$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/7be3ce67-426a-397a-9a74-e2c03aae3762.roa File: 7be3ce67-426a-397a-9a74-e2c03aae3762.roa (raw, json) Hash identifier: NaD3uy8UUY9VGT4t+YdPClUqlUCxwtwbkP4pGQQe0r8= Subject key identifier: 48:DD:F7:54:10:44:CB:AB:5E:12:3A:F2:0F:B7:3C:E4:2D:54:8D:E9 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584AEE26872AE2BA93C672BAFB20 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/7be3ce67-426a-397a-9a74-e2c03aae3762.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 19905 IP address blocks: 64.57.32.0/20 maxlen: 24 216.230.48.0/20 maxlen: 24 2620:110:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:87:2a:e2:ba:93:c6:72:ba:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=e34ebbf4-3a96-4df0-a5f9-35fc19ddd3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:40:a2:ef:9a:eb:57:2f:a8:e0:9e:e2:66: f5:a0:53:86:c3:8c:4e:83:aa:0e:65:ac:e6:6c:ef: 32:5b:3d:78:f7:c9:ac:d6:f1:3c:08:4d:14:38:68: 34:89:3a:31:27:f8:cb:f3:01:96:ac:a0:8b:16:64: be:92:45:de:82:73:0e:ed:be:2d:b9:7c:7d:57:dc: e2:70:41:13:6b:0f:c6:b3:9e:83:9b:42:d1:55:8f: 84:66:6e:85:b3:5f:35:46:61:4c:d0:76:99:c4:a5: ca:01:fc:da:9e:85:5f:b7:f5:d4:2a:34:0c:08:27: ef:48:76:1c:f0:7b:77:30:30:db:f0:ab:f1:19:4d: 78:db:c5:b0:fd:72:1b:53:7c:4a:dc:0e:b4:46:d3: 4c:53:df:f9:f3:bc:3c:ab:73:1e:d4:7a:3a:e8:49: 98:69:e9:d2:e8:43:8c:09:0c:89:f5:25:21:6f:21: b6:17:d9:71:d4:82:5c:bb:46:b3:8b:8b:57:17:e7: 69:54:4c:b7:0e:5e:9e:ab:07:3d:61:a8:bc:85:e3: a9:5b:3f:4e:3c:d3:a7:3d:22:bb:65:3b:fc:fe:5f: 2f:6d:97:36:d7:a9:97:bb:a2:a7:d3:92:63:52:1d: 7a:d1:2f:fd:73:0e:c5:13:e1:0e:12:24:8a:9e:d8: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DD:F7:54:10:44:CB:AB:5E:12:3A:F2:0F:B7:3C:E4:2D:54:8D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/7be3ce67-426a-397a-9a74-e2c03aae3762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.32.0/20 216.230.48.0/20 IPv6: 2620:110:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:69:a8:c5:e7:b8:f9:58:e3:b5:bd:0b:74:d1:3d:f5:bd:46: f2:bc:99:7c:bf:93:d5:9a:94:f7:4c:4c:b9:7c:3c:84:3d:de: 52:b1:31:19:86:ae:18:6e:21:59:92:74:f4:97:a8:bd:36:f0: 20:c2:91:96:76:d4:6f:a6:84:db:ad:28:f7:1c:97:a8:c4:24: 08:d5:5b:4b:35:c2:b4:71:15:e7:e8:13:22:3d:c6:fe:bb:cd: 96:48:75:57:00:c3:32:97:ac:87:b1:e0:f7:e5:8f:42:46:ef: 46:70:28:17:cd:0c:14:4b:2d:4e:ab:fe:68:ae:4d:7d:1f:7e: 02:7c:19:46:94:e2:a4:a9:b3:f9:97:8a:61:e4:da:4b:30:12: 42:a3:81:20:83:59:8f:8d:50:32:6c:62:e7:b7:5e:2f:25:81: 50:90:0b:13:37:59:a2:7c:11:ac:fd:ec:ca:31:0c:88:f9:3f: 45:e0:9f:59:a8:5d:75:99:d4:23:50:52:0b:c9:d9:7f:22:9a: 71:21:69:fc:c2:9d:79:89:0f:cb:28:9e:99:1c:59:63:7b:3f: cc:7b:35:1d:57:70:cf:59:f4:7b:d1:ec:6d:ae:44:ca:c3:e8: 54:c7:ca:71:f1:f9:0b:c1:15:8a:02:2e:98:35:81:51:bb:ac: 37:ee:60:10 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEruJocq4rqTxnK6+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTM0ZWJiZjQtM2E5Ni00ZGYwLWE1ZjktMzVmYzE5ZGRkM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OZAou+a61cvqOCe4mb1oFOGw4xOg6oOZazm bO8yWz1498ms1vE8CE0UOGg0iToxJ/jL8wGWrKCLFmS+kkXegnMO7b4tuXx9V9zi cEETaw/Gs56Dm0LRVY+EZm6Fs181RmFM0HaZxKXKAfzanoVft/XUKjQMCCfvSHYc 8Ht3MDDb8KvxGU1428Ww/XIbU3xK3A60RtNMU9/587w8q3Me1Ho66EmYaenS6EOM CQyJ9SUhbyG2F9lx1IJcu0azi4tXF+dpVEy3Dl6eqwc9Yai8heOpWz9OPNOnPSK7 ZTv8/l8vbZc216mXu6Kn05JjUh160S/9cw7FE+EOEiSKnthu5QIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFEjd91QQRMurXhI68g+3POQtVI3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvN2JlM2NlNjctNDI2YS0z OTdhLTlhNzQtZTJjMDNhYWUzNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQEQDkgAwQE 2OYwMA8EAgACMAkDBwQmIAEQcAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj2moxee4+Vjjtb0LdNE99b1G 8ryZfL+T1ZqU90xMuXw8hD3eUrExGYauGG4hWZJ09JeovTbwIMKRlnbUb6aE260o 9xyXqMQkCNVbSzXCtHEV5+gTIj3G/rvNlkh1VwDDMpesh7Hg9+WPQkbvRnAoF80M FEstTqv+aK5NfR9+AnwZRpTipKmz+ZeKYeTaSzASQqOBIINZj41QMmxi57deLyWB UJALEzdZonwRrP3syjEMiPk/ReCfWahddZnUI1BSC8nZfyKacSFp/MKdeYkPyyie mRxZY3s/zHs1HVdwz1n0e9Hsba5EysPoVMfKcfH5C8EVigIumDWBUbusN+5gEA== -----END CERTIFICATE-----Generated at Sat Aug 23 08:34:45 2025 by rpki-client