$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa File: 2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json) Hash identifier: 5fmc+O49P0W3moMFJyLO784FgjxTxQ8ZlJqfcimrzH4= Subject key identifier: BC:17:9E:85:97:FF:84:7B:7A:0B:36:52:E1:32:22:C3:55:5B:D0:DD Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F4328584AECC1316A60699EBE34196BA0 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 26223 IP address blocks: 162.248.128.0/23 maxlen: 24 192.64.2.0/23 maxlen: 24 192.187.62.0/23 maxlen: 24 192.243.36.0/24 maxlen: 24 199.19.112.0/21 maxlen: 24 199.66.104.0/22 maxlen: 24 199.192.124.0/22 maxlen: 24 204.8.60.0/22 maxlen: 24 204.8.68.0/22 maxlen: 24 207.183.160.0/19 maxlen: 24 216.21.208.0/22 maxlen: 24 216.128.224.0/20 maxlen: 24 217.147.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:31:6a:60:69:9e:be:34:19:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e25f5f1c-0a6c-47a6-9ebc-32563189d641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:70:aa:7c:c9:e2:31:ef:0b:38:b4:9b:4b: a8:55:0e:13:f5:9a:4e:ed:e4:41:0b:89:40:f1:22: 8d:03:5d:9a:24:b6:8c:84:23:b2:ce:05:00:c9:55: 2e:d3:cc:54:ec:76:c0:3a:ba:52:0e:6b:8e:c3:b6: 43:d8:c8:19:56:0f:16:72:81:cd:a4:b6:58:86:31: 88:4d:77:62:2c:8c:4e:e9:6f:98:2e:69:e8:43:aa: 82:70:88:45:0a:21:21:f9:ca:06:62:c1:a3:f5:8a: a5:c3:c7:49:c5:08:2c:2a:3d:c1:88:02:01:4c:69: dd:f6:9b:7a:97:5b:14:79:05:d0:7c:1e:ad:9b:b6: 8d:1d:1d:1c:3e:86:e1:c2:45:c1:aa:13:e9:0c:5a: 94:2b:7d:44:44:42:fb:b5:32:9e:d0:e4:ed:e9:2d: 13:4c:22:bb:e7:f7:c0:a6:75:db:8c:ce:ac:22:94: fb:39:23:f9:8c:d0:93:4c:0f:8b:a9:f4:61:7a:fb: 3b:f2:43:f2:2d:ac:25:d5:3e:53:67:c9:0f:13:55: 64:01:86:9d:cd:e8:54:79:6c:94:2b:b3:24:4f:58: 9c:e3:f3:19:26:c8:cb:51:c0:c4:16:c6:fb:35:df: c6:79:41:1d:86:51:bf:dc:0d:1e:2e:fc:e2:66:08: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:9E:85:97:FF:84:7B:7A:0B:36:52:E1:32:22:C3:55:5B:D0:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv4: 162.248.128.0/23 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:cf:87:af:a3:3d:75:e3:56:5d:2f:68:53:4c:33:1b:88:5d: 9f:0a:8f:26:fa:0e:5b:a6:36:bd:4b:83:54:49:09:39:96:18: 55:20:59:56:73:86:c4:1f:88:98:64:4d:02:cd:fb:70:ca:fe: 5a:44:d2:99:cf:0c:01:2b:e9:79:18:f1:68:c8:83:44:77:4e: 7c:3c:b2:53:8b:a7:b6:60:eb:d5:24:37:c9:e2:c8:f2:15:4e: 3e:cd:0c:6a:1c:9d:f0:81:0e:02:d6:d5:a1:b3:93:0d:59:eb: 58:2c:5e:58:88:cd:a4:66:2d:d2:c0:1f:d8:61:dc:cd:78:4c: 8d:b9:18:7f:06:f4:df:11:e7:04:62:92:72:7c:1e:aa:ab:90: dc:d9:15:c8:af:75:2d:19:e6:f3:a3:4f:aa:a3:b0:c6:e3:ab: 09:61:a4:a8:bc:b4:8f:6b:3a:03:73:a6:b3:2d:a0:4f:1a:40: 83:95:10:1a:a9:6b:d0:2e:7d:46:d5:c3:55:3e:8d:75:30:26: 15:e8:11:dd:83:f7:21:cf:59:a1:23:d9:2e:17:a7:b4:ed:1d: 80:5d:59:bf:79:67:90:9d:44:e4:84:39:57:1b:64:5c:a9:c4: cb:9d:30:48:9a:5f:cb:3e:7a:70:2e:96:e3:d9:e8:f1:19:04: 8b:b4:59:b4 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWErswTFqYGmevjQZa6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTI1ZjVmMWMtMGE2Yy00N2E2LTllYmMtMzI1NjMxODlkNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4xwqnzJ4jHvCzi0m0uoVQ4T9ZpO7eRBC4lA 8SKNA12aJLaMhCOyzgUAyVUu08xU7HbAOrpSDmuOw7ZD2MgZVg8WcoHNpLZYhjGI TXdiLIxO6W+YLmnoQ6qCcIhFCiEh+coGYsGj9Yqlw8dJxQgsKj3BiAIBTGnd9pt6 l1sUeQXQfB6tm7aNHR0cPobhwkXBqhPpDFqUK31EREL7tTKe0OTt6S0TTCK75/fA pnXbjM6sIpT7OSP5jNCTTA+LqfRhevs78kPyLawl1T5TZ8kPE1VkAYadzehUeWyU K7MkT1ic4/MZJsjLUcDEFsb7Nd/GeUEdhlG/3A0eLvziZghXWQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFLwXnoWX/4R7egs2UuEyIsNVW9DdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADjPh6+jPXXjVl0vaFNMMxuI XZ8Kjyb6DlumNr1Lg1RJCTmWGFUgWVZzhsQfiJhkTQLN+3DK/lpE0pnPDAEr6XkY 8WjIg0R3Tnw8slOLp7Zg69UkN8niyPIVTj7NDGocnfCBDgLW1aGzkw1Z61gsXliI zaRmLdLAH9hh3M14TI25GH8G9N8R5wRiknJ8HqqrkNzZFcivdS0Z5vOjT6qjsMbj qwlhpKi8tI9rOgNzprMtoE8aQIOVEBqpa9AufUbVw1U+jXUwJhXoEd2D9yHPWaEj 2S4Xp7TtHYBdWb95Z5CdROSEOVcbZFypxMudMEiaX8s+enAuluPZ6PEZBIu0WbQ= -----END CERTIFICATE-----Generated at Sun Aug 24 06:43:39 2025 by rpki-client