$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa File: d3bab822-4cb5-3a34-898f-cd524c33f81c.roa (raw, json) Hash identifier: 3lp1Pi7P2jrcDGbq2/luYxMy3GFukH1GjHNkZyknTgo= Subject key identifier: C9:07:83:CD:0C:11:07:44:FA:23:F6:97:C4:B1:40:60:AA:CE:5A:3C Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584A280F37D4721BABB3FD119CC0 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa Signing time: Wed 11 Jun 2025 14:03:46 +0000 ROA not before: Wed 11 Jun 2025 14:03:46 +0000 ROA not after: Tue 09 Sep 2025 14:03:46 +0000 asID: 2648 IP address blocks: 132.163.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:28:0f:37:d4:72:1b:ab:b3:fd:11:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Jun 11 14:03:46 2025 GMT Not After : Sep 9 14:03:46 2025 GMT Subject: CN=1cd428cc-22a6-4f38-8d69-078fcf22a0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:f6:7f:af:94:91:2e:ce:61:81:5e:da:df: f3:25:d9:19:ec:7e:84:35:df:4a:85:b9:b9:d5:0f: af:6d:07:2b:0e:09:d2:ce:81:0b:f5:40:3f:d9:75: a9:22:96:8c:f8:f9:cc:b1:da:5b:7d:34:c5:99:16: a5:64:cd:24:51:a4:2e:2a:74:ae:19:79:08:93:61: 06:3f:55:af:37:e9:30:39:fa:6f:4e:47:1d:87:15: 86:48:d0:7b:29:14:ab:13:95:21:21:66:5e:27:76: f9:13:ed:65:c9:24:03:9b:35:56:ff:c6:ab:81:f0: 20:18:4c:bb:a0:2f:c7:dd:8c:a8:d3:12:b6:56:2c: 5d:f5:ee:81:b6:de:9d:39:2f:4c:e0:37:8f:b8:7c: b9:3a:b4:ad:5e:7b:1b:5a:6d:08:28:81:12:e8:50: 6b:1b:ff:25:fe:1f:d0:8b:ef:9f:fc:4d:4d:58:83: e2:e1:e0:c4:75:59:56:9f:bf:35:30:5d:82:25:01: 30:c1:6d:e9:ac:72:7b:96:db:a6:2d:82:0d:f9:2b: c7:2a:e4:ee:e8:41:02:b5:3d:3a:65:9f:93:57:69: d9:b7:ca:06:19:16:7d:da:1f:49:a4:01:1d:db:93: b3:c4:d0:61:33:77:c4:de:7a:18:2e:e7:e7:b6:a5: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:07:83:CD:0C:11:07:44:FA:23:F6:97:C4:B1:40:60:AA:CE:5A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 132.163.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:76:6d:78:f9:b3:0f:19:df:79:9d:85:75:26:a4:3d:eb:05: f2:b4:ce:ae:57:9d:d8:76:c1:d3:cb:59:36:bc:d0:f6:16:6b: 0a:d0:eb:1a:cf:93:8b:ae:45:a8:29:02:df:48:86:4e:7c:78: 4d:13:b6:e9:1e:19:94:02:31:d9:b6:52:89:f3:70:0a:56:29: 79:2c:06:4f:73:e3:40:93:59:75:70:69:39:97:83:ab:02:93: b6:b2:1b:33:e9:90:66:f8:0e:72:31:78:3e:d7:82:77:75:d3: b7:c4:43:db:4f:42:b6:4b:60:33:37:87:6d:c6:3c:1a:7d:98: 5d:63:6e:9f:94:29:bd:23:fa:fd:0a:93:76:8b:3b:46:e7:6b: a9:a9:f1:51:3e:40:00:e1:50:cb:52:d6:5d:04:b5:4c:8c:f1: 95:3d:58:28:e8:c1:fa:16:85:1f:9f:78:c8:07:5d:3c:e4:ff: 16:76:ed:05:b2:f6:8e:91:c7:12:92:eb:45:12:75:d8:b0:93: a7:38:99:2b:14:e1:44:b8:83:a8:8b:60:7e:d7:3f:ea:84:e3: de:b5:17:fb:c6:2a:4a:98:6b:b5:fa:49:ef:1d:37:97:fc:1d: 68:17:26:d1:1c:70:13:a4:8b:70:7e:23:00:80:58:98:3d:ca: b7:00:e7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEooDzfUchurs/0RnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MDYxMTE0MDM0NloXDTI1MDkwOTE0MDM0NlowLzEtMCsGA1UEAxMk MWNkNDI4Y2MtMjJhNi00ZjM4LThkNjktMDc4ZmNmMjJhMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNX2f6+UkS7OYYFe2t/zJdkZ7H6ENd9Khbm5 1Q+vbQcrDgnSzoEL9UA/2XWpIpaM+PnMsdpbfTTFmRalZM0kUaQuKnSuGXkIk2EG P1WvN+kwOfpvTkcdhxWGSNB7KRSrE5UhIWZeJ3b5E+1lySQDmzVW/8argfAgGEy7 oC/H3Yyo0xK2Vixd9e6Btt6dOS9M4DePuHy5OrStXnsbWm0IKIES6FBrG/8l/h/Q i++f/E1NWIPi4eDEdVlWn781MF2CJQEwwW3prHJ7ltumLYIN+SvHKuTu6EECtT06 ZZ+TV2nZt8oGGRZ92h9JpAEd25OzxNBhM3fE3noYLufntqXAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkHg80MEQdE+iP2l8SxQGCqzlo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvZDNiYWI4MjItNGNiNS0z YTM0LTg5OGYtY2Q1MjRjMzNmODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhKOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD12bXj5sw8Z33mdhXUmpD3rBfK0zq5Xndh2wdPLWTa80PYWawrQ6xrP k4uuRagpAt9Ihk58eE0TtukeGZQCMdm2UonzcApWKXksBk9z40CTWXVwaTmXg6sC k7ayGzPpkGb4DnIxeD7Xgnd107fEQ9tPQrZLYDM3h23GPBp9mF1jbp+UKb0j+v0K k3aLO0bna6mp8VE+QADhUMtS1l0EtUyM8ZU9WCjowfoWhR+feMgHXTzk/xZ27QWy 9o6RxxKS60USddiwk6c4mSsU4US4g6iLYH7XP+qE4961F/vGKkqYa7X6Se8dN5f8 HWgXJtEccBOki3B+IwCAWJg9yrcA52g= -----END CERTIFICATE-----Generated at Mon Jun 30 03:55:13 2025 by rpki-client