTivHFMRpC2hNdF76yfl7J89zOyliL39jBg/FO8bxoJ0rKHLCo3kIG0AUZfQv0 wW8mRui7mtfyMuLrlyKWw743240IjxZBZ2kwY45zXpsSstsBBwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFHgCrlLR1QvrxbBHyLqbjU0tqEvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3 YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3YTVjNTE2MDAvMDEyOGU2NDgtMGY1Ni0z MTkxLWFiMTctYzk3Njk4YThlOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg4N2M4ZWEtZDVhYy00ZjU5LTk0 Y2QtNWRlN2E1YzUxNjAwLzY4ODdjOGVhLWQ1YWMtNGY1OS05NGNkLTVkZTdhNWM1 MTYwMC5jcmwwHwYDVR0jBBgwFoAU4vJM+75XeR9VGBcYdJHcH0MyBxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3 YTVjNTE2MDAuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQERUfAAwQD SnTwAwQBnvdCAwQCotKQAwQBqsfeAwQAwEP9AwQAwE4AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH3P3unI hWeQqisgeFPrf6b8l7SuvpABAKDeKIMBEBp8hDvO7mQjjX3fHo6DbY3z4JlV2Fj/ eCG1WPIUY/Z0GgRs8yziHRTNR70s+fS1rTdoNHPXhvSva4b4UW9jGk8sO0f6Hl3r p/ZOGmx/XcNaIZkO88JE0f4UcN6WK60RIXrhLAX5YhdOsi+nLk8zQNtJn8NJ1S29 IaZgZr3H54+AlWWAdAghPKN+yZVFaPtDM1eNGAMVLkiEarVNpM1oYv3EABwSMM8d wIEzL5u2D5YOAMq7AbklXtWvKor6CzYSZjS9z1nxIE/zWmDqPD3FpDBkG1krjCsM s6HXmXpRxXr7K/Y= -----END CERTIFICATE-----Generated at Sun Aug 24 04:31:05 2025 by rpki-client