$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa File: aed34a51-5a96-3ead-b62b-a874c42008d6.roa (raw, json) Hash identifier: Md6u+0WZWcTr9teCibhjtnYP3Q9tViL3EW45FNlaH6A= Subject key identifier: C1:7E:BE:B7:EE:35:32:E5:B7:54:D3:3E:0A:9D:87:FF:4E:A5:53:33 Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a Certificate serial: 010D0C9F4328584ADD6685B73DAE0F7B1F910DFE Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 64.42.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:85:b7:3d:ae:0f:7b:1f:91:0d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=a3f591cb-ea3e-41ee-aae1-25277b9007a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:19:b8:61:23:fa:86:0e:da:15:55:83:db: 4b:23:3b:1e:29:1f:37:a7:9d:d4:2a:e3:5c:cd:ba: 7e:18:98:73:55:ae:c1:30:94:cf:9a:93:d4:38:d0: 02:59:7d:13:e3:98:e6:3d:73:ef:a1:25:47:29:6c: e1:9a:7a:3d:3f:fa:e4:16:53:3f:a6:08:84:24:ae: 13:b6:62:51:bd:60:cc:76:f5:35:49:3b:5b:35:d4: e5:b3:b4:90:97:70:ab:a3:5a:fe:3e:1a:33:b4:b2: b3:80:d2:02:0c:1f:6e:79:cd:24:9b:89:8a:d0:15: 80:e4:42:fb:47:71:d4:cf:60:f8:4c:db:9a:b2:92: db:bd:3a:80:c5:28:ac:a1:51:9a:f7:46:90:a5:ad: 9b:bf:83:89:72:87:fa:e9:64:60:af:04:08:60:8b: 1e:70:ef:1a:fc:76:91:78:e8:2c:03:68:ef:f6:01: 9a:65:b9:0d:24:42:98:61:d6:c3:d4:bb:8e:dd:1e: ed:6d:f8:b0:87:6e:e7:ba:47:2a:6f:02:3a:bd:68: 2f:7a:3d:76:e6:47:ea:83:15:18:71:df:64:e3:bd: 4e:92:90:7f:61:03:74:b6:4b:36:aa:f8:c6:16:b9: 79:9d:a5:69:2a:33:4e:c3:03:87:79:4f:21:ad:0d: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7E:BE:B7:EE:35:32:E5:B7:54:D3:3E:0A:9D:87:FF:4E:A5:53:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl X509v3 Authority Key Identifier: keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer sbgp-ipAddrBlock: critical IPv4: 64.42.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:bf:6e:98:19:cb:e8:dd:30:14:52:46:74:dd:d2:61:5f:d5: cc:fb:19:b0:dd:c8:c0:e2:35:64:9c:af:00:38:5e:22:28:73: 7c:28:b7:72:73:b2:64:76:9a:4f:cf:83:4e:8a:6d:11:3a:3a: 69:26:3b:93:a4:2d:25:50:35:6d:aa:73:c1:5c:ff:91:8a:c0: ab:7d:ad:e8:f3:bc:1d:32:45:d2:c9:0c:26:25:ff:49:20:04: 12:61:c7:dd:89:5c:a8:c4:83:6a:12:3a:32:62:70:86:08:91: 14:88:41:1c:cf:92:ed:8a:02:6a:d5:ae:71:0c:96:18:ab:a1: 22:f8:8e:3f:1d:ae:94:db:27:3d:b2:9d:f8:c9:76:21:7a:e6: 36:d1:98:bc:a9:34:4c:d1:ff:eb:85:6b:a3:67:7b:b2:f8:04: 84:4d:b8:b6:fe:1a:e4:fe:a0:47:58:58:15:3b:2c:8d:ee:5c: e4:7f:c2:dd:b4:95:fa:c9:75:65:0d:04:24:69:ca:3b:ee:a8: 88:bb:ca:64:08:bf:59:5b:dc:d8:bf:71:ac:1e:a1:f7:5b:cc: 3e:4f:3b:34:d1:40:98:3c:d6:39:12:87:2f:bf:98:7a:67:01: c6:39:30:39:99:44:1a:9b:50:94:3c:eb:5b:87:ad:b5:97:f0: 59:3f:0d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoW3Pa4Pex+RDf4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl ZDdhMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YTNmNTkxY2ItZWEzZS00MWVlLWFhZTEtMjUyNzdiOTAwN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEUZuGEj+oYO2hVVg9tLIzseKR83p53UKuNc zbp+GJhzVa7BMJTPmpPUONACWX0T45jmPXPvoSVHKWzhmno9P/rkFlM/pgiEJK4T tmJRvWDMdvU1STtbNdTls7SQl3Cro1r+PhoztLKzgNICDB9uec0km4mK0BWA5EL7 R3HUz2D4TNuaspLbvTqAxSisoVGa90aQpa2bv4OJcof66WRgrwQIYIsecO8a/HaR eOgsA2jv9gGaZbkNJEKYYdbD1LuO3R7tbfiwh27nukcqbwI6vWgvej125kfqgxUY cd9k471OkpB/YQN0tks2qvjGFrl5naVpKjNOwwOHeU8hrQ3rJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF+vrfuNTLlt1TTPgqdh/9OpVMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5 NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvYWVkMzRhNTEtNWE5Ni0z ZWFkLWI2MmItYTg3NGM0MjAwOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2 ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS/bpgZy+jdMBRSRnTd0mFf1cz7GbDdyMDiNWScrwA4XiIoc3wot3Jz smR2mk/Pg06KbRE6OmkmO5OkLSVQNW2qc8Fc/5GKwKt9rejzvB0yRdLJDCYl/0kg BBJhx92JXKjEg2oSOjJicIYIkRSIQRzPku2KAmrVrnEMlhiroSL4jj8drpTbJz2y nfjJdiF65jbRmLypNEzR/+uFa6Nne7L4BIRNuLb+GuT+oEdYWBU7LI3uXOR/wt20 lfrJdWUNBCRpyjvuqIi7ymQIv1lb3Ni/caweofdbzD5POzTRQJg81jkShy+/mHpn AcY5MDmZRBqbUJQ861uHrbWX8Fk/DXI= -----END CERTIFICATE-----Generated at Sat Aug 23 07:01:07 2025 by rpki-client