$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cf613cf3-64d9-3d3d-bac2-3c17cd1a9d26.roa File: cf613cf3-64d9-3d3d-bac2-3c17cd1a9d26.roa (raw, json) Hash identifier: /7rqlneISdT2r+HoDiJUFM7t88AD3nzH+0Vj4hJq+d0= Subject key identifier: 55:E4:DF:07:3E:F5:B5:48:3C:F2:94:65:80:60:DD:42:32:71:9A:52 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584AE8912FC14F34941A154CDCC0 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cf613cf3-64d9-3d3d-bac2-3c17cd1a9d26.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 216414 IP address blocks: 64.40.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2f:c1:4f:34:94:1a:15:4c:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=60b5f4fd-ffab-49e8-8c59-b7b6bd788935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:0e:38:66:f4:f9:70:90:35:de:0d:63:8e: 2a:7b:8e:6d:de:38:9b:b0:04:88:50:09:56:09:93: 62:7d:44:93:3d:87:1f:d9:3d:48:b5:3c:89:0c:64: ca:c2:84:b6:1a:76:0c:dd:d4:69:d3:78:c2:90:bb: 60:90:bb:ff:49:fa:0f:12:41:3f:2f:58:14:31:af: 16:65:f0:df:b1:11:e4:1f:29:c3:01:57:12:d8:0a: d1:cd:9a:7e:c4:fb:53:69:bd:4c:8b:3b:2d:4e:76: 78:61:d4:c2:ee:c2:b9:49:f2:4f:99:11:c0:31:ce: 6a:05:82:92:64:5b:6c:4a:8d:44:11:3b:d7:30:23: c9:65:ae:02:f5:56:f7:11:ca:50:fc:74:f9:c4:29: fc:81:aa:3d:bb:5c:d7:49:63:30:c7:e3:e2:6d:79: 11:01:f8:b2:bc:25:6c:99:9d:b7:91:6e:1a:ff:99: dc:c8:68:2a:7e:48:08:35:fb:5d:b4:57:73:7b:21: 5e:61:58:c6:32:9c:c2:88:4a:83:59:aa:13:3b:50: 1b:89:1f:1d:f8:0d:be:46:3d:b0:aa:ca:94:49:2a: 24:00:0c:b3:65:53:52:c5:31:fd:a9:d8:5f:15:fc: 53:6a:16:73:3f:ec:78:e7:0e:b4:94:75:3c:56:81: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E4:DF:07:3E:F5:B5:48:3C:F2:94:65:80:60:DD:42:32:71:9A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cf613cf3-64d9-3d3d-bac2-3c17cd1a9d26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a2:61:4c:0d:b8:0b:ac:2d:b0:1f:4d:6e:e0:21:a7:87:ae: 24:e2:6e:b1:28:57:08:f4:66:4f:65:52:d2:48:4f:9f:d5:8f: 22:8f:ad:58:0f:f0:5a:ec:ce:a1:5b:80:59:7d:c9:9a:c9:6d: a4:61:7d:cc:75:56:27:ca:ee:62:bd:6a:a2:70:39:70:84:a7: 9f:fa:64:6f:c9:17:90:50:dd:8e:e6:0f:a4:8b:fa:08:16:20: dd:95:d0:a5:07:ce:6f:49:de:69:89:f9:08:eb:b4:92:b8:8e: d8:f9:51:6f:8c:82:2c:d3:4f:b8:d7:02:0f:9b:2c:b3:2f:50: 46:3b:52:5a:b4:de:d8:c9:3d:4e:02:24:4b:29:8d:01:05:9c: c5:bf:5e:34:98:60:56:eb:f7:c0:ff:60:78:87:4a:5a:a4:f9: a5:6a:34:81:21:90:d3:c5:89:d7:a6:d3:7c:1c:4d:53:55:bc: 0d:3b:24:5e:72:01:56:6a:69:a8:6a:d4:64:52:cb:19:2f:56: 4b:de:99:b7:fb:1d:da:4d:41:7c:1c:af:c7:c7:e8:88:b6:9e: 4f:39:8f:e0:79:b8:39:93:48:49:ea:6f:8a:d1:19:48:5f:34: 2a:3f:ca:42:34:7f:a7:39:b5:08:d5:ba:86:d6:87:28:43:86: 2a:99:be:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS/BTzSUGhVM3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NjBiNWY0ZmQtZmZhYi00OWU4LThjNTktYjdiNmJkNzg4OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MgOOGb0+XCQNd4NY44qe45t3jibsASIUAlW CZNifUSTPYcf2T1ItTyJDGTKwoS2GnYM3dRp03jCkLtgkLv/SfoPEkE/L1gUMa8W ZfDfsRHkHynDAVcS2ArRzZp+xPtTab1MizstTnZ4YdTC7sK5SfJPmRHAMc5qBYKS ZFtsSo1EETvXMCPJZa4C9Vb3EcpQ/HT5xCn8gao9u1zXSWMwx+PibXkRAfiyvCVs mZ23kW4a/5ncyGgqfkgINftdtFdzeyFeYVjGMpzCiEqDWaoTO1AbiR8d+A2+Rj2w qsqUSSokAAyzZVNSxTH9qdhfFfxTahZzP+x45w60lHU8VoFaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXk3wc+9bVIPPKUZYBg3UIycZpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvY2Y2MTNjZjMtNjRkOS0z ZDNkLWJhYzItM2MxN2NkMWE5ZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWiYUwNuAusLbAfTW7gIaeHriTibrEoVwj0Zk9lUtJIT5/VjyKPrVgP 8FrszqFbgFl9yZrJbaRhfcx1VifK7mK9aqJwOXCEp5/6ZG/JF5BQ3Y7mD6SL+ggW IN2V0KUHzm9J3mmJ+QjrtJK4jtj5UW+MgizTT7jXAg+bLLMvUEY7Ulq03tjJPU4C JEspjQEFnMW/XjSYYFbr98D/YHiHSlqk+aVqNIEhkNPFidem03wcTVNVvA07JF5y AVZqaahq1GRSyxkvVkvembf7HdpNQXwcr8fH6Ii2nk85j+B5uDmTSEnqb4rRGUhf NCo/ykI0f6c5tQjVuobWhyhDhiqZvrI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:44 2025 by rpki-client