$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa File: d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa (raw, json) Hash identifier: pFlaIUxZmS86m9DTBt64HoS+SzqRrtBIC8eqRmEk5Ug= Subject key identifier: F6:56:CF:70:1E:F7:5B:F7:B7:89:C8:51:38:4D:0C:DA:FF:96:1E:D4 Certificate issuer: /CN=b927dc15-9316-467a-b50d-d6b361478436 Certificate serial: 010D0C9F4328584AECC1446F8B4797CCB29D1480 Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 2901 IP address blocks: 192.133.99.0/24 maxlen: 24 192.150.253.0/24 maxlen: 24 198.49.160.0/24 maxlen: 24 198.59.96.0/24 maxlen: 24 198.59.98.0/23 maxlen: 24 198.59.100.0/22 maxlen: 24 198.59.104.0/23 maxlen: 24 198.59.109.0/24 maxlen: 24 198.59.110.0/23 maxlen: 24 198.59.112.0/23 maxlen: 24 198.59.114.0/24 maxlen: 24 198.59.116.0/22 maxlen: 24 198.59.120.0/21 maxlen: 24 198.187.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:44:6f:8b:47:97:cc:b2:9d:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=15d38b2e-0b34-4c1c-80fc-71eb0accfced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:b0:08:78:9f:e4:d5:18:d1:67:68:0b:3d: c1:ea:68:40:46:8e:bb:09:88:e1:90:62:17:99:7a: 55:83:92:61:74:fa:41:66:c3:60:e3:23:e7:59:23: aa:05:f4:13:0d:10:b8:af:c9:cb:64:bd:63:0c:11: db:53:ff:5e:02:ff:f5:26:13:07:7a:96:ce:f9:7d: 9f:68:96:6b:93:1b:ac:cc:4b:38:0c:79:73:28:76: 27:c3:19:63:0f:7c:ba:6e:a0:49:dc:b3:24:50:1f: 2e:b6:8a:9c:75:bf:9a:f2:e9:48:de:f0:b3:a8:00: fe:ca:b2:92:52:d6:4a:5d:12:af:b5:31:15:45:39: 68:f7:c2:3f:1b:6f:0f:ed:f1:98:96:0b:11:ff:03: e7:92:d0:00:73:88:b6:89:3f:93:b0:da:61:62:77: 80:3f:19:a7:0e:b2:90:4f:24:b6:87:ca:c6:2f:05: 70:5d:2a:81:24:cc:ce:74:f3:8b:53:d0:c5:04:4f: d4:81:e8:41:65:4e:9f:0b:9f:0a:ca:3c:39:f6:61: 2b:33:79:5e:ec:80:2a:fe:ad:f3:41:c7:6f:82:54: 14:cc:69:30:08:2c:55:c0:52:29:43:22:72:41:7e: bf:d9:7b:f1:d1:a4:f3:2c:5f:d8:cd:bb:3d:77:e5: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:56:CF:70:1E:F7:5B:F7:B7:89:C8:51:38:4D:0C:DA:FF:96:1E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl X509v3 Authority Key Identifier: keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer sbgp-ipAddrBlock: critical IPv4: 192.133.99.0/24 192.150.253.0/24 198.49.160.0/24 198.59.96.0/24 198.59.98.0-198.59.105.255 198.59.109.0-198.59.114.255 198.59.116.0-198.59.127.255 198.187.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5a:c5:fc:61:28:64:49:67:97:7a:22:a4:56:29:d3:c4:ce: ae:76:3f:52:82:5a:69:27:1a:02:a7:e1:70:68:57:99:44:77: 02:11:bc:c3:d1:3b:bd:73:87:1f:99:15:c6:c3:34:c1:30:5b: 5c:ff:b3:48:b8:da:e7:6f:56:88:bb:ee:aa:26:81:43:58:07: b2:08:65:ae:7e:f1:9d:6f:3b:fe:f4:04:ee:4b:0e:f8:71:77: 12:14:ed:1a:b1:57:8e:8c:15:13:a5:30:59:de:1d:0a:e6:76: 97:45:d9:30:95:7c:d4:b0:16:b1:22:77:17:d0:c6:fd:0c:59: 9b:04:e2:9e:cb:d6:53:7c:77:20:11:79:3e:86:79:38:4e:51: 31:5d:90:a6:bf:12:fb:75:e6:32:74:3c:d7:fb:7e:42:dd:57: 5c:82:9b:bd:75:81:75:ee:65:5f:1f:4c:fb:ac:82:f4:71:ed: a4:06:a7:69:35:91:72:38:a2:27:41:26:58:f0:4e:c9:9f:77: 02:67:22:61:e1:df:92:8c:95:8f:36:e9:f7:17:6d:dd:8a:bd: 3a:02:d6:ec:ce:5e:fc:48:0f:82:86:b9:5c:94:23:4d:37:76: cc:a0:d8:4e:5b:ef:32:4d:7f:df:07:d7:01:fa:47:bc:bd:01: cc:3a:6c:ee -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWErswURvi0eXzLKdFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4 NDM2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTVkMzhiMmUtMGIzNC00YzFjLTgwZmMtNzFlYjBhY2NmY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaWwCHif5NUY0WdoCz3B6mhARo67CYjhkGIX mXpVg5JhdPpBZsNg4yPnWSOqBfQTDRC4r8nLZL1jDBHbU/9eAv/1JhMHepbO+X2f aJZrkxuszEs4DHlzKHYnwxljD3y6bqBJ3LMkUB8utoqcdb+a8ulI3vCzqAD+yrKS UtZKXRKvtTEVRTlo98I/G28P7fGYlgsR/wPnktAAc4i2iT+TsNphYneAPxmnDrKQ TyS2h8rGLwVwXSqBJMzOdPOLU9DFBE/UgehBZU6fC58Kyjw59mErM3le7IAq/q3z QcdvglQUzGkwCCxVwFIpQyJyQX6/2Xvx0aTzLF/Yzbs9d+Wm8wIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFPZWz3Ae91v3t4nIUThNDNr/lh7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3 ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvZDE0ZDBkM2UtMTcwMS0z YTViLTljYTctMzRhYTMzNmM2NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkyN2RjMTUtOTMxNi00NjdhLWI1 MGQtZDZiMzYxNDc4NDM2L2I5MjdkYzE1LTkzMTYtNDY3YS1iNTBkLWQ2YjM2MTQ3 ODQzNi5jcmwwHwYDVR0jBBgwFoAUmluCqADf1iMqRZ56S1UX9Bjlg+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIz NjE0Nzg0MzYuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAwIVjAwQA wJb9AwQAxjGgAwQAxjtgMAwDBAHGO2IDBAHGO2gwDAMEAMY7bQMEAMY7cjAMAwQC xjt0AwQHxjsAAwQAxrv7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADZaxfxhKGRJZ5d6IqRWKdPEzq52P1KC WmknGgKn4XBoV5lEdwIRvMPRO71zhx+ZFcbDNMEwW1z/s0i42udvVoi77qomgUNY B7IIZa5+8Z1vO/70BO5LDvhxdxIU7RqxV46MFROlMFneHQrmdpdF2TCVfNSwFrEi dxfQxv0MWZsE4p7L1lN8dyAReT6GeThOUTFdkKa/Evt15jJ0PNf7fkLdV1yCm711 gXXuZV8fTPusgvRx7aQGp2k1kXI4oidBJljwTsmfdwJnImHh35KMlY826fcXbd2K vToC1uzOXvxID4KGuVyUI003dsyg2E5b7zJNf98H1wH6R7y9Acw6bO4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:23:57 2025 by rpki-client