$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json) Hash identifier: Cp6j5B4p/qX4kd/jyNykiKJQe8ruGy75Q1bWNpmdz5I= Subject key identifier: 51:CB:97:CB:C8:FC:2E:84:E4:19:36:E4:84:C3:69:1B:8C:FC:36:39 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584AC2E10743A8C4238A47473580 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 396998 IP address blocks: 64.68.193.0/24 maxlen: 24 2620:49:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:07:43:a8:c4:23:8a:47:47:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=84ca550c-e164-4fdd-be64-fe220fc51c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:3f:9b:54:5e:a1:5c:86:12:44:4a:84:42: 78:71:26:00:78:72:66:4e:59:b2:72:54:a4:17:68: 3e:ff:a5:57:e5:2f:47:dc:54:50:91:53:f8:75:66: a9:b8:2f:d0:23:3d:cc:9f:a4:04:5b:51:5a:f9:ec: 82:66:c4:9a:0c:9e:08:ac:b4:d2:67:05:2e:c7:62: fe:a2:1c:a2:1b:55:34:33:c1:db:51:01:4d:81:66: f3:8c:56:d2:07:60:d4:09:dd:c8:10:a8:a5:56:cd: a3:9f:e1:96:ed:35:d1:e4:52:93:17:c3:b4:2b:7a: b1:83:74:1b:ca:7a:a3:df:cd:f6:62:16:8c:f0:f7: 53:f1:ff:cf:6c:d7:0f:10:15:26:a3:76:17:e9:a2: 3a:56:4c:b2:0b:2c:9b:7f:12:ea:73:87:56:e7:2f: d6:01:3c:7d:b6:00:20:97:94:ec:70:f0:ac:65:7c: 1d:70:a2:0d:5b:8e:84:17:44:a6:ff:96:b4:fa:97: 0b:f5:8f:df:47:b9:28:fa:a6:14:27:75:4c:24:98: 67:54:73:d2:c2:85:03:1e:c7:1e:0d:62:92:5f:e5: 50:6b:5b:65:1c:fc:04:f5:05:a2:21:01:9c:6a:5f: 14:8c:c4:03:3d:cb:2b:8b:04:cc:1f:42:bf:5a:86: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CB:97:CB:C8:FC:2E:84:E4:19:36:E4:84:C3:69:1B:8C:FC:36:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.193.0/24 IPv6: 2620:49:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bd:5e:d0:fd:7e:7d:e7:a6:b1:9b:91:de:36:76:39:2b:b0: f1:76:29:d6:66:3f:8f:5f:92:66:d7:7e:a9:26:9b:86:dd:52: 7a:e8:16:48:6c:a6:0d:4f:bd:2e:5c:a9:fe:3f:24:8b:e5:46: 61:5b:42:b6:33:06:66:e6:f6:ee:d1:75:b3:e6:9e:4e:1a:59: c9:d6:a3:2c:53:fb:7f:af:e8:0b:5e:cd:ca:42:bd:05:ad:57: d2:4a:74:26:79:b4:11:9d:0d:f4:54:fb:35:2a:03:bc:57:9e: 26:2c:8e:f2:17:18:39:81:6e:26:c2:25:94:af:86:23:0b:80: bd:25:7f:55:b4:20:f2:72:0b:c8:a9:5a:fc:4e:87:89:4c:83: 7f:c7:6d:8d:64:f6:fe:9b:c8:99:b7:a1:14:14:30:20:cc:a2: 42:ad:e0:bc:df:33:d5:53:fd:2e:f4:00:e1:f0:93:cb:11:a2: 86:fd:84:4b:27:47:a0:6b:82:61:30:3d:ac:80:ba:cf:a3:34: 3e:88:7e:49:95:86:46:c5:fd:5c:df:9f:10:9c:1e:5f:7a:30: 5c:9d:85:98:79:62:3a:93:92:10:d9:93:73:9b:30:da:88:14: 8d:a6:35:aa:12:65:fa:7a:7d:f1:67:de:e4:c1:fe:27:7d:9d: a3:f9:29:41 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErC4QdDqMQjikdHNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODRjYTU1MGMtZTE2NC00ZmRkLWJlNjQtZmUyMjBmYzUxYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTQ/m1ReoVyGEkRKhEJ4cSYAeHJmTlmyclSk F2g+/6VX5S9H3FRQkVP4dWapuC/QIz3Mn6QEW1Fa+eyCZsSaDJ4IrLTSZwUux2L+ ohyiG1U0M8HbUQFNgWbzjFbSB2DUCd3IEKilVs2jn+GW7TXR5FKTF8O0K3qxg3Qb ynqj3832YhaM8PdT8f/PbNcPEBUmo3YX6aI6VkyyCyybfxLqc4dW5y/WATx9tgAg l5TscPCsZXwdcKINW46EF0Sm/5a0+pcL9Y/fR7ko+qYUJ3VMJJhnVHPSwoUDHsce DWKSX+VQa1tlHPwE9QWiIQGcal8UjMQDPcsriwTMH0K/WoZ/TwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFHLl8vI/C6E5Bk25ITDaRuM/DY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANr1e0P1+feemsZuR3jZ2OSuw8XYp1mY/ j1+SZtd+qSabht1SeugWSGymDU+9Llyp/j8ki+VGYVtCtjMGZub27tF1s+aeThpZ ydajLFP7f6/oC17NykK9Ba1X0kp0Jnm0EZ0N9FT7NSoDvFeeJiyO8hcYOYFuJsIl lK+GIwuAvSV/VbQg8nILyKla/E6HiUyDf8dtjWT2/pvImbehFBQwIMyiQq3gvN8z 1VP9LvQA4fCTyxGihv2ESydHoGuCYTA9rIC6z6M0Poh+SZWGRsX9XN+fEJweX3ow XJ2FmHliOpOSENmTc5sw2ogUjaY1qhJl+np98Wfe5MH+J32do/kpQQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:47 2025 by rpki-client