$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa File: 2176ae68-0f60-3e10-87db-4ff9df01701b.roa (raw, json) Hash identifier: jzZltrQvrbQudl6Z8owp6VAbZ0UL8VF1xpSr2Pr4SxQ= Subject key identifier: 13:16:22:C1:D3:6F:08:11:86:EC:E7:0D:31:48:63:61:A3:4A:DD:C4 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584AECC12C1A3CB4F869635DAA10 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 53828 IP address blocks: 64.237.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2c:1a:3c:b4:f8:69:63:5d:aa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d256f7cd-479f-411c-9f98-fc78587c6bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:01:a6:3e:08:f0:47:de:18:15:39:f1:43: 11:37:e0:70:72:aa:5c:82:a6:65:7c:92:5f:9b:ad: a4:f9:31:1c:93:a9:a7:36:22:8a:f9:05:81:e0:7b: 67:4e:23:a5:7b:87:e3:2b:0c:34:7f:18:29:28:bd: a9:7c:85:11:78:61:0e:69:f4:1f:bd:ab:b3:a2:cd: 1b:3b:8a:b2:be:ed:1f:06:20:92:be:5f:4a:5a:0d: 95:82:35:a8:46:83:ed:b7:a1:ab:90:ac:18:ce:8a: 6c:4a:a8:00:75:52:97:04:e1:64:82:f8:77:88:d5: aa:88:e3:86:8f:2a:c0:fd:c3:3f:03:76:10:0a:77: ef:0f:85:7e:a3:65:45:a7:d3:ba:0e:c3:50:be:37: 0e:38:31:bf:0a:5f:bd:a6:42:74:e1:5d:1f:fb:3a: 2c:cc:fc:24:6d:51:6f:2d:84:0e:4b:f8:a3:de:a3: a2:fd:9d:90:b9:5c:e2:32:64:c6:d8:f4:30:ed:3b: 60:bd:1e:0e:b7:f7:69:46:9d:35:16:fd:36:3e:38: 8c:77:c9:f5:65:77:4a:b5:5e:e3:93:16:1d:ed:7b: a7:61:3d:26:11:67:b9:dd:98:ec:f6:8c:a1:0b:06: e8:ea:1d:b3:87:b2:e9:64:d1:60:a8:7b:79:d8:5e: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:16:22:C1:D3:6F:08:11:86:EC:E7:0D:31:48:63:61:A3:4A:DD:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 64.237.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3d:5e:51:0f:4f:19:77:e2:0e:2a:6d:87:73:c2:a3:bd:28: 5c:4d:37:d2:c5:92:c2:63:71:c0:a7:68:fb:f7:fb:4f:2c:ae: f3:71:12:05:47:2c:c7:a8:be:ce:8f:63:84:f2:9e:d8:51:33: c9:fd:45:c6:3c:ba:68:e8:2d:1d:25:35:18:bd:83:66:af:b6: 9a:52:c5:59:65:f9:b9:32:99:48:a4:66:1b:37:1b:a7:d0:56: 67:39:6f:19:ba:d1:32:4d:9d:41:1b:90:c4:a8:cb:bb:c1:b9: fa:e7:87:40:d4:89:f3:61:66:ad:9f:13:8e:18:81:9d:5b:9c: 27:c3:66:75:05:50:9c:f5:78:1f:b2:73:96:4d:75:fd:bd:2e: c4:86:07:ce:27:8b:a2:cd:24:de:67:f7:d3:73:08:dd:99:99: b9:6c:9e:2d:de:a2:da:45:93:18:6f:86:48:a0:8a:9d:b8:7c: c7:42:2f:b3:6f:d8:9c:57:0d:1e:e2:c7:18:28:12:e1:16:cc: 75:da:37:39:87:dc:0b:e1:1c:c1:a4:e9:d1:da:ab:45:8a:4e: c8:9d:79:54:4a:1d:d9:f2:88:0c:0b:6f:30:bb:c6:4d:a3:0a: ad:a5:25:ba:2e:c0:5a:51:c5:a5:cd:fe:c2:93:57:22:30:4b: a7:92:e7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSwaPLT4aWNdqhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDI1NmY3Y2QtNDc5Zi00MTFjLTlmOTgtZmM3ODU4N2M2YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpkBpj4I8EfeGBU58UMRN+BwcqpcgqZlfJJf m62k+TEck6mnNiKK+QWB4HtnTiOle4fjKww0fxgpKL2pfIUReGEOafQfvauzos0b O4qyvu0fBiCSvl9KWg2VgjWoRoPtt6GrkKwYzopsSqgAdVKXBOFkgvh3iNWqiOOG jyrA/cM/A3YQCnfvD4V+o2VFp9O6DsNQvjcOODG/Cl+9pkJ04V0f+zoszPwkbVFv LYQOS/ij3qOi/Z2QuVziMmTG2PQw7TtgvR4Ot/dpRp01Fv02PjiMd8n1ZXdKtV7j kxYd7XunYT0mEWe53Zjs9oyhCwbo6h2zh7LpZNFgqHt52F6uVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMWIsHTbwgRhuznDTFIY2GjSt3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvMjE3NmFlNjgtMGY2MC0z ZTEwLTg3ZGItNGZmOWRmMDE3MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQO1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg9XlEPTxl34g4qbYdzwqO9KFxNN9LFksJjccCnaPv3+08srvNxEgVH LMeovs6PY4TynthRM8n9RcY8umjoLR0lNRi9g2avtppSxVll+bkymUikZhs3G6fQ Vmc5bxm60TJNnUEbkMSoy7vBufrnh0DUifNhZq2fE44YgZ1bnCfDZnUFUJz1eB+y c5ZNdf29LsSGB84ni6LNJN5n99NzCN2Zmblsni3eotpFkxhvhkigip24fMdCL7Nv 2JxXDR7ixxgoEuEWzHXaNzmH3AvhHMGk6dHaq0WKTsideVRKHdnyiAwLbzC7xk2j Cq2lJbouwFpRxaXN/sKTVyIwS6eS5x8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:35:32 2025 by rpki-client