$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa File: 9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa (raw, json) Hash identifier: zOU1XtWZaN9knNgbh8ufJCzsqQ4V2ysboqgkm/OH+wU= Subject key identifier: CF:3E:97:F9:E1:79:54:6C:2F:ED:EB:DF:B2:A9:46:3C:B5:18:4A:E9 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584AEE268716D6EB283742605700 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 13880 IP address blocks: 64.57.32.0/20 maxlen: 24 216.230.48.0/20 maxlen: 24 2620:110:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:87:16:d6:eb:28:37:42:60:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=8e4d73c5-5a69-42a3-b8ef-656c3a3bafa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:14:d5:67:bd:69:7c:21:27:a8:cb:50:89: 23:2a:10:ca:79:3b:d7:af:4d:b2:b4:3d:df:99:af: b0:3e:3d:10:d6:4a:a4:f8:21:e7:64:c9:6f:2a:f7: 09:af:82:d2:e4:cf:34:f4:58:6e:34:44:1a:1b:82: b9:95:3a:cd:3b:ca:4d:da:f0:28:a7:26:20:bd:d7: d8:49:c4:8b:49:ce:e1:c1:90:30:95:06:37:f1:4b: 17:89:00:a0:d8:af:6a:f4:25:e0:0f:ad:16:66:6e: 96:22:30:0a:7f:87:a0:37:52:39:8b:63:84:a1:7b: ee:ca:ec:30:48:cd:47:7b:88:ce:4d:04:5d:bc:b8: 4c:bf:30:50:4c:f2:40:2d:90:da:5e:56:0d:8f:e6: f8:04:0d:67:29:f7:32:a3:4f:ac:72:43:5c:05:fa: 6e:55:63:b9:d3:61:bd:a9:dc:a2:cf:2d:4b:e4:96: 26:03:d5:4d:d1:e2:b9:91:44:74:06:35:66:14:f6: 6a:38:17:54:ac:4e:47:ad:55:8f:35:a1:a2:44:fc: ac:a0:b4:86:d6:7b:02:2d:39:87:9a:13:fc:d7:a7: 13:a2:9e:ad:63:8c:d9:92:47:40:6f:c8:7c:2f:9b: 71:2f:41:80:92:28:bf:77:e2:43:fe:c5:99:ce:ee: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:97:F9:E1:79:54:6C:2F:ED:EB:DF:B2:A9:46:3C:B5:18:4A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.32.0/20 216.230.48.0/20 IPv6: 2620:110:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f6:ed:1e:3a:e2:e4:d3:56:fb:da:6c:b4:7c:7c:5d:94:6d: ed:f3:00:e9:49:fa:27:0f:43:92:61:1c:7e:3f:df:30:0f:1e: 38:0a:7f:93:05:b5:ba:7f:a6:5e:e7:f0:97:8b:76:ad:55:e0: 52:09:38:c0:0e:39:62:2f:b2:70:16:d9:a9:9d:4d:17:4b:dc: 07:5e:a9:a7:68:e3:9f:08:d1:2c:e6:be:28:b6:72:2e:01:5e: a5:a4:b7:60:7a:28:a9:f8:32:81:95:c6:37:f3:13:3a:72:61: 0e:c1:3f:5c:b6:d9:73:19:b5:9d:cb:aa:26:5e:1f:98:6b:28: 2a:84:83:4a:90:6e:a0:2b:3f:34:9b:95:88:fc:b1:7c:c7:24: c4:d2:e9:87:74:e7:3c:fb:15:0e:e6:ba:20:c3:c9:f6:8b:d0: 8d:29:89:7c:35:16:45:f5:3b:f1:25:90:28:65:81:43:35:a5: 0f:3a:9c:1f:9c:66:01:21:b4:43:9b:b0:3b:70:6a:87:da:a9: a3:2a:2a:fa:95:f2:9f:56:4c:7f:c6:15:d6:aa:05:1a:e3:1e: ba:25:b8:4c:e9:8b:62:cc:9e:0c:45:e5:d1:3e:5c:91:fd:fd: c3:3f:e0:ec:a3:b2:a8:3a:61:33:f2:65:6f:8e:56:59:ac:69: d0:e6:69:1f -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEruJocW1usoN0JgVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk OGU0ZDczYzUtNWE2OS00MmEzLWI4ZWYtNjU2YzNhM2JhZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiwU1We9aXwhJ6jLUIkjKhDKeTvXr02ytD3f ma+wPj0Q1kqk+CHnZMlvKvcJr4LS5M809FhuNEQaG4K5lTrNO8pN2vAopyYgvdfY ScSLSc7hwZAwlQY38UsXiQCg2K9q9CXgD60WZm6WIjAKf4egN1I5i2OEoXvuyuww SM1He4jOTQRdvLhMvzBQTPJALZDaXlYNj+b4BA1nKfcyo0+sckNcBfpuVWO502G9 qdyizy1L5JYmA9VN0eK5kUR0BjVmFPZqOBdUrE5HrVWPNaGiRPysoLSG1nsCLTmH mhP816cTop6tY4zZkkdAb8h8L5txL0GAkii/d+JD/sWZzu6oCQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFM8+l/nheVRsL+3r37KpRjy1GErpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTQ5NGMxZWMtYWNhYi0z YzVjLWFmYTAtMWRkMzlmYzNiMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQEQDkgAwQE 2OYwMA8EAgACMAkDBwQmIAEQcAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW/btHjri5NNW+9pstHx8XZRt 7fMA6Un6Jw9DkmEcfj/fMA8eOAp/kwW1un+mXufwl4t2rVXgUgk4wA45Yi+ycBbZ qZ1NF0vcB16pp2jjnwjRLOa+KLZyLgFepaS3YHooqfgygZXGN/MTOnJhDsE/XLbZ cxm1ncuqJl4fmGsoKoSDSpBuoCs/NJuViPyxfMckxNLph3TnPPsVDua6IMPJ9ovQ jSmJfDUWRfU78SWQKGWBQzWlDzqcH5xmASG0Q5uwO3Bqh9qpoyoq+pXyn1ZMf8YV 1qoFGuMeuiW4TOmLYsyeDEXl0T5ckf39wz/g7KOyqDphM/Jlb45WWaxp0OZpHw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:53 2025 by rpki-client