$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa File: a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa (raw, json) Hash identifier: F/+wEN0yiC6XMNLLWK2imp6Y2QryYPQJl7evEjVMgX0= Subject key identifier: 09:FE:AE:F2:DF:E7:3D:C4:D1:9B:CC:F2:39:39:8A:BF:DC:9F:54:0E Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Certificate serial: 010D0C9F4328584AD3A1274A26116F1556960380 Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 396163 IP address blocks: 64.58.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:27:4a:26:11:6f:15:56:96:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=6762c752-f2b2-4e44-acb1-0a1387596078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:00:83:1c:a8:69:32:13:8e:69:8a:ec:35: 43:db:46:31:b2:6a:46:8f:21:55:fb:94:46:ba:9e: c1:b5:f4:09:88:1c:34:f5:91:c6:40:5a:f0:4f:75: b3:a9:7a:84:97:db:ba:bc:88:3f:84:61:f8:d9:b4: 06:cb:a1:70:7e:81:71:a0:5a:78:ec:22:e4:f5:ee: b1:32:b4:4d:6f:d0:0f:01:91:16:0e:a8:f4:dd:7f: 83:0a:31:d9:33:ec:05:aa:32:56:b4:83:ed:61:7d: 9f:20:83:58:8b:e5:3e:ae:ba:cd:41:95:26:58:dc: f3:ec:f1:17:1d:96:6c:73:3b:f4:f4:26:e5:f7:a7: c7:2b:bb:4b:9d:a7:be:b8:15:27:62:db:24:d3:55: 87:70:0e:f5:b6:9c:ce:9a:04:bf:a0:fb:9e:9d:49: c1:07:db:17:50:a5:9f:15:05:6e:6c:ba:ed:ca:eb: 1a:d6:46:8d:a9:53:11:15:0f:99:30:96:85:03:94: 94:23:c3:f9:8d:6a:e6:6e:3c:88:da:8e:1f:0c:d6: e1:50:b8:de:fc:1d:34:84:59:7d:13:4e:58:63:64: 5f:d2:c0:45:97:a2:78:3b:9e:3e:fc:48:01:aa:37: fa:5c:43:12:af:80:8b:6e:d2:aa:c9:b0:55:03:3a: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:AE:F2:DF:E7:3D:C4:D1:9B:CC:F2:39:39:8A:BF:DC:9F:54:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/a3ae0793-ea93-36d7-86bc-789ec9359ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl X509v3 Authority Key Identifier: keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer sbgp-ipAddrBlock: critical IPv4: 64.58.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:18:e4:65:e7:29:00:39:cb:8c:4c:45:61:bb:9f:8d:78:90: dc:7f:97:c8:8d:84:58:31:09:64:87:5e:ba:83:2d:1e:b6:3d: 5c:3d:5e:06:6b:87:4f:01:f5:1d:5a:f1:af:32:6f:8d:77:cb: c2:e5:79:8a:53:03:75:9c:99:13:10:3c:ec:72:5a:5c:a8:72: 68:18:23:e0:13:f0:3f:d0:b1:f5:cd:2c:a2:de:7b:34:92:7f: 72:de:36:6d:89:0e:3b:49:bb:df:a9:8d:e0:5b:9f:ba:96:74: 15:00:be:ac:4a:78:88:7c:0e:6e:78:64:59:62:2c:c6:7f:16: 86:ec:df:84:d9:cd:58:70:5c:eb:e2:0c:dd:87:12:20:af:a0: db:04:10:9f:e4:83:3e:13:02:fc:ba:9c:d0:4e:fa:9d:b1:ef: 8e:50:49:8a:08:ed:77:2e:90:90:c3:5d:52:1d:8d:fc:06:7b: 2d:2e:f5:d5:93:43:76:70:93:c7:03:e0:62:a9:fa:a1:0d:88: 9a:9a:4b:54:5c:f6:df:c7:0f:7f:eb:93:9d:00:8f:7f:b0:82: e0:c7:14:86:dc:3b:2c:f0:61:80:fb:1f:b9:56:70:68:13:5c: 8c:fd:f5:e5:5b:02:e8:ff:39:71:8b:cd:a3:ea:90:88:5d:0f: b7:ba:5d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSdKJhFvFVaWA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl MWI0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk Njc2MmM3NTItZjJiMi00ZTQ0LWFjYjEtMGExMzg3NTk2MDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll0AgxyoaTITjmmK7DVD20YxsmpGjyFV+5RG up7BtfQJiBw09ZHGQFrwT3WzqXqEl9u6vIg/hGH42bQGy6FwfoFxoFp47CLk9e6x MrRNb9APAZEWDqj03X+DCjHZM+wFqjJWtIPtYX2fIINYi+U+rrrNQZUmWNzz7PEX HZZsczv09Cbl96fHK7tLnae+uBUnYtsk01WHcA71tpzOmgS/oPuenUnBB9sXUKWf FQVubLrtyusa1kaNqVMRFQ+ZMJaFA5SUI8P5jWrmbjyI2o4fDNbhULje/B00hFl9 E05YY2Rf0sBFl6J4O54+/EgBqjf6XEMSr4CLbtKqybBVAzq/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn+rvLf5z3E0ZvM8jk5ir/cn1QOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvYTNhZTA3OTMtZWE5My0z NmQ3LTg2YmMtNzg5ZWM5MzU5ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2 OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1 ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1 MDE5NWUxYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8Y5GXnKQA5y4xMRWG7n414kNx/l8iNhFgxCWSHXrqDLR62PVw9XgZr h08B9R1a8a8yb413y8LleYpTA3WcmRMQPOxyWlyocmgYI+AT8D/QsfXNLKLeezSS f3LeNm2JDjtJu9+pjeBbn7qWdBUAvqxKeIh8Dm54ZFliLMZ/Fobs34TZzVhwXOvi DN2HEiCvoNsEEJ/kgz4TAvy6nNBO+p2x745QSYoI7XcukJDDXVIdjfwGey0u9dWT Q3Zwk8cD4GKp+qENiJqaS1Rc9t/HD3/rk50Aj3+wguDHFIbcOyzwYYD7H7lWcGgT XIz99eVbAuj/OXGLzaPqkIhdD7e6XWo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:17 2025 by rpki-client