$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa File: 7f8ab63b-847b-34e6-a398-301d847ad7f0.roa (raw, json) Hash identifier: YZzgmVOOegGeIsCeFUClmiv2f4gcSeiFkwzeW4rsQ+A= Subject key identifier: 87:8C:7E:81:D5:D3:8C:B6:33:2E:F8:33:DF:20:9E:EE:CD:AB:EA:99 Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F4328584AC8763349159F554437D9EB80 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 19905 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:33:49:15:9f:55:44:37:d9:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=e5e26c14-48d6-495f-ab3e-048fd3c2f766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a1:47:72:eb:8e:04:d1:b6:76:45:34:59:84: 51:91:f8:84:21:bd:72:df:d0:6c:e2:ff:f5:25:de: e1:82:6c:ca:d0:c0:73:5a:81:c1:ff:71:1c:c7:9c: 1c:db:5d:86:0c:e9:be:6d:aa:85:37:c0:e5:c7:5c: 29:d7:45:a2:3e:95:65:42:99:04:19:07:49:d4:5c: 90:3f:6b:ee:93:13:9e:a4:04:7c:45:18:1a:97:cc: 64:46:e7:51:39:e0:2a:fb:a3:da:7e:29:b3:63:31: 11:77:b5:24:e7:f0:de:78:9e:38:d5:1d:f9:03:d6: 96:50:8f:bb:3f:08:4d:4f:2f:50:46:a8:94:8a:b6: 5e:89:f3:be:1e:85:ce:dd:7a:20:d1:cc:99:43:da: 7b:6f:e1:b1:9c:68:75:45:f1:8c:a4:c2:5a:3f:66: df:92:c4:6a:aa:f5:69:9b:3d:12:b5:bb:63:06:72: fa:f7:4f:4d:40:f4:a1:e4:1e:9e:07:98:ee:d0:7c: 58:85:03:8a:ba:a3:21:39:67:cd:2c:b3:f0:fc:a7: 14:6c:c2:92:d9:fb:8d:59:75:1b:3a:05:34:a8:82: 22:89:0d:07:70:e8:00:1d:10:63:ec:95:c8:6c:f6: 9b:b8:57:2c:a6:27:a0:6e:e2:0a:a9:2d:45:26:1b: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8C:7E:81:D5:D3:8C:B6:33:2E:F8:33:DF:20:9E:EE:CD:AB:EA:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:72:21:c6:20:50:db:98:59:45:b2:1c:80:9d:40:bc:cd:95: 43:ec:2b:29:1f:fa:dc:78:0a:f5:ee:1c:36:92:d7:bf:5d:61: 93:7b:cb:6d:06:fe:42:1b:51:ce:8e:1f:ec:af:b5:cf:33:79: 02:fa:08:d6:89:25:14:be:68:ab:eb:ec:27:b0:3e:da:f5:d1: 18:d0:7e:8d:e7:cb:0b:9b:58:88:a3:57:1c:4b:78:63:b1:39: 19:39:28:63:c7:5e:54:03:e2:7d:f5:e7:76:7e:8b:5b:10:ba: fe:90:8f:9e:ed:46:df:23:88:fa:29:ba:11:48:73:aa:5c:ec: 69:7a:61:b9:b7:21:43:55:05:1f:04:50:df:8b:79:2b:5f:c9: 34:a5:f5:59:ff:cc:9f:a0:47:29:8a:e2:3a:b9:14:5d:ad:cc: da:55:c5:d0:d8:87:3b:a5:fc:cf:e0:3e:25:d8:0c:a9:0e:e4: 37:1d:1f:70:20:71:8d:a3:73:5b:3a:89:e7:db:3d:3d:0e:c9: d5:db:fc:3b:54:a4:e2:22:73:11:62:91:78:9d:6c:7d:c1:8a: cc:db:8f:2f:ae:61:3e:e5:9d:87:53:b7:64:ee:2b:6f:a3:14: 23:a9:42:20:0d:ae:41:b2:aa:69:c8:12:7e:ac:df:7c:c8:bf: d2:ec:1b:65 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWErIdjNJFZ9VRDfZ64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTVlMjZjMTQtNDhkNi00OTVmLWFiM2UtMDQ4ZmQzYzJmNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qFHcuuOBNG2dkU0WYRRkfiEIb1y39Bs4v/1 Jd7hgmzK0MBzWoHB/3Ecx5wc212GDOm+baqFN8Dlx1wp10WiPpVlQpkEGQdJ1FyQ P2vukxOepAR8RRgal8xkRudROeAq+6PafimzYzERd7Uk5/DeeJ441R35A9aWUI+7 PwhNTy9QRqiUirZeifO+HoXO3Xog0cyZQ9p7b+GxnGh1RfGMpMJaP2bfksRqqvVp mz0StbtjBnL6909NQPSh5B6eB5ju0HxYhQOKuqMhOWfNLLPw/KcUbMKS2fuNWXUb OgU0qIIiiQ0HcOgAHRBj7JXIbPabuFcspiegbuIKqS1FJhubPQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFIeMfoHV04y2My74M98gnu7Nq+qZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvN2Y4YWI2M2ItODQ3Yi0z NGU2LWEzOTgtMzAxZDg0N2FkN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAI1yIcYgUNuYWUWyHICdQLzNlUPsKykf+tx4 CvXuHDaS179dYZN7y20G/kIbUc6OH+yvtc8zeQL6CNaJJRS+aKvr7CewPtr10RjQ fo3nywubWIijVxxLeGOxORk5KGPHXlQD4n3153Z+i1sQuv6Qj57tRt8jiPopuhFI c6pc7Gl6Ybm3IUNVBR8EUN+LeStfyTSl9Vn/zJ+gRymK4jq5FF2tzNpVxdDYhzul /M/gPiXYDKkO5DcdH3AgcY2jc1s6iefbPT0OydXb/DtUpOIicxFikXidbH3Biszb jy+uYT7lnYdTt2TuK2+jFCOpQiANrkGyqmnIEn6s33zIv9LsG2U= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:04 2025 by rpki-client