$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa File: cc846770-6f1c-3121-a301-e24a6d92d8ce.roa (raw, json) Hash identifier: ldfhrf/H0B+BIt0CU4xnoyyGHO+PTkgAY64iDrL7pyE= Subject key identifier: 5D:56:A6:5F:91:CE:51:65:C3:3B:6B:F2:B5:B1:A0:21:DD:D1:84:68 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584ADECBB4612808C7255F8C9900 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 6142 IP address blocks: 64.39.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b4:61:28:08:c7:25:5f:8c:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=87853bb2-43be-4a8e-bda5-f78cbc920d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:a2:be:18:12:d6:78:b4:01:cd:fd:ef:d0: a4:ac:96:77:1a:6f:43:44:69:da:9c:79:a2:1c:74: 51:58:14:d7:df:52:78:31:53:00:f4:5c:53:10:72: e5:44:ad:74:92:b8:d1:44:28:74:1e:01:71:78:dc: 6d:ee:3b:4b:46:44:38:18:94:1b:96:bb:71:ce:9c: 79:48:1c:b0:6a:5d:5a:93:06:37:83:1c:a0:d9:6f: a6:97:ba:12:4e:25:a4:3e:13:f8:21:85:00:8d:02: 8d:e4:14:4e:9d:4b:35:0c:51:53:a2:69:30:47:a7: a3:3f:20:3d:b1:54:1b:0c:71:5d:5c:70:9b:87:23: 15:eb:45:06:1a:dd:f2:57:01:11:a6:ce:c2:a7:16: 0b:36:7d:59:d5:de:80:0d:c7:27:87:1c:60:3a:c9: 1e:f0:5e:3c:c5:f4:61:0c:37:9f:b8:a2:ad:cc:f4: 23:40:55:93:3c:5c:72:54:af:d0:cc:64:44:ec:ba: 21:ee:37:74:8a:2d:f5:67:67:43:3d:81:99:a8:bf: f9:e3:80:4b:57:88:03:75:5b:66:d7:1f:99:ec:a0: 37:85:77:a5:4f:2b:19:98:a8:48:ea:90:94:a0:84: 00:12:cb:7f:18:e1:b0:f6:5a:53:84:69:43:0f:bf: fa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:56:A6:5F:91:CE:51:65:C3:3B:6B:F2:B5:B1:A0:21:DD:D1:84:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv4: 64.39.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0c:c5:af:ad:25:7a:5c:f5:f0:91:a9:e5:4f:ba:02:e7:e7: c0:ce:43:99:a5:9e:3c:f8:aa:69:84:8a:97:aa:6b:50:b0:21: 17:0b:2d:6e:1b:2b:5b:93:98:16:42:ca:46:5d:73:ee:41:a3: a9:22:f2:e7:d1:de:bd:fb:1f:f0:25:7c:90:23:96:4b:e1:b4: b2:5a:92:df:bb:e4:39:45:02:a0:f7:df:de:a8:a3:4f:f4:6e: b3:54:c8:04:57:cc:92:ca:a0:bf:b2:4c:c9:2f:7a:c3:73:8a: 03:64:03:cc:a1:63:ec:60:f2:66:5d:df:18:02:b9:9f:2e:d3: 59:c3:42:69:b0:b2:a9:42:1e:ef:9f:b4:b1:27:03:95:7a:59: 7b:6e:17:3b:18:2b:e8:71:ef:ea:65:03:64:cd:3e:8d:3a:50: 50:5a:73:92:74:84:fe:9c:3f:97:41:c4:2a:f3:e7:ec:09:2e: be:cc:f5:f8:55:61:6a:6f:3b:be:14:72:1a:f0:c8:ec:23:e6: 34:a9:a6:ff:91:6c:01:89:33:28:64:93:e3:5f:bb:e2:ba:11: e4:71:9d:c2:6c:54:c5:07:ef:20:01:34:c9:5f:eb:c0:bb:7f: 42:f6:04:d3:1a:f4:89:29:ef:85:8a:96:0d:52:9f:6d:29:f3: 3f:2a:2a:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7RhKAjHJV+MmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ODc4NTNiYjItNDNiZS00YThlLWJkYTUtZjc4Y2JjOTIwZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGmivhgS1ni0Ac3979CkrJZ3Gm9DRGnanHmi HHRRWBTX31J4MVMA9FxTEHLlRK10krjRRCh0HgFxeNxt7jtLRkQ4GJQblrtxzpx5 SBywal1akwY3gxyg2W+ml7oSTiWkPhP4IYUAjQKN5BROnUs1DFFTomkwR6ejPyA9 sVQbDHFdXHCbhyMV60UGGt3yVwERps7CpxYLNn1Z1d6ADccnhxxgOske8F48xfRh DDefuKKtzPQjQFWTPFxyVK/QzGRE7Loh7jd0ii31Z2dDPYGZqL/544BLV4gDdVtm 1x+Z7KA3hXelTysZmKhI6pCUoIQAEst/GOGw9lpThGlDD7/6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1Wpl+RzlFlwztr8rWxoCHd0YRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvY2M4NDY3NzAtNmYxYy0z MTIxLWEzMDEtZTI0YTZkOTJkOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCdjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcMxa+tJXpc9fCRqeVPugLn58DOQ5mlnjz4qmmEipeqa1CwIRcLLW4b K1uTmBZCykZdc+5Bo6ki8ufR3r37H/AlfJAjlkvhtLJakt+75DlFAqD3396oo0/0 brNUyARXzJLKoL+yTMkvesNzigNkA8yhY+xg8mZd3xgCuZ8u01nDQmmwsqlCHu+f tLEnA5V6WXtuFzsYK+hx7+plA2TNPo06UFBac5J0hP6cP5dBxCrz5+wJLr7M9fhV YWpvO74UchrwyOwj5jSppv+RbAGJMyhkk+Nfu+K6EeRxncJsVMUH7yABNMlf68C7 f0L2BNMa9Ikp74WKlg1Sn20p8z8qKik= -----END CERTIFICATE-----Generated at Sun Aug 24 07:50:57 2025 by rpki-client