$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa File: 9faef993-81b7-3486-a305-4bb2df44e2a6.roa (raw, json) Hash identifier: jUZZWNpFIOlGZ6BU2xIb1fQR7rUx+Yt32Pinz0X8HCM= Subject key identifier: C2:2C:94:1A:91:A9:E6:42:4A:01:CB:56:B0:E3:90:27:11:45:13:B9 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584A6F207DA4A9737A380E199B80 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 55039 IP address blocks: 64.190.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7d:a4:a9:73:7a:38:0e:19:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=f0c336d8-418f-4d81-bd6b-3ba66fc513d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:6d:74:f6:0a:0d:6c:9c:c8:45:69:d6:d1: cf:e7:e5:d4:fe:f7:fc:d6:47:23:f0:cf:3e:8d:95: d4:b8:2f:50:fa:76:22:6f:15:55:c1:a2:7f:92:9d: 20:05:a5:1e:18:63:6f:a3:ed:40:69:e4:af:d3:e3: da:bc:c5:ec:7c:2b:74:1e:0c:f3:9f:eb:9d:8c:c4: db:6e:0e:5d:ba:d0:26:63:b0:58:6f:e1:3c:d1:49: 4d:79:b5:11:de:f0:79:d0:22:26:f8:cb:ae:07:0a: 6b:88:d9:91:87:d4:97:04:73:39:5a:8f:3f:06:7b: 33:2a:59:b7:cc:24:98:b2:a1:47:35:2e:99:5d:2a: 3e:88:95:de:e6:26:e8:08:a1:e6:78:dd:42:e9:c8: 75:61:12:4e:a5:e8:67:77:cc:db:88:1f:23:4b:24: a8:99:19:20:b0:67:6d:5c:49:42:7a:ed:c0:20:ea: 41:b8:37:70:07:a4:18:df:bb:fb:45:b1:89:db:09: 5c:5c:da:fc:13:9c:55:c7:56:ef:32:0d:6b:f6:dd: fc:42:6d:aa:02:90:10:62:77:8e:8e:7f:2b:f0:0a: a7:5b:58:4d:26:1d:0a:cb:ac:88:a2:f4:88:9c:f8: 2f:31:0b:f0:e6:70:19:7c:04:39:9b:1d:0a:e1:e7: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:94:1A:91:A9:E6:42:4A:01:CB:56:B0:E3:90:27:11:45:13:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 64.190.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8f:de:13:81:21:aa:e6:43:cb:f9:c9:89:69:5b:8e:5e:6e: 84:85:c2:9c:07:ab:74:ba:7e:bf:85:75:03:96:57:be:22:56: 73:5a:75:89:da:48:b4:37:9f:97:ca:d7:d3:bf:a8:da:ba:b4: 6b:db:fb:de:67:9c:0c:d1:c1:4c:0f:01:1c:50:61:86:6f:3a: 3d:17:2d:f9:ac:c0:8a:aa:54:6c:ca:36:fd:56:28:e9:22:ab: 8a:08:b0:af:25:be:ae:d2:8a:0c:f9:ad:51:d2:1f:5b:68:59: a8:22:df:f3:6f:f5:90:af:45:b2:5f:67:3d:f3:d7:c6:4a:2a: e9:d0:23:01:2a:9b:b8:d7:cc:d9:31:87:38:55:83:bb:76:5b: 85:20:a5:5d:a4:96:ca:6d:20:72:ae:20:ce:8a:9c:22:69:55: cc:ec:73:8f:ea:9f:bc:8a:a9:0b:9c:3b:2a:74:93:47:4b:d7: de:b7:d6:bf:2d:e9:9f:20:1a:78:d2:9d:1a:09:21:69:3a:68: 55:a5:87:ff:01:ae:d6:8f:88:b3:c1:57:66:61:ef:0f:2a:4d: 27:6b:bb:e1:51:ec:64:f2:bd:fb:5b:43:f3:da:2e:3d:a5:e0: cc:ad:bd:ff:f0:e7:e1:54:0b:ed:62:36:90:27:a0:1f:9c:d0: 11:ba:22:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIH2kqXN6OA4Zm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZjBjMzM2ZDgtNDE4Zi00ZDgxLWJkNmItM2JhNjZmYzUxM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr49tdPYKDWycyEVp1tHP5+XU/vf81kcj8M8+ jZXUuC9Q+nYibxVVwaJ/kp0gBaUeGGNvo+1AaeSv0+PavMXsfCt0Hgzzn+udjMTb bg5dutAmY7BYb+E80UlNebUR3vB50CIm+MuuBwpriNmRh9SXBHM5Wo8/BnszKlm3 zCSYsqFHNS6ZXSo+iJXe5iboCKHmeN1C6ch1YRJOpehnd8zbiB8jSySomRkgsGdt XElCeu3AIOpBuDdwB6QY37v7RbGJ2wlcXNr8E5xVx1bvMg1r9t38Qm2qApAQYneO jn8r8AqnW1hNJh0Ky6yIovSInPgvMQvw5nAZfAQ5mx0K4efJawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIslBqRqeZCSgHLVrDjkCcRRRO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvOWZhZWY5OTMtODFiNy0z NDg2LWEzMDUtNGJiMmRmNDRlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQL4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGP3hOBIarmQ8v5yYlpW45eboSFwpwHq3S6fr+FdQOWV74iVnNadYna SLQ3n5fK19O/qNq6tGvb+95nnAzRwUwPARxQYYZvOj0XLfmswIqqVGzKNv1WKOki q4oIsK8lvq7Sigz5rVHSH1toWagi3/Nv9ZCvRbJfZz3z18ZKKunQIwEqm7jXzNkx hzhVg7t2W4UgpV2klsptIHKuIM6KnCJpVczsc4/qn7yKqQucOyp0k0dL19631r8t 6Z8gGnjSnRoJIWk6aFWlh/8BrtaPiLPBV2Zh7w8qTSdru+FR7GTyvftbQ/PaLj2l 4Mytvf/w5+FUC+1iNpAnoB+c0BG6Iq8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:32:05 2025 by rpki-client