$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa File: 43fa81ef-9a43-3b2e-8578-ff62facf5274.roa (raw, json) Hash identifier: lGNdNH9xezjfTtR6DN8/mKJbqA/SnbrfF6LOemdrw3Y= Subject key identifier: 7B:77:C5:5D:C5:C0:D4:84:E7:47:0E:56:64:95:D0:7A:93:75:1F:8E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ADC00FBDD70B2DDF3E903D3C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 64.237.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:fb:dd:70:b2:dd:f3:e9:03:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=c68eacc0-9601-4e76-aad6-e8e5edbb2462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:37:81:d1:e6:0d:be:c3:20:80:46:c7:fd: 44:c4:8c:66:9e:ac:32:39:83:a7:78:b9:6e:5f:af: 35:70:11:bd:95:2b:eb:97:27:71:62:0c:30:c8:a3: 0a:62:b4:d2:09:0b:90:80:89:25:6c:1d:b3:21:a3: d9:e7:14:7c:d2:9a:2c:ba:68:fb:86:2c:9b:31:79: ff:52:eb:bc:7c:61:6a:2d:a3:1d:db:03:50:bf:b5: ae:f6:3b:f5:8a:4b:7a:42:18:71:27:6b:fe:b8:b7: b2:eb:27:d6:bc:29:fc:64:0d:1b:83:bf:fb:0b:86: e8:e8:35:ab:ab:18:7a:da:45:99:d0:35:43:21:a2: 02:8b:8b:6c:d9:76:ba:47:3c:da:e5:dc:b6:0d:b4: b4:4e:1d:e3:98:3c:dd:f5:c3:d7:fc:6d:6c:b8:68: b4:dc:12:12:79:c3:b3:e7:62:5a:d5:85:b6:29:85: 7a:a5:c4:f8:db:03:f5:4a:86:09:c0:fa:5e:86:4a: 7b:65:e7:14:cc:90:4e:b4:e8:e4:96:9a:62:d2:82: d3:b2:28:9e:bb:6b:28:14:b4:c5:99:7b:1f:1b:f4: 83:40:ef:79:dc:7f:22:82:80:8b:08:59:31:b2:4a: ce:a5:84:9c:8a:e2:80:e6:29:06:e3:87:7e:57:ea: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:77:C5:5D:C5:C0:D4:84:E7:47:0E:56:64:95:D0:7A:93:75:1F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:83:de:35:b7:3d:05:cf:e2:3b:2d:ea:dd:b5:64:c9:b6:d1: 9e:db:c9:8d:32:7e:9c:5f:c4:04:e3:1c:8a:5a:22:fa:ba:dc: d9:9e:7b:8b:0b:58:52:02:e6:f2:ae:5e:70:d5:a0:82:59:13: ca:7d:51:98:f5:74:7c:e5:c0:84:7b:c1:b1:3a:50:b0:8f:4f: e9:29:70:c0:ec:dc:ce:e4:a1:06:46:b5:52:12:44:ff:c5:90: 3a:09:3f:4f:ab:2b:ba:64:34:f3:b7:59:c9:90:10:d4:ac:b0: af:0a:ca:30:1c:c0:21:8e:f8:3d:67:d2:dc:d7:9a:1d:6c:7f: 52:23:31:b5:48:64:2c:70:4c:b9:62:aa:0f:12:02:2e:37:26: b9:73:e6:0d:2b:30:0d:b2:d1:96:26:99:9b:cc:bd:2b:b5:23: e2:a3:7c:72:df:a2:66:a4:7c:4f:08:68:be:3b:25:d3:ce:a0: ab:f0:23:79:39:3d:08:25:89:6e:bc:cd:7c:f7:39:31:40:45: 1c:00:50:c4:73:dd:4a:96:65:fb:2f:70:09:d6:35:fb:8c:22: 5b:72:7d:fc:80:fe:82:4a:04:5c:1d:ad:25:8d:d6:7f:44:ac: 32:48:06:e1:5a:85:9b:12:8a:4f:37:55:62:88:ae:f2:f7:bd: c0:05:96:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAPvdcLLd8+kD08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk YzY4ZWFjYzAtOTYwMS00ZTc2LWFhZDYtZThlNWVkYmIyNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin03gdHmDb7DIIBGx/1ExIxmnqwyOYOneLlu X681cBG9lSvrlydxYgwwyKMKYrTSCQuQgIklbB2zIaPZ5xR80posumj7hiybMXn/ Uuu8fGFqLaMd2wNQv7Wu9jv1ikt6QhhxJ2v+uLey6yfWvCn8ZA0bg7/7C4bo6DWr qxh62kWZ0DVDIaICi4ts2Xa6Rzza5dy2DbS0Th3jmDzd9cPX/G1suGi03BISecOz 52Ja1YW2KYV6pcT42wP1SoYJwPpehkp7ZecUzJBOtOjklppi0oLTsiieu2soFLTF mXsfG/SDQO953H8igoCLCFkxskrOpYSciuKA5ikG44d+V+rXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHt3xV3FwNSE50cOVmSV0HqTdR+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDNmYTgxZWYtOWE0My0z YjJlLTg1NzgtZmY2MmZhY2Y1Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGD3jW3PQXP4jst6t21ZMm20Z7byY0yfpxfxATjHIpaIvq63Nmee4sL WFIC5vKuXnDVoIJZE8p9UZj1dHzlwIR7wbE6ULCPT+kpcMDs3M7koQZGtVISRP/F kDoJP0+rK7pkNPO3WcmQENSssK8KyjAcwCGO+D1n0tzXmh1sf1IjMbVIZCxwTLli qg8SAi43Jrlz5g0rMA2y0ZYmmZvMvSu1I+KjfHLfomakfE8IaL47JdPOoKvwI3k5 PQgliW68zXz3OTFARRwAUMRz3UqWZfsvcAnWNfuMIltyffyA/oJKBFwdrSWN1n9E rDJIBuFahZsSik83VWKIrvL3vcAFln4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:49:38 2025 by rpki-client