$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa File: a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa (raw, json) Hash identifier: Pa9/HnEHxZJRo5pivBsJ2HqK50WKAL2r+8nCBczIlV4= Subject key identifier: 2C:D2:66:8A:79:EF:CC:B0:11:F9:C4:BC:19:75:EF:94:E8:50:17:EB Certificate issuer: /CN=692aac29-6d3b-4bdf-9238-da449246d5ab Certificate serial: 010D0C9F4328584AD7D129F99844DA99C37C6860 Authority key identifier: EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 5650 IP address blocks: 64.40.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:29:f9:98:44:da:99:c3:7c:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692aac29-6d3b-4bdf-9238-da449246d5ab Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=8c15ff7d-689b-45b0-864a-f310dca0844e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:1a:fd:33:b0:6f:38:c5:6a:56:2f:6d:c2: 60:8f:d9:df:62:1d:9b:a5:3f:96:34:11:6e:75:ff: dd:07:3b:1b:27:64:98:e0:08:e7:15:fa:c2:83:39: ca:fd:35:85:fb:bc:2a:cd:4c:2e:d8:3a:6b:cf:28: 89:6d:2d:24:d7:65:a6:a0:4e:28:e0:3f:78:8d:be: 47:7b:0f:2f:0d:29:76:be:81:ca:be:77:28:32:b3: 13:31:a9:be:b7:a5:14:70:0f:e7:ef:e8:da:bd:41: 98:51:4c:64:14:91:9f:f0:5d:06:3a:cd:ff:cb:5d: 03:07:cf:2c:c8:41:6c:b4:37:37:cc:97:40:f8:47: 5b:91:e2:3b:01:50:65:69:c3:31:0d:09:7c:09:c0: 8d:66:8a:e5:c0:6a:db:43:ae:2e:7a:9b:c0:11:f7: 80:8c:e8:b2:d3:91:ae:93:c3:4f:b3:e8:8e:7a:16: e5:44:20:56:a9:d5:04:d5:92:20:1a:db:11:a0:67: 9a:ec:f6:f8:20:5c:40:2b:d0:cc:bb:b2:65:d5:cd: 74:b4:49:73:2a:71:1d:be:76:74:46:17:d4:bf:51: 05:05:0a:68:bb:d2:6d:90:22:b9:0c:99:86:bc:09: 42:bb:db:8d:6b:3b:20:65:f1:65:de:9c:95:9b:35: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D2:66:8A:79:EF:CC:B0:11:F9:C4:BC:19:75:EF:94:E8:50:17:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.crl X509v3 Authority Key Identifier: keyid:EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer sbgp-ipAddrBlock: critical IPv4: 64.40.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:af:27:ed:70:98:15:8a:a9:0a:b7:9a:d1:95:81:cc:53:92: e5:a2:75:ad:80:e6:5d:b3:80:51:d0:82:9c:9f:2a:da:4e:09: 3c:eb:a6:7f:58:74:47:e5:cf:8f:a7:ce:0d:58:fa:c4:a4:c7: 2b:85:9f:bc:77:52:9a:a2:f5:39:a6:06:5e:4f:ac:76:07:18: bb:fe:94:4b:cd:d4:c6:a3:40:1e:95:75:f7:19:85:ab:6a:f0: 01:24:3c:ae:9b:88:d3:a2:5b:ae:cd:23:f4:56:12:43:c8:f4: 00:28:a3:4d:a7:09:a0:c8:1d:22:ae:a0:b5:7a:fd:ff:a7:dc: fc:95:22:60:a5:e3:2e:e1:ad:50:a9:94:b0:1b:b2:e4:bb:d8: 71:d2:71:4c:bb:9b:f9:a9:b2:5e:57:f0:ce:f8:63:0c:33:58: f6:d9:03:68:3c:3c:4a:52:58:43:bd:00:10:3a:c4:20:60:ef: b9:e1:f1:8c:19:98:82:45:a3:96:c8:4e:e7:c1:d9:d7:06:d2: 74:01:be:cc:a4:a8:6b:32:cf:68:fa:ba:b9:b6:6e:9d:88:9e: 6e:0b:7e:c5:c0:ae:ed:8f:b9:f2:15:9e:98:a6:a6:98:87:db: af:27:ae:fb:3e:a6:dc:01:fc:87:ec:d6:01:dc:05:54:36:d1: 1d:6f:13:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Sn5mETamcN8aGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkyYWFjMjktNmQzYi00YmRmLTkyMzgtZGE0NDkyNDZk NWFiMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OGMxNWZmN2QtNjg5Yi00NWIwLTg2NGEtZjMxMGRjYTA4NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBMa/TOwbzjFalYvbcJgj9nfYh2bpT+WNBFu df/dBzsbJ2SY4AjnFfrCgznK/TWF+7wqzUwu2DprzyiJbS0k12WmoE4o4D94jb5H ew8vDSl2voHKvncoMrMTMam+t6UUcA/n7+javUGYUUxkFJGf8F0GOs3/y10DB88s yEFstDc3zJdA+EdbkeI7AVBlacMxDQl8CcCNZorlwGrbQ64uepvAEfeAjOiy05Gu k8NPs+iOehblRCBWqdUE1ZIgGtsRoGea7Pb4IFxAK9DMu7Jl1c10tElzKnEdvnZ0 RhfUv1EFBQpou9JtkCK5DJmGvAlCu9uNazsgZfFl3pyVmzVdNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzSZop578ywEfnEvBl175ToUBfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTJh YWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0OTI0NmQ1YWIvYThjMmVlMmItMTBkYS0z NTM5LThkMmItYWJhYmUzMThkN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjkyYWFjMjktNmQzYi00YmRmLTky MzgtZGE0NDkyNDZkNWFiLzY5MmFhYzI5LTZkM2ItNGJkZi05MjM4LWRhNDQ5MjQ2 ZDVhYi5jcmwwHwYDVR0jBBgwFoAU6lYQMl9nDWvUE9hOYlkmtb9JiOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82OTJhYWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0 OTI0NmQ1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJavJ+1wmBWKqQq3mtGVgcxTkuWida2A5l2zgFHQgpyfKtpOCTzrpn9Y dEflz4+nzg1Y+sSkxyuFn7x3Upqi9TmmBl5PrHYHGLv+lEvN1MajQB6VdfcZhatq 8AEkPK6biNOiW67NI/RWEkPI9AAoo02nCaDIHSKuoLV6/f+n3PyVImCl4y7hrVCp lLAbsuS72HHScUy7m/mpsl5X8M74YwwzWPbZA2g8PEpSWEO9ABA6xCBg77nh8YwZ mIJFo5bITufB2dcG0nQBvsykqGsyz2j6urm2bp2Inm4LfsXAru2PufIVnpimppiH 268nrvs+ptwB/Ifs1gHcBVQ20R1vE/s= -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:12 2025 by rpki-client