$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa File: 6bfd8c06-649d-344f-9311-8c34c244a748.roa (raw, json) Hash identifier: YMS8jCUr6RhenETt82+9g3oeAAEJ/Enr8u6m1/ujs1w= Subject key identifier: BC:AD:70:D8:A2:25:6D:BA:B2:C4:99:74:B0:C0:2E:E1:89:27:9E:5E Certificate issuer: /CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Certificate serial: 010D0C9F4328584A936B5FF8C10CC2D0E885A480 Authority key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa Signing time: Sun 20 Jul 2025 01:00:50 +0000 ROA not before: Sun 20 Jul 2025 01:00:50 +0000 ROA not after: Sat 18 Oct 2025 01:00:50 +0000 asID: 22121 IP address blocks: 172.99.224.0/22 maxlen: 24 199.21.136.0/21 maxlen: 24 2604:14c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:6b:5f:f8:c1:0c:c2:d0:e8:85:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Validity Not Before: Jul 20 01:00:50 2025 GMT Not After : Oct 18 01:00:50 2025 GMT Subject: CN=d2ef7580-fbb1-444c-aad5-ef9ef1c86994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:42:a6:e1:0e:d1:61:0f:24:b3:27:34:51: c7:3e:c6:61:ba:aa:31:9a:68:1b:0a:98:25:84:a5: 37:ee:4b:31:fd:c4:18:99:02:30:2c:b0:61:cc:3d: 23:86:04:6a:10:2d:26:64:5b:39:d0:e8:86:cb:01: 68:cc:ce:dd:9c:7d:90:d5:08:3f:2c:5b:53:03:58: 47:2f:77:1f:15:05:41:f9:15:2f:83:1f:4a:e1:d6: ad:81:1f:93:61:ca:22:bb:ac:2c:b2:e6:be:43:54: 5d:cb:95:3f:f5:b3:8c:16:3b:23:1c:43:61:6c:2a: e3:b0:db:26:da:a8:da:18:06:66:55:9b:a3:0b:0c: d1:37:e1:15:de:0a:e6:af:53:28:c0:91:1a:19:44: 2c:27:f1:62:39:ce:ff:d8:7e:82:9e:e2:eb:46:86: 4c:10:e4:3f:0e:b5:f7:cc:7f:4e:d8:44:93:61:a0: c9:11:8d:54:a6:66:9d:15:00:57:92:41:b1:90:c8: ed:4c:04:5f:e4:0d:46:0d:a2:41:e6:07:07:39:c4: 0d:0d:00:04:f2:4d:3a:56:da:4b:c4:82:7c:31:1c: b2:c8:c9:62:4a:ab:e7:94:5c:ee:ac:91:50:28:2e: 88:56:e8:9d:50:a7:6f:f2:cf:19:9d:87:c3:96:59: db:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:70:D8:A2:25:6D:BA:B2:C4:99:74:B0:C0:2E:E1:89:27:9E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl X509v3 Authority Key Identifier: keyid:7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:aa:5d:2c:19:93:9b:90:cc:f5:fb:b3:1c:58:8b:18:d4:c3: dd:26:97:e7:b9:d7:e8:9b:9e:8f:6b:47:d4:09:bc:bc:b7:27: 8e:4c:5e:e6:ee:3b:c2:05:51:4e:d7:81:64:79:50:f2:56:fd: 51:ae:86:fa:a9:07:c7:c5:b1:c9:b4:f7:b3:9c:86:69:5c:43: 4c:17:cc:a8:85:70:58:41:a0:50:34:3e:b7:67:f4:e1:bb:07: 27:5d:7c:5a:c7:4b:f6:5f:1f:28:9f:44:61:8f:f1:37:7d:bf: bb:87:d6:ce:37:bd:3f:9f:51:dd:9e:a0:db:8b:9b:ea:4c:47: 46:ac:95:71:1a:27:b8:c2:32:7c:88:c8:1e:e8:ed:37:7d:3d: 26:28:c0:58:1b:15:ce:19:fd:a6:44:bd:82:42:70:a4:3e:46: c8:4b:41:7d:0f:6e:5b:de:79:47:2c:61:38:cd:ee:14:48:c5: bc:9b:3b:51:a0:07:75:4e:9a:f9:d8:1c:d0:e4:63:e9:13:68: f3:68:08:a9:0e:a6:94:3c:20:54:b6:d7:74:2b:6b:32:3a:13: 6c:a4:bc:53:f8:9d:34:34:37:1a:1c:03:fc:7f:88:e8:11:2b: c4:96:7a:b0:33:ea:3a:1d:79:ae:05:ce:93:e2:dc:0a:74:68: 22:3c:50:7b -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEqTa1/4wQzC0OiFpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3 ODhhMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk ZDJlZjc1ODAtZmJiMS00NDRjLWFhZDUtZWY5ZWYxYzg2OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYdCpuEO0WEPJLMnNFHHPsZhuqoxmmgbCpgl hKU37ksx/cQYmQIwLLBhzD0jhgRqEC0mZFs50OiGywFozM7dnH2Q1Qg/LFtTA1hH L3cfFQVB+RUvgx9K4datgR+TYcoiu6wssua+Q1Rdy5U/9bOMFjsjHENhbCrjsNsm 2qjaGAZmVZujCwzRN+EV3grmr1MowJEaGUQsJ/FiOc7/2H6CnuLrRoZMEOQ/DrX3 zH9O2ESTYaDJEY1UpmadFQBXkkGxkMjtTARf5A1GDaJB5gcHOcQNDQAE8k06VtpL xIJ8MRyyyMliSqvnlFzurJFQKC6IVuidUKdv8s8ZnYfDllnb9wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFLytcNiiJW26ssSZdLDALuGJJ55eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNjVi ZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvNmJmZDhjMDYtNjQ5ZC0z NDRmLTkzMTEtOGMzNGMyNDRhNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjY1YmUyZTAtNmE0MC00Y2YxLTgy MzQtNmViNGY0MGM3ODhhL2Y2NWJlMmUwLTZhNDAtNGNmMS04MjM0LTZlYjRmNDBj Nzg4YS5jcmwwHwYDVR0jBBgwFoAUfMog+isdj9R0lgqMSYi3VGCgxvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0 ZjQwYzc4OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCrGPgAwQD xxWIMA0EAgACMAcDBQAmBBTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMiqXSwZk5uQzPX7sxxYixjUw90m l+e51+ibno9rR9QJvLy3J45MXubuO8IFUU7XgWR5UPJW/VGuhvqpB8fFscm097Oc hmlcQ0wXzKiFcFhBoFA0Prdn9OG7ByddfFrHS/ZfHyifRGGP8Td9v7uH1s43vT+f Ud2eoNuLm+pMR0aslXEaJ7jCMnyIyB7o7Td9PSYowFgbFc4Z/aZEvYJCcKQ+RshL QX0PblveeUcsYTjN7hRIxbybO1GgB3VOmvnYHNDkY+kTaPNoCKkOppQ8IFS213Qr azI6E2ykvFP4nTQ0NxocA/x/iOgRK8SWerAz6jodea4FzpPi3Ap0aCI8UHs= -----END CERTIFICATE-----Generated at Sun Aug 24 06:06:22 2025 by rpki-client