$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa File: c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa (raw, json) Hash identifier: DM3JxlCCZPUZttVi7/vBVH5m0F9DVBCopG+cUMBa5Q4= Subject key identifier: 86:D9:CE:27:34:AE:E6:54:90:60:FC:4F:40:CB:A6:D9:1E:C2:C5:36 Certificate issuer: /CN=ac717083-6970-4d32-8573-0bfa89700c9e Certificate serial: 010D0C9F4328584AE46122CD34C5FE938FBEDF00 Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 802 IP address blocks: 198.96.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:22:cd:34:c5:fe:93:8f:be:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=773f5728-d509-45df-a4dc-7fd244be2ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1a:98:1f:ab:e7:26:91:f5:91:32:ce:7b:6a: b4:8e:39:dd:7f:b1:ca:56:5c:70:55:b3:b3:13:86: 28:0a:4b:c6:09:33:79:26:2d:17:52:a0:a7:0f:a7: b5:ef:dd:de:ae:7a:2b:f6:8a:9e:9d:04:be:de:53: 95:06:6e:9c:93:e9:af:d2:36:7d:c4:61:5c:2f:bb: a6:bf:0a:f0:93:56:88:85:9d:8c:e3:9c:98:bb:5b: 5b:d6:54:56:1e:72:4e:8a:3e:b3:67:83:9c:a1:4e: 96:eb:2d:86:57:ef:f5:59:a1:3e:97:02:b8:30:60: 30:30:d1:0d:82:79:7d:94:80:b0:95:64:e5:68:c9: 94:09:3f:88:8a:18:18:51:0c:c3:1c:c6:57:e0:e0: 7b:4f:64:0f:c9:58:f6:ef:2c:41:72:72:b8:ab:09: 4d:b8:62:60:bd:ac:d6:eb:16:5d:b8:e3:69:b6:37: fe:8c:16:f1:fa:a4:da:db:19:c9:63:81:32:08:f8: 0c:f1:32:a7:00:49:03:8d:49:4d:dd:21:b9:b7:86: dd:26:65:74:42:7c:04:5c:71:8d:70:18:5a:c7:2a: bc:0b:b0:58:5e:3d:e9:29:08:38:6f:47:42:7c:8a: 24:0e:1f:22:13:80:bf:d4:5e:64:98:d1:60:50:ed: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:CE:27:34:AE:E6:54:90:60:FC:4F:40:CB:A6:D9:1E:C2:C5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl X509v3 Authority Key Identifier: keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer sbgp-ipAddrBlock: critical IPv4: 198.96.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:64:9b:e7:b6:bb:8f:ea:1d:88:34:75:86:a0:76:1b:3b:a4: 7f:ee:91:c1:9a:bb:51:72:e5:9a:6d:b3:65:4d:6e:d0:fd:e6: 67:8c:9b:58:a4:d0:6d:65:2d:7a:a7:a2:1a:04:d6:3d:da:31: d0:f8:25:f6:a7:81:5d:28:5f:b5:dd:57:51:06:dc:5a:09:9e: 63:19:8e:9c:89:4d:f1:ba:9f:f0:ca:90:f2:c0:0f:09:6b:3a: fa:8c:51:58:ec:ad:a6:5d:d5:70:04:19:96:a9:18:7a:8b:86: 14:0f:d7:9b:7a:6e:d4:26:e8:94:fa:c3:bc:65:ec:98:72:01: 08:8b:f1:85:63:6c:1d:d7:86:91:ac:5c:df:8b:51:d3:a9:29: bd:37:8f:17:5b:ab:74:5f:4b:43:69:ee:7a:37:50:be:51:32: 54:66:e9:4d:05:e9:e6:e5:d9:8d:5a:90:47:cf:52:60:1f:7b: bf:48:1d:2b:05:65:a4:6f:72:7f:b8:03:00:cb:0d:86:ae:83: a0:bc:8d:ae:71:77:c0:1a:4a:2c:9d:22:10:b3:9f:07:27:05: 2e:5c:05:21:45:63:34:c7:17:6a:88:9c:e4:ae:b6:7d:e4:ef: 82:d8:c5:4e:dc:d8:cb:d5:57:65:c0:45:2e:06:99:3d:e1:63: dd:af:43:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSLNNMX+k4++3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAw YzllMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NzczZjU3MjgtZDUwOS00NWRmLWE0ZGMtN2ZkMjQ0YmUyY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxqYH6vnJpH1kTLOe2q0jjndf7HKVlxwVbOz E4YoCkvGCTN5Ji0XUqCnD6e1793ernor9oqenQS+3lOVBm6ck+mv0jZ9xGFcL7um vwrwk1aIhZ2M45yYu1tb1lRWHnJOij6zZ4OcoU6W6y2GV+/1WaE+lwK4MGAwMNEN gnl9lICwlWTlaMmUCT+IihgYUQzDHMZX4OB7T2QPyVj27yxBcnK4qwlNuGJgvazW 6xZduONptjf+jBbx+qTa2xnJY4EyCPgM8TKnAEkDjUlN3SG5t4bdJmV0QnwEXHGN cBhaxyq8C7BYXj3pKQg4b0dCfIokDh8iE4C/1F5kmNFgUO0l4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbZzic0ruZUkGD8T0DLptkewsU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcx NzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvYzNmOTZmMmMtNTJmYi0z NGEzLWJhZWQtY2I3Y2Q5MTNlZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM3MTcwODMtNjk3MC00ZDMyLTg1 NzMtMGJmYTg5NzAwYzllL2FjNzE3MDgzLTY5NzAtNGQzMi04NTczLTBiZmE4OTcw MGM5ZS5jcmwwHwYDVR0jBBgwFoAUIF+z6njl6UcKxVau6vVt4D2e/a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZh ODk3MDBjOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBkm+e2u4/qHYg0dYagdhs7pH/ukcGau1Fy5Zpts2VNbtD95meMm1ik 0G1lLXqnohoE1j3aMdD4JfangV0oX7XdV1EG3FoJnmMZjpyJTfG6n/DKkPLADwlr OvqMUVjsraZd1XAEGZapGHqLhhQP15t6btQm6JT6w7xl7JhyAQiL8YVjbB3XhpGs XN+LUdOpKb03jxdbq3RfS0Np7no3UL5RMlRm6U0F6ebl2Y1akEfPUmAfe79IHSsF ZaRvcn+4AwDLDYaug6C8ja5xd8AaSiydIhCznwcnBS5cBSFFYzTHF2qInOSutn3k 74LYxU7c2MvVV2XARS4GmT3hY92vQws= -----END CERTIFICATE-----Generated at Sun Aug 24 07:37:47 2025 by rpki-client