$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa File: d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa (raw, json) Hash identifier: 2E31U16Oz1//XkNsi7qTUr0xYznbeX3UalA0vYOymcg= Subject key identifier: B6:BB:A3:66:82:99:92:9C:AF:B0:3C:D4:04:13:68:DC:D6:12:28:99 Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Certificate serial: 010D0C9F4328584AD23BC30A729A8B5FC5EAE680 Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 376 IP address blocks: 132.213.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c3:0a:72:9a:8b:5f:c5:ea:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=715e603e-fc90-41d0-befd-83bd0d04a531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:6f:30:73:27:8f:0f:36:e7:3b:88:bd:35: 51:bf:30:d1:f7:98:24:33:39:af:2f:af:c1:ae:0a: d2:4a:33:7f:99:e1:22:3c:43:a9:75:87:4b:be:34: 3c:93:82:66:b3:ae:08:66:3e:d7:2f:a9:74:d3:a8: a3:b9:11:bd:7e:51:25:76:af:95:2b:46:5a:a3:73: b5:38:33:5b:3e:c9:de:e3:e1:4e:e2:b6:8c:a1:9e: fa:b6:ae:fd:fc:6a:05:e1:52:33:9d:0a:1a:4a:16: 60:fd:97:94:3c:75:d4:b5:31:15:c6:1b:84:1f:08: 5c:89:06:42:09:e5:b6:4d:3c:68:69:d3:42:71:4b: a7:e0:04:30:42:82:67:c0:7b:ea:b2:71:97:85:1c: b0:8d:cc:c5:ac:2d:ba:65:ac:9d:00:4e:7a:08:63: 45:97:b4:d5:92:7b:ca:b8:8e:fd:1f:af:f6:c8:b4: d1:06:97:e1:7a:30:84:88:36:ab:a4:2a:13:4e:e7: 33:5c:c8:8a:7f:54:31:20:ee:e8:83:27:53:b8:df: 4d:b3:79:fd:71:46:b2:41:45:ad:1e:45:80:b3:37: a5:c1:6f:40:47:2f:fb:7e:38:76:0e:5e:95:e3:9b: 0f:f6:05:ec:dd:a7:74:1b:91:e1:84:62:85:a2:db: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BB:A3:66:82:99:92:9C:AF:B0:3C:D4:04:13:68:DC:D6:12:28:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl X509v3 Authority Key Identifier: keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer sbgp-ipAddrBlock: critical IPv4: 132.213.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f5:7d:4d:84:51:c8:d1:98:bf:6d:1c:17:f7:5b:dd:69:59: 3b:10:07:49:1a:a1:08:c5:6a:21:cd:e8:ce:74:9c:e9:e6:a6: f5:02:69:7f:18:2a:b1:23:98:ee:e3:16:cf:02:ad:0b:53:1a: 2e:26:38:a3:51:14:36:2c:99:64:f9:6c:e0:4c:74:82:ed:8f: 96:de:b4:a4:88:ac:07:5e:15:0a:ac:75:78:f9:a3:c6:1b:9a: a5:81:80:b0:dd:67:88:3a:04:79:be:eb:47:3f:82:7b:aa:3d: df:f2:f3:ab:68:b6:7a:73:b7:8b:a1:b2:20:6b:e2:b2:5c:22: ac:82:c9:76:fe:a8:52:42:53:98:97:97:67:f3:e7:e4:db:6a: 21:31:fb:2c:f7:dd:1e:08:fa:f9:b5:b0:56:76:cb:20:63:9c: 23:9d:71:a8:05:b3:9c:b8:f5:4e:07:32:05:0a:85:ba:ec:0f: 25:b1:94:d6:7d:3d:42:f7:bb:59:81:82:c8:63:de:54:9d:3f: a4:14:58:07:3d:4c:46:01:74:30:ac:97:d2:63:3d:a2:44:b4: 1e:44:5c:e0:66:cf:33:30:46:ba:ac:d3:7b:a9:7c:4f:a2:b4: ac:4c:50:f4:bc:79:91:24:f5:b1:98:cd:66:c6:5f:46:d9:fb: 8d:eb:12:31 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErSO8MKcpqLX8Xq5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj ZDQyMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzE1ZTYwM2UtZmM5MC00MWQwLWJlZmQtODNiZDBkMDRhNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVpvMHMnjw825zuIvTVRvzDR95gkMzmvL6/B rgrSSjN/meEiPEOpdYdLvjQ8k4Jms64IZj7XL6l006ijuRG9flEldq+VK0Zao3O1 ODNbPsne4+FO4raMoZ76tq79/GoF4VIznQoaShZg/ZeUPHXUtTEVxhuEHwhciQZC CeW2TTxoadNCcUun4AQwQoJnwHvqsnGXhRywjczFrC26ZaydAE56CGNFl7TVknvK uI79H6/2yLTRBpfhejCEiDarpCoTTuczXMiKf1QxIO7ogydTuN9Ns3n9cUayQUWt HkWAszelwW9ARy/7fjh2Dl6V45sP9gXs3ad0G5HhhGKFotu1QwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLa7o2aCmZKcr7A81AQTaNzWEiiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvZDNiYmZiOGMtNGJiMy0z NTRjLThlMWItZmM4ZWVlNGZjM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj YTc2ZmNkNDIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAp/V9TYRRyNGYv20cF/db3WlZOxAHSRqhCMVqIc3oznSc6eam9QJpfxgq sSOY7uMWzwKtC1MaLiY4o1EUNiyZZPls4Ex0gu2Plt60pIisB14VCqx1ePmjxhua pYGAsN1niDoEeb7rRz+Ce6o93/Lzq2i2enO3i6GyIGvislwirILJdv6oUkJTmJeX Z/Pn5NtqITH7LPfdHgj6+bWwVnbLIGOcI51xqAWznLj1TgcyBQqFuuwPJbGU1n09 Qve7WYGCyGPeVJ0/pBRYBz1MRgF0MKyX0mM9okS0HkRc4GbPMzBGuqzTe6l8T6K0 rExQ9Lx5kST1sZjNZsZfRtn7jesSMQ== -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:40 2025 by rpki-client