$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa File: bcf63ce9-7252-3eb7-86a9-be391198cc94.roa (raw, json) Hash identifier: gFyPuf/GEPTNYAB0gWF33CX8Lsiit472MrI6Sfp2wcc= Subject key identifier: CA:40:E6:AC:78:3D:90:90:D6:F8:68:44:64:5F:1F:6A:48:FD:38:D0 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584AC5AB864AEDD75A5431EC9C40 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 396982 IP address blocks: 198.135.124.0/23 maxlen: 23 199.19.248.0/21 maxlen: 21 199.116.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:86:4a:ed:d7:5a:54:31:ec:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=9f62b207-883b-4664-a53d-64503ca88737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:91:4e:51:46:3e:a0:48:a8:fc:51:7b:b9:42: 66:65:d2:a1:46:67:0c:98:9a:fd:57:41:98:ff:1e: 67:a6:ac:1e:f2:09:b9:d9:b0:22:2f:4a:11:ec:0e: 56:c7:34:b3:16:44:7f:be:b8:74:31:a4:b1:4b:aa: d6:5d:46:ce:be:cd:11:ab:61:ca:6b:55:94:88:49: 70:b7:11:5c:2e:6b:46:e2:26:ed:ee:e1:88:01:84: 1e:c2:8c:1e:26:f7:eb:74:b3:83:6a:90:15:bf:69: fe:5e:65:56:6f:d8:ca:2b:14:fd:a5:52:ee:00:19: 02:24:ac:7d:65:6f:4a:14:49:87:02:62:b2:ed:da: 38:f4:dd:d5:b4:2c:bf:39:3a:74:19:dd:24:c6:f4: 60:8e:98:b6:c1:e8:23:d1:18:44:e9:10:d4:a4:a4: 5e:bd:d5:8d:63:43:64:73:80:c1:31:18:00:a4:0f: 02:95:31:6d:b2:cb:17:14:14:eb:03:9f:e3:92:c6: 12:8b:74:30:6b:9d:45:b4:88:18:e1:ca:17:8e:1d: af:61:b6:bd:7b:02:a0:2f:0c:d0:f5:b8:0f:b8:1c: d9:c9:55:2f:15:ca:50:e4:fd:85:c0:ba:9d:a9:74: 2f:27:5a:6b:27:f1:69:a2:31:22:23:3e:65:65:46: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:40:E6:AC:78:3D:90:90:D6:F8:68:44:64:5F:1F:6A:48:FD:38:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 198.135.124.0/23 199.19.248.0/21 199.116.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5d:9a:db:d0:d5:9c:bb:c0:96:d3:62:c1:47:61:e7:45:78: 3d:7c:ad:ee:c5:6d:95:30:77:f6:43:91:91:41:9a:ba:d7:e9: b8:a3:3e:61:6f:bc:f7:d6:81:cd:bd:e1:fa:f0:04:e2:eb:ec: ed:0e:d1:f6:db:a9:ad:df:e3:c2:84:4f:e5:81:28:85:88:94: 12:4d:b3:3b:b3:26:fb:dc:8d:dc:d6:ce:69:be:56:22:5a:81: d8:8b:fa:e9:80:0b:5d:4f:9f:d8:2c:6a:b6:d6:d3:f2:89:67: 8f:49:e5:7f:c5:48:3d:63:99:7f:59:fb:8c:01:53:db:9d:d9: 83:5a:60:51:2d:2a:5f:ec:3a:70:65:b5:c5:64:c2:07:c3:28: d5:99:12:ad:4f:a4:35:4d:d5:76:a3:bd:40:d7:98:fa:cc:79: c8:65:23:ce:40:2f:d6:c0:06:3e:1b:08:3c:11:3a:18:63:da: 3c:10:74:82:f7:d3:5c:33:9d:fc:5d:8d:ef:51:5f:79:75:c0: b7:5f:49:02:7c:82:4d:80:34:f3:1c:da:5f:6a:87:bc:17:e0: 73:30:fe:b8:bc:a1:51:e7:ff:86:d2:a7:59:c8:26:ba:4b:7e: 7d:ef:2e:97:67:f5:e4:19:b7:00:c3:a8:48:9c:22:86:56:4f: b4:6a:95:09 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErFq4ZK7ddaVDHsnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OWY2MmIyMDctODgzYi00NjY0LWE1M2QtNjQ1MDNjYTg4NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJFOUUY+oEio/FF7uUJmZdKhRmcMmJr9V0GY /x5npqwe8gm52bAiL0oR7A5WxzSzFkR/vrh0MaSxS6rWXUbOvs0Rq2HKa1WUiElw txFcLmtG4ibt7uGIAYQewoweJvfrdLODapAVv2n+XmVWb9jKKxT9pVLuABkCJKx9 ZW9KFEmHAmKy7do49N3VtCy/OTp0Gd0kxvRgjpi2wegj0RhE6RDUpKRevdWNY0Nk c4DBMRgApA8ClTFtsssXFBTrA5/jksYSi3Qwa51FtIgY4coXjh2vYba9ewKgLwzQ 9bgPuBzZyVUvFcpQ5P2FwLqdqXQvJ1prJ/FpojEiIz5lZUb9KwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMpA5qx4PZCQ1vhoRGRfH2pI/TjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYmNmNjNjZTktNzI1Mi0z ZWI3LTg2YTktYmUzOTExOThjYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBxod8AwQD xxP4AwQDx3SoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABZdmtvQ1Zy7wJbTYsFHYedFeD18re7FbZUwd/ZD kZFBmrrX6bijPmFvvPfWgc294frwBOLr7O0O0fbbqa3f48KET+WBKIWIlBJNszuz JvvcjdzWzmm+ViJagdiL+umAC11Pn9gsarbW0/KJZ49J5X/FSD1jmX9Z+4wBU9ud 2YNaYFEtKl/sOnBltcVkwgfDKNWZEq1PpDVN1XajvUDXmPrMechlI85AL9bABj4b CDwROhhj2jwQdIL301wznfxdje9RX3l1wLdfSQJ8gk2ANPMc2l9qh7wX4HMw/ri8 oVHn/4bSp1nIJrpLfn3vLpdn9eQZtwDDqEicIoZWT7RqlQk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:54:55 2025 by rpki-client