$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa File: 3ae91796-d0c5-382c-af8b-cc422804c680.roa (raw, json) Hash identifier: RifPan4nsfFxT8YRfJXb6dnYfA2eI7KXiscT1wOBESM= Subject key identifier: 71:D7:E6:93:B9:F4:40:7F:DC:C5:01:16:A0:D9:99:F0:42:7E:6F:47 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584A90A0AD1E96CE1F3E867D2C48 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 63062 IP address blocks: 67.44.112.0/20 maxlen: 24 174.32.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ad:1e:96:ce:1f:3e:86:7d:2c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2208cf92-5b22-47c4-b244-7f7d84af3170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:75:61:2a:4a:01:f5:bd:5a:76:6c:ed:8e: a7:1c:76:02:f4:35:d6:b6:67:90:05:fb:17:7c:61: e4:5a:5f:5f:b0:6c:27:9f:68:5b:a5:5e:6f:5d:e6: ee:20:ce:e8:f2:b2:da:ed:e9:a4:0d:47:a3:9f:40: 93:f7:7d:d2:72:0b:d8:cd:76:17:7c:18:2b:7a:55: 5c:9c:d4:3d:95:a6:ec:84:7c:3e:46:b6:d0:1b:63: b7:7f:ac:4e:44:a4:2f:44:ad:6a:ad:53:64:54:35: 57:c7:ff:67:1c:c9:57:17:69:5d:07:b9:65:a2:9e: 46:9e:be:65:ea:48:21:9d:c6:dd:0c:d1:f2:ed:a3: e0:66:cc:81:33:70:ee:c7:c0:5a:ca:a7:49:d0:8b: e5:88:b1:6a:3d:8f:4d:14:2f:da:4b:75:61:37:a1: 77:e4:a5:bf:d9:3f:29:b1:60:e9:16:c0:b2:82:46: 25:07:89:d6:47:ca:54:0f:5d:c6:d1:9e:db:5b:66: e0:d8:9f:36:d4:38:79:34:bf:18:0d:7d:19:33:59: 58:31:3e:23:b8:ea:f9:8c:44:b4:c7:5e:6b:c4:58: fc:0b:58:86:f2:b2:5b:28:4b:7d:91:5f:cd:e2:93: 51:78:c6:b1:3a:e7:42:21:7b:62:68:f3:e8:5d:f1: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:E6:93:B9:F4:40:7F:DC:C5:01:16:A0:D9:99:F0:42:7E:6F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.112.0/20 174.32.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c7:d8:49:a3:aa:b4:1d:b4:aa:f1:0f:b7:2a:f2:1a:55:7c: 66:1c:18:19:64:bf:67:0e:1c:e3:4a:c2:d2:e8:49:a9:86:db: 9a:c0:e4:f9:9c:dd:25:53:c4:74:19:c6:c0:e1:90:0c:a9:51: e6:d5:97:82:4a:6a:90:14:4c:a6:1c:32:29:2a:48:15:8e:ae: e1:a5:7d:9e:4c:65:90:79:d2:7d:8b:15:34:40:5a:d1:45:99: 23:66:ef:2e:24:5e:f3:29:57:43:cc:da:af:6d:52:46:bf:7d: cb:17:39:16:57:83:46:e7:4f:cb:f3:49:13:ef:65:99:64:ba: af:aa:93:e6:44:41:02:2e:6e:6e:13:35:61:df:69:00:f4:fa: 5c:5e:51:d3:fa:3e:de:be:de:30:05:f1:fd:4e:df:1c:55:55: aa:9f:da:5f:73:58:2f:c5:1b:26:47:53:7d:25:d9:9b:6a:70: 49:bc:07:d6:61:c1:4b:6a:ce:b9:fd:f3:1d:60:b0:48:d2:70: fc:f2:51:1d:91:eb:8d:1b:e4:75:a9:04:a4:3d:98:86:cc:d2: 7a:26:6f:78:df:6d:34:19:c5:f2:b0:c4:20:4f:81:e2:37:43: 2a:fe:17:99:a2:60:5f:45:ef:31:a6:87:28:6c:a0:d1:13:da: 4f:b3:5e:a4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqQoK0els4fPoZ9LEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjIwOGNmOTItNWIyMi00N2M0LWIyNDQtN2Y3ZDg0YWYzMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofZ1YSpKAfW9WnZs7Y6nHHYC9DXWtmeQBfsX fGHkWl9fsGwnn2hbpV5vXebuIM7o8rLa7emkDUejn0CT933ScgvYzXYXfBgrelVc nNQ9labshHw+RrbQG2O3f6xORKQvRK1qrVNkVDVXx/9nHMlXF2ldB7llop5Gnr5l 6kghncbdDNHy7aPgZsyBM3Dux8BayqdJ0IvliLFqPY9NFC/aS3VhN6F35KW/2T8p sWDpFsCygkYlB4nWR8pUD13G0Z7bW2bg2J821Dh5NL8YDX0ZM1lYMT4juOr5jES0 x15rxFj8C1iG8rJbKEt9kV/N4pNReMaxOudCIXtiaPPoXfE7/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHHX5pO59EB/3MUBFqDZmfBCfm9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2FlOTE3OTYtZDBjNS0z ODJjLWFmOGItY2M0MjI4MDRjNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQyxwAwQE riBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI7H2EmjqrQdtKrxD7cq8hpVfGYcGBlkv2cOHONKwtLoSamG 25rA5Pmc3SVTxHQZxsDhkAypUebVl4JKapAUTKYcMikqSBWOruGlfZ5MZZB50n2L FTRAWtFFmSNm7y4kXvMpV0PM2q9tUka/fcsXORZXg0bnT8vzSRPvZZlkuq+qk+ZE QQIubm4TNWHfaQD0+lxeUdP6Pt6+3jAF8f1O3xxVVaqf2l9zWC/FGyZHU30l2Ztq cEm8B9ZhwUtqzrn98x1gsEjScPzyUR2R640b5HWpBKQ9mIbM0nomb3jfbTQZxfKw xCBPgeI3Qyr+F5miYF9F7zGmhyhsoNET2k+zXqQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:07 2025 by rpki-client