$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa File: afdbac6f-debc-393d-952e-f803e27af2c1.roa (raw, json) Hash identifier: 4GWkh1SbDMAWVNgBxEjyUttoiEBfMEnQ8b254RkGvOw= Subject key identifier: 20:F2:07:75:BE:BE:F8:B9:83:E6:8B:82:04:E7:02:C1:40:B7:CF:05 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584AE8912B1D93F2A0B6424CD880 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 53828 IP address blocks: 64.191.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2b:1d:93:f2:a0:b6:42:4c:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=eb0a0e0d-f04d-4680-94f8-288f879893dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:ce:4b:b8:ff:dc:c8:2c:cb:52:5c:a4:db: 0f:33:6a:25:7d:17:03:e9:eb:d7:80:70:c3:1a:09: 69:91:ad:b2:26:a0:7d:33:3f:2a:03:63:16:ce:2a: 34:4f:de:3a:59:67:68:24:36:54:31:e9:0a:9e:3d: cc:9d:02:5c:72:dc:5e:37:f3:80:7c:ac:a1:1c:d3: 2e:d7:3f:74:75:ec:f0:ad:4b:33:3e:ba:a1:8d:b8: cd:31:29:b5:36:f4:6d:16:2d:ea:1a:55:d5:c5:8a: 55:a3:fe:b4:93:16:52:e4:7c:ad:84:8c:ab:47:44: d1:91:08:b7:b0:05:51:63:ba:d5:da:b0:26:01:88: 1c:81:81:ac:9d:e0:d9:70:b9:33:6b:90:f3:23:09: db:2d:42:45:7c:92:57:71:80:ae:12:7c:f5:97:31: 80:ee:96:87:40:8a:36:b6:58:d7:07:b4:ea:eb:bf: 4c:a9:4c:8c:5d:53:a4:56:6a:21:0e:7d:39:97:ca: b5:60:b6:66:31:26:b1:1b:96:67:6b:58:e1:be:f6: ed:71:42:eb:ec:87:de:31:f6:ef:fa:a1:8e:af:58: bc:d6:a6:ef:1a:59:28:ee:e2:df:c2:d6:20:44:c0: 72:46:b6:46:09:24:ef:09:86:1a:14:e0:45:0e:94: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F2:07:75:BE:BE:F8:B9:83:E6:8B:82:04:E7:02:C1:40:B7:CF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 64.191.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:28:2a:27:67:b8:a3:08:62:7e:67:61:fa:e0:7d:0b:0a:b9: 41:a3:b7:68:c0:52:c6:c8:1b:bf:b6:87:b6:51:50:b5:03:ba: c1:4c:8d:c3:ef:33:46:6c:42:4a:09:13:dc:0b:13:6c:07:8a: 07:de:14:a9:fe:41:27:a9:4f:df:2e:cd:04:36:6f:e7:b3:5b: 89:eb:b4:8f:16:75:84:e2:ba:21:9d:d5:da:5d:8f:74:13:5a: ef:72:14:c0:14:ef:55:07:49:07:03:10:cc:e4:81:58:8c:f7: 55:84:60:20:57:a6:60:3d:b8:79:79:a3:f6:ff:fc:e3:85:80: 9c:b9:1b:78:72:5a:35:04:9f:66:eb:e2:96:7c:05:a0:b0:15: 32:b0:c1:da:a4:5c:4f:6a:98:95:64:74:2d:ad:c6:ff:5a:85: 2b:ce:59:80:e2:3c:27:43:a9:28:d0:87:07:13:f2:4a:68:56: be:cb:4c:1b:f5:d8:ae:52:e1:8d:81:a4:e5:50:e9:39:69:a0: 6e:a4:da:91:35:bd:5e:3e:19:9e:65:e5:5e:16:c9:01:6f:96: 93:38:b1:cb:f4:7b:82:2f:64:35:8d:a5:9e:a8:37:30:86:85: d3:5c:91:02:35:11:84:62:3e:16:34:e7:3a:2b:fe:37:e5:24: 84:13:e3:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSsdk/KgtkJM2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZWIwYTBlMGQtZjA0ZC00NjgwLTk0ZjgtMjg4Zjg3OTg5M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2fOS7j/3Mgsy1JcpNsPM2olfRcD6evXgHDD Gglpka2yJqB9Mz8qA2MWzio0T946WWdoJDZUMekKnj3MnQJcctxeN/OAfKyhHNMu 1z90dezwrUszPrqhjbjNMSm1NvRtFi3qGlXVxYpVo/60kxZS5HythIyrR0TRkQi3 sAVRY7rV2rAmAYgcgYGsneDZcLkza5DzIwnbLUJFfJJXcYCuEnz1lzGA7paHQIo2 tljXB7Tq679MqUyMXVOkVmohDn05l8q1YLZmMSaxG5Zna1jhvvbtcULr7IfeMfbv +qGOr1i81qbvGlko7uLfwtYgRMByRrZGCSTvCYYaFOBFDpQenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDyB3W+vvi5g+aLggTnAsFAt88FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYWZkYmFjNmYtZGViYy0z OTNkLTk1MmUtZjgwM2UyN2FmMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQL9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACooKidnuKMIYn5nYfrgfQsKuUGjt2jAUsbIG7+2h7ZRULUDusFMjcPv M0ZsQkoJE9wLE2wHigfeFKn+QSepT98uzQQ2b+ezW4nrtI8WdYTiuiGd1dpdj3QT Wu9yFMAU71UHSQcDEMzkgViM91WEYCBXpmA9uHl5o/b//OOFgJy5G3hyWjUEn2br 4pZ8BaCwFTKwwdqkXE9qmJVkdC2txv9ahSvOWYDiPCdDqSjQhwcT8kpoVr7LTBv1 2K5S4Y2BpOVQ6TlpoG6k2pE1vV4+GZ5l5V4WyQFvlpM4scv0e4IvZDWNpZ6oNzCG hdNckQI1EYRiPhY05zor/jflJIQT434= -----END CERTIFICATE-----Generated at Sun Aug 24 05:36:21 2025 by rpki-client