$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa File: 09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa (raw, json) Hash identifier: 9f29rL1alIYKDKOzhPnBGhSE/iRsgE43GII+asPwgCc= Subject key identifier: 7A:2C:EF:00:ED:88:7A:A7:37:D7:C4:CF:23:70:3E:EE:24:B1:90:4B Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584AF256A22A3FEAD4273958A000 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 26967 IP address blocks: 64.136.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a2:2a:3f:ea:d4:27:39:58:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=b32de44a-2023-497e-8bba-dd9f550a4af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:4f:27:95:20:02:38:fc:04:e0:b3:63:48: 8d:e8:fe:b2:43:f9:5b:5c:92:42:58:b1:ad:c1:00: 8a:01:57:bf:ad:74:81:60:41:f0:16:01:05:77:1d: 77:1a:89:b0:f5:19:e1:a6:3b:d4:bb:37:11:58:5b: a6:bd:c3:ce:31:87:1c:75:fe:8d:83:6b:4b:19:21: 5f:c4:82:59:32:37:4c:23:6e:48:7e:9b:93:34:66: b4:0b:58:18:24:f0:08:0d:ae:6f:68:5e:ae:27:91: 41:0e:eb:f7:95:c6:07:3f:28:f3:f3:eb:2b:b8:27: 2d:b7:5b:44:53:08:84:c1:6d:54:7e:97:5c:d6:7d: 23:d8:67:52:06:79:a7:ab:c4:c9:ca:78:9f:40:0f: cf:f4:19:a9:4d:41:e1:19:d7:66:af:33:9f:a5:99: f3:33:67:1a:c9:35:7f:5a:a3:c6:7f:44:6a:f9:b3: 06:e4:bd:af:24:d2:65:e5:dd:65:18:0a:d1:31:6a: ab:4f:6a:d8:be:e8:d2:e4:2c:71:11:cb:cc:e1:16: dc:60:e2:f1:d1:97:82:d1:81:53:04:2d:8e:67:11: 0b:17:4f:8d:bb:02:66:62:5c:87:98:eb:6e:9f:67: e3:2f:96:74:e4:a1:e2:32:5b:b0:54:67:4c:6d:38: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2C:EF:00:ED:88:7A:A7:37:D7:C4:CF:23:70:3E:EE:24:B1:90:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:04:72:c8:03:7d:5c:2d:f1:18:69:c8:ec:a4:47:e6:a2:f5: b2:38:bd:c0:bc:ef:36:d9:a0:5a:51:d0:04:0c:46:eb:8c:50: 16:3e:a8:ba:67:f9:7f:e0:77:7f:57:e0:56:f8:bf:6a:32:65: ae:aa:8a:9b:41:bf:7b:08:8d:14:a7:0b:f1:43:45:39:13:fd: ba:dd:b2:84:e6:c7:15:ce:88:e8:42:17:69:5e:84:85:e6:cc: 23:73:34:62:3e:57:97:d4:dd:30:66:22:62:6f:a0:1b:81:a3: bf:db:3f:3b:4d:b9:66:ad:8f:cf:f1:bb:42:54:b6:ec:20:74: 43:75:37:01:22:f1:8f:3e:f5:58:38:8c:65:5f:2c:d5:78:13: d9:fe:cc:0f:96:3d:2f:d2:5e:ec:ce:5d:85:09:17:a4:61:ad: bd:4f:cc:56:5c:de:b7:eb:59:32:d6:91:ab:79:b6:03:0a:9d: d9:f5:5d:6d:87:df:46:b5:a4:77:15:ae:e4:fc:fc:7c:7c:07: 8f:76:c0:16:18:c2:4b:cf:17:d5:9a:1f:00:ba:d1:60:61:a9: 09:4f:02:40:8e:6f:e7:c4:2d:df:5f:94:d0:58:f0:72:43:8d: da:7b:6a:52:9b:48:30:52:fe:6d:27:39:47:15:c4:30:39:a8: 75:71:45:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqIqP+rUJzlYoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YjMyZGU0NGEtMjAyMy00OTdlLThiYmEtZGQ5ZjU1MGE0YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprdPJ5UgAjj8BOCzY0iN6P6yQ/lbXJJCWLGt wQCKAVe/rXSBYEHwFgEFdx13Gomw9RnhpjvUuzcRWFumvcPOMYccdf6Ng2tLGSFf xIJZMjdMI25IfpuTNGa0C1gYJPAIDa5vaF6uJ5FBDuv3lcYHPyjz8+sruCctt1tE UwiEwW1Ufpdc1n0j2GdSBnmnq8TJynifQA/P9BmpTUHhGddmrzOfpZnzM2cayTV/ WqPGf0Rq+bMG5L2vJNJl5d1lGArRMWqrT2rYvujS5CxxEcvM4RbcYOLx0ZeC0YFT BC2OZxELF0+NuwJmYlyHmOtun2fjL5Z05KHiMluwVGdMbTjWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHos7wDtiHqnN9fEzyNwPu4ksZBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMDlmYWMzMzYtNzM1OS0z YTBlLWFhZjUtNzY3N2RmYTNkOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQEcsgDfVwt8RhpyOykR+ai9bI4vcC87zbZoFpR0AQMRuuMUBY+qLpn +X/gd39X4Fb4v2oyZa6qiptBv3sIjRSnC/FDRTkT/brdsoTmxxXOiOhCF2lehIXm zCNzNGI+V5fU3TBmImJvoBuBo7/bPztNuWatj8/xu0JUtuwgdEN1NwEi8Y8+9Vg4 jGVfLNV4E9n+zA+WPS/SXuzOXYUJF6Rhrb1PzFZc3rfrWTLWkat5tgMKndn1XW2H 30a1pHcVruT8/Hx8B492wBYYwkvPF9WaHwC60WBhqQlPAkCOb+fELd9flNBY8HJD jdp7alKbSDBS/m0nOUcVxDA5qHVxRRs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:37 2025 by rpki-client