$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa File: a8d50708-183d-32fa-8e34-b0e93ebefc17.roa (raw, json) Hash identifier: GZD0dxiorsRBiUom4jIeCu2aleiGSdWe1Q9pGoXyzds= Subject key identifier: 1D:30:AA:79:A2:5A:35:FB:14:39:DC:7A:48:70:95:69:DD:9F:7A:AB Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584AC876523C6E6B6F5F2D0A3080 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 394111 IP address blocks: 64.147.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:52:3c:6e:6b:6f:5f:2d:0a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=e8c74f86-9017-4929-8745-0a721e8d45a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:c7:7b:75:8a:93:ba:b1:aa:73:20:8c:48: a8:5e:fb:ad:73:cd:44:d8:e5:7c:db:48:e9:f7:1a: 1f:6a:57:04:69:de:61:7e:89:71:69:7c:ae:51:95: 74:b0:cb:45:1a:79:44:42:6e:23:1d:42:8d:96:be: bd:64:96:80:2c:7c:29:3b:f1:4d:a5:dc:9f:de:eb: a0:db:96:fb:ff:a6:f2:83:1a:4c:1c:74:85:f1:b8: 5e:a2:94:5d:16:0b:d7:e6:ee:70:c3:1f:c3:66:14: a7:af:82:c1:cd:1d:04:8d:7a:b2:1d:22:48:69:df: db:91:3f:e0:59:f6:cf:c0:51:01:f6:54:e4:55:98: 84:dc:3b:a6:48:e8:fa:c8:31:e6:88:fc:6b:69:da: 3f:97:41:d3:01:77:32:26:fe:5b:15:37:71:c0:7b: c2:43:bd:1b:17:5c:55:57:96:83:56:2d:69:c1:b2: 12:b1:78:ed:0d:3e:de:a9:01:d0:54:c5:1a:56:70: 81:6d:ef:54:35:0c:17:a6:e3:84:91:19:71:90:5c: 87:54:d5:92:fa:8c:80:e6:53:78:68:a1:a3:1e:ec: cf:0e:76:49:8b:6b:0f:33:89:14:12:20:4e:64:4e: 36:f4:ef:4d:55:e2:ba:1f:51:8e:68:35:0b:58:6d: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:30:AA:79:A2:5A:35:FB:14:39:DC:7A:48:70:95:69:DD:9F:7A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:31:00:25:ba:86:f9:ba:a4:35:0c:d0:ee:8a:3e:73:de:1f: f9:b5:60:30:f0:e3:89:99:90:33:de:d3:89:7d:f7:c6:fa:b4: b9:d0:5c:5f:82:7b:00:00:33:70:9f:02:a2:79:52:45:a6:99: 64:6d:d7:ce:8e:e1:5a:85:b1:8d:c7:22:39:cf:e0:71:4f:4f: 4d:4f:06:f3:02:3a:45:59:14:bb:e2:ee:59:cc:dd:ae:45:30: 14:af:2e:05:99:27:44:35:c5:3b:bd:39:54:f3:83:90:3c:1b: 20:06:1c:01:a5:36:77:2b:9e:46:d6:2e:d9:a0:30:3f:6f:b6: cb:78:7d:97:ef:9e:fa:5f:6c:d3:7f:6f:ff:88:a9:cb:e1:03: 0c:30:82:1f:55:df:59:80:9e:98:d2:d9:00:8e:6c:02:be:78: b3:79:50:d2:11:74:21:17:d0:e9:79:e1:7a:c2:df:1f:b7:33: 69:4f:13:89:ff:f7:9c:e5:e0:44:35:a0:8e:f2:d6:70:3e:6e: b2:3c:81:82:1a:e0:ed:f9:c5:ce:c7:93:f9:70:28:f8:69:24: c3:0b:e7:e1:f9:99:49:e6:17:6a:95:6c:5e:ff:fb:81:a4:1b: ef:74:6a:d9:a5:ff:bd:5a:ae:9b:83:fd:92:64:01:75:31:e8: 33:e8:7a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlI8bmtvXy0KMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZThjNzRmODYtOTAxNy00OTI5LTg3NDUtMGE3MjFlOGQ0NWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpXHe3WKk7qxqnMgjEioXvutc81E2OV820jp 9xofalcEad5hfolxaXyuUZV0sMtFGnlEQm4jHUKNlr69ZJaALHwpO/FNpdyf3uug 25b7/6bygxpMHHSF8bheopRdFgvX5u5wwx/DZhSnr4LBzR0EjXqyHSJIad/bkT/g WfbPwFEB9lTkVZiE3DumSOj6yDHmiPxrado/l0HTAXcyJv5bFTdxwHvCQ70bF1xV V5aDVi1pwbISsXjtDT7eqQHQVMUaVnCBbe9UNQwXpuOEkRlxkFyHVNWS+oyA5lN4 aKGjHuzPDnZJi2sPM4kUEiBOZE429O9NVeK6H1GOaDULWG1vZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0wqnmiWjX7FDncekhwlWndn3qrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYThkNTA3MDgtMTgzZC0z MmZhLThlMzQtYjBlOTNlYmVmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAxACW6hvm6pDUM0O6KPnPeH/m1YDDw44mZkDPe04l998b6tLnQXF+C ewAAM3CfAqJ5UkWmmWRt186O4VqFsY3HIjnP4HFPT01PBvMCOkVZFLvi7lnM3a5F MBSvLgWZJ0Q1xTu9OVTzg5A8GyAGHAGlNncrnkbWLtmgMD9vtst4fZfvnvpfbNN/ b/+IqcvhAwwwgh9V31mAnpjS2QCObAK+eLN5UNIRdCEX0Ol54XrC3x+3M2lPE4n/ 95zl4EQ1oI7y1nA+brI8gYIa4O35xc7Hk/lwKPhpJMML5+H5mUnmF2qVbF7/+4Gk G+90atml/71arpuD/ZJkAXUx6DPoemA= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:29 2025 by rpki-client