$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa File: ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa (raw, json) Hash identifier: pN8vSWqVIfwVQ1nzIWA4gAgK852ByZIGvE96Yn55oh8= Subject key identifier: A9:0F:7C:7B:99:6B:E2:39:F9:A3:3B:C0:3E:5B:F5:82:A5:75:22:F5 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F4328584AD23BB039D82E3B002A0EBF80 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 20454 IP address blocks: 69.160.32.0/20 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b0:39:d8:2e:3b:00:2a:0e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=6237e53b-66e3-4663-aedd-aafd3809ee4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:d7:19:68:f1:92:21:65:dc:77:e0:d2:87: fb:d5:67:cc:67:bf:03:dc:ab:d6:96:f1:2d:7c:03: 97:15:ac:5c:a5:85:1b:e8:a0:15:74:55:61:56:05: 0d:0c:11:50:ba:0d:f9:89:ea:5c:a7:fa:2d:92:c9: d6:7f:9d:7c:1e:b8:2f:5f:bc:b0:58:e1:1e:24:9b: bf:48:a5:1b:14:05:06:d3:29:b6:84:cd:02:50:c6: 6f:db:aa:d4:f9:78:c6:a9:2b:f7:bd:68:d8:66:8f: 5b:12:26:ba:47:34:e6:6b:bf:c3:08:b5:fb:39:9b: 94:1c:ef:03:63:0d:2a:1c:53:7b:1a:cb:67:e2:2c: 4b:40:67:5f:c0:5a:e8:7d:fb:04:6c:4b:4d:d7:96: 8c:90:43:2c:43:09:7b:d1:1f:bb:2e:22:31:da:3f: df:27:ec:98:2b:b9:c5:e6:26:e1:9e:1d:f5:09:fb: 2e:c1:24:ba:ab:df:4f:46:15:15:e4:4e:33:2d:3c: 77:61:37:69:d3:4f:e5:c0:b7:81:4f:bd:55:89:9f: 08:81:3a:de:d3:4f:6e:85:5d:e9:6b:fb:87:3b:0b: d2:01:9f:c1:79:4f:d4:21:aa:29:2e:ad:53:a1:1e: 4e:25:8d:7b:e6:4d:bd:7e:e4:03:ad:f1:f2:c2:ef: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0F:7C:7B:99:6B:E2:39:F9:A3:3B:C0:3E:5B:F5:82:A5:75:22:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv4: 69.160.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8a:25:00:71:71:b0:e7:d5:a8:a5:d9:e7:d1:ac:ba:7d:aa: de:39:fd:dc:d9:b7:ec:3c:3a:3e:c3:b3:cd:be:4c:60:b6:f6: ca:18:f1:95:12:a4:d4:bf:a2:39:21:5b:6f:d1:6a:8a:a9:a7: 82:fb:2b:41:c2:21:8b:40:25:66:33:13:2a:15:f4:ac:06:d8: 6b:77:a1:1b:c6:72:43:4b:f3:0a:ad:68:6e:77:1d:2b:e3:56: 18:0d:e5:3e:2d:af:a2:3b:0a:17:e7:30:66:f1:03:51:19:89: e7:ef:7c:02:38:f6:45:b6:77:7d:7f:47:34:e0:ef:dc:0d:65: 1c:97:7d:bd:cb:90:e3:3d:24:94:d0:63:18:a0:47:e5:51:e0: f4:95:08:e6:41:6e:07:90:1e:92:5d:53:39:06:89:2d:5d:f0: 6b:b4:f0:55:64:c2:8e:49:50:a0:c0:8b:b1:c9:31:33:e1:b8: bd:06:db:92:e9:4e:07:e6:4a:0d:94:8c:0e:d3:7f:b1:d1:92: 1b:18:57:0f:fc:19:a4:ef:5d:54:b2:8c:da:f0:b9:0a:02:84: ff:29:18:29:ae:8e:47:88:6f:98:1d:01:2a:03:63:20:bb:57: 03:4f:ee:a7:0e:c5:15:5d:fe:75:f4:18:b4:97:27:9d:26:27: 1d:0e:1e:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7A52C47ACoOv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NjIzN2U1M2ItNjZlMy00NjYzLWFlZGQtYWFmZDM4MDllZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSzXGWjxkiFl3Hfg0of71WfMZ78D3KvWlvEt fAOXFaxcpYUb6KAVdFVhVgUNDBFQug35iepcp/otksnWf518HrgvX7ywWOEeJJu/ SKUbFAUG0ym2hM0CUMZv26rU+XjGqSv3vWjYZo9bEia6RzTma7/DCLX7OZuUHO8D Yw0qHFN7Gstn4ixLQGdfwFroffsEbEtN15aMkEMsQwl70R+7LiIx2j/fJ+yYK7nF 5ibhnh31CfsuwSS6q99PRhUV5E4zLTx3YTdp00/lwLeBT71ViZ8IgTre009uhV3p a/uHOwvSAZ/BeU/UIaopLq1ToR5OJY175k29fuQDrfHywu8YIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkPfHuZa+I5+aM7wD5b9YKldSL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvZmY4YjNkYTgtNTA5MC0z ZGZkLTgyZDAtYmRkZjhmNzRiY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERaAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiKJQBxcbDn1ail2efRrLp9qt45/dzZt+w8Oj7Ds82+TGC29soY8ZUS pNS/ojkhW2/Raoqpp4L7K0HCIYtAJWYzEyoV9KwG2Gt3oRvGckNL8wqtaG53HSvj VhgN5T4tr6I7ChfnMGbxA1EZiefvfAI49kW2d31/RzTg79wNZRyXfb3LkOM9JJTQ YxigR+VR4PSVCOZBbgeQHpJdUzkGiS1d8Gu08FVkwo5JUKDAi7HJMTPhuL0G25Lp TgfmSg2UjA7Tf7HRkhsYVw/8GaTvXVSyjNrwuQoChP8pGCmujkeIb5gdASoDYyC7 VwNP7qcOxRVd/nX0GLSXJ50mJx0OHqk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:22 2025 by rpki-client