$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa File: cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa (raw, json) Hash identifier: 3+UMXvTNJwt66A5+cNkXn5gqna110675EG/E6t+Dc3c= Subject key identifier: 0A:2C:92:56:4D:F6:8E:47:C7:EE:BF:EB:04:D8:0F:E2:BF:49:5B:B4 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584ADD667103AF56B99BD2F1FA80 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 134729 IP address blocks: 65.181.128.0/20 maxlen: 24 65.181.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:71:03:af:56:b9:9b:d2:f1:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=6dc140df-2425-49a6-a01b-2f6f44f9f3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:91:f4:7b:31:0e:f6:a7:70:ff:54:3f:2d: 40:c6:07:7b:d7:eb:4e:6e:80:d3:79:58:64:f0:ed: dc:4e:33:93:de:fb:c2:1c:ab:ee:7c:35:18:6b:f5: 85:71:f5:84:81:b9:9c:32:fb:c6:1f:bf:d7:f6:3b: 34:37:11:5f:fd:96:dc:f2:7c:b3:df:c6:18:b6:e9: 40:f9:33:7f:0b:24:54:b3:8e:d5:cf:69:a8:38:6e: 92:73:a2:f1:c1:07:da:b7:ff:8f:fb:7b:d1:32:ca: fa:b3:f2:18:21:50:30:47:93:c2:bf:ca:28:70:60: aa:b0:74:7d:f7:77:d4:83:92:07:6d:f3:db:68:b0: 2e:68:39:b6:70:59:b0:03:79:18:15:83:32:18:18: 4a:cf:57:b4:01:71:05:e6:3a:32:ac:2d:9e:5f:06: 01:20:36:dc:f3:bb:81:30:69:8d:10:d9:61:87:ca: 52:fa:d9:ea:0d:81:e9:d9:41:9b:96:28:01:52:ff: a7:1b:cf:58:a5:9f:2f:28:41:4c:8d:20:40:48:57: 96:31:67:61:69:72:26:a8:54:da:bf:d7:41:dc:f2: a0:49:3d:a2:81:1b:fa:3a:78:7b:ef:61:7a:28:21: 40:39:d7:72:28:af:96:68:26:3a:a0:30:5b:82:33: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:92:56:4D:F6:8E:47:C7:EE:BF:EB:04:D8:0F:E2:BF:49:5B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/cdf466d6-6227-34d8-b72c-65f0acf3e7d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7a:42:30:96:0c:53:8d:6c:b9:be:02:1a:58:ff:7d:6b:41: 99:81:ce:1f:2f:22:5d:42:e9:31:60:47:64:4b:33:3d:61:cb: f0:df:03:90:fb:d5:cb:96:1e:82:2c:aa:90:f6:3e:42:05:e9: bd:a7:d2:d7:3e:fb:ec:60:72:f6:6d:7c:09:80:54:95:24:d2: 1a:5b:2c:1c:9d:63:51:bf:63:13:43:cc:d0:14:54:6d:bc:6f: 2e:eb:bc:21:e4:85:5c:56:7d:ca:33:96:cc:cf:07:6a:89:41: 83:0d:5e:33:08:9e:e4:5e:d9:17:8c:62:7b:27:7e:5e:00:81: 17:04:44:8b:0d:73:96:f9:1e:64:60:39:41:a0:60:a6:1a:f0: ae:98:e0:5f:5d:6b:0f:80:25:5f:02:14:d3:bf:ae:38:2d:9d: 3e:2d:c7:43:a0:09:d5:76:4a:87:f5:01:3e:4e:65:c9:d9:f1: 71:ac:78:aa:b1:41:d6:db:b3:04:47:81:75:d1:37:18:15:d3: 8a:ea:e2:04:6e:a6:f2:12:f0:e6:58:3f:e8:83:f3:7c:7c:8b: db:21:24:5b:28:47:a1:3d:cd:32:7e:56:46:20:73:23:98:30: 85:e9:56:b3:6d:09:11:85:9f:ff:cd:2e:8d:77:ee:cf:a4:e9: 10:4e:42:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnEDr1a5m9Lx+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NmRjMTQwZGYtMjQyNS00OWE2LWEwMWItMmY2ZjQ0ZjlmM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouGR9HsxDvancP9UPy1Axgd71+tOboDTeVhk 8O3cTjOT3vvCHKvufDUYa/WFcfWEgbmcMvvGH7/X9js0NxFf/Zbc8nyz38YYtulA +TN/CyRUs47Vz2moOG6Sc6LxwQfat/+P+3vRMsr6s/IYIVAwR5PCv8oocGCqsHR9 93fUg5IHbfPbaLAuaDm2cFmwA3kYFYMyGBhKz1e0AXEF5joyrC2eXwYBIDbc87uB MGmNENlhh8pS+tnqDYHp2UGbligBUv+nG89YpZ8vKEFMjSBASFeWMWdhaXImqFTa v9dB3PKgST2igRv6Onh772F6KCFAOddyKK+WaCY6oDBbgjP+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAosklZN9o5Hx+6/6wTYD+K/SVu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvY2RmNDY2ZDYtNjIyNy0z NGQ4LWI3MmMtNjVmMGFjZjNlN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQbWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER6QjCWDFONbLm+AhpY/31rQZmBzh8vIl1C6TFgR2RLMz1hy/DfA5D7 1cuWHoIsqpD2PkIF6b2n0tc+++xgcvZtfAmAVJUk0hpbLBydY1G/YxNDzNAUVG28 by7rvCHkhVxWfcozlszPB2qJQYMNXjMInuRe2ReMYnsnfl4AgRcERIsNc5b5HmRg OUGgYKYa8K6Y4F9daw+AJV8CFNO/rjgtnT4tx0OgCdV2Sof1AT5OZcnZ8XGseKqx QdbbswRHgXXRNxgV04rq4gRupvIS8OZYP+iD83x8i9shJFsoR6E9zTJ+VkYgcyOY MIXpVrNtCRGFn//NLo137s+k6RBOQnM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:54:47 2025 by rpki-client