$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1155c666-f6b9-34d1-9bd3-cb132eafe585.roa File: 1155c666-f6b9-34d1-9bd3-cb132eafe585.roa (raw, json) Hash identifier: luzxfh3PCERamVFsb4yE4f4S22Q7LaWBuiaduDqGQAU= Subject key identifier: 96:A2:34:C6:E4:CE:44:85:7F:AA:DE:E8:63:0C:98:7B:D6:D6:81:47 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584AD7D129A5945EB6604A6176E0 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1155c666-f6b9-34d1-9bd3-cb132eafe585.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 397362 IP address blocks: 64.19.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:29:a5:94:5e:b6:60:4a:61:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=8a7f5bc1-29a4-4b5e-817e-db6e78ad1b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:a7:f7:e6:e8:f0:7f:6b:6a:a5:e3:3b:13: 2c:51:6d:7b:fe:fa:dd:64:f6:b2:5c:34:79:7a:52: e2:db:f5:df:4f:f3:1b:27:6a:85:be:9a:69:de:d7: 31:22:2b:9c:f6:85:98:de:60:05:e6:44:2d:2d:aa: 79:a4:e6:b8:64:cc:e7:42:1b:52:aa:11:db:87:da: 76:1b:84:4d:99:36:63:42:8a:ee:14:6d:1d:45:1e: d8:a2:e8:e4:d4:fc:8a:a0:89:11:a3:e2:03:26:d1: 59:51:37:e9:31:49:af:fb:2b:c5:63:60:60:48:7a: d4:b2:04:b9:f6:4b:fb:9b:6f:f9:c4:fc:75:4b:7a: e4:31:49:ee:24:27:4a:42:72:32:76:2d:10:f3:3f: e1:7a:fc:c1:28:0a:8b:6b:6a:b3:98:a2:79:5a:a3: 6b:c7:5e:5d:56:e3:aa:a6:a4:70:ca:b8:81:92:69: 0c:5c:e4:11:e8:63:79:c7:5e:e4:b1:e7:b2:7b:53: 20:b5:85:95:80:05:3e:e9:04:c0:bd:9e:c7:56:0d: 07:de:6b:9b:e6:88:40:5a:07:c8:e6:7c:27:99:93: fb:bb:fe:a7:ad:da:7d:e3:cd:ea:16:77:0b:93:48: aa:65:47:da:00:fa:10:ce:3b:35:7c:d6:22:f0:5d: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A2:34:C6:E4:CE:44:85:7F:AA:DE:E8:63:0C:98:7B:D6:D6:81:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1155c666-f6b9-34d1-9bd3-cb132eafe585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 64.19.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:85:e7:0e:80:cf:5a:ee:3e:08:c3:21:ea:36:2b:47:f8:f4: d0:2c:48:8e:81:cd:48:00:c4:b6:8d:85:30:cb:af:44:50:b7: fd:16:c5:66:cd:26:95:9b:06:68:0a:b4:61:ab:a1:47:86:2d: bc:23:31:1c:5d:3a:bb:5f:5c:6b:81:7e:a7:d9:5b:da:5d:36: fc:8d:bb:db:4e:53:33:81:14:1d:94:cd:17:ce:01:10:eb:8d: e9:c2:15:52:ae:d3:ca:5b:3e:c2:62:2d:5f:10:a8:17:b8:49: 44:48:74:f1:56:1d:1b:e3:95:90:ec:53:18:c0:3a:fb:70:23: 6d:c7:4e:24:05:eb:ad:85:ad:f7:c1:e1:a8:f8:fc:1a:84:7a: d4:dc:5b:3f:ee:de:da:15:cb:e5:e5:60:f3:0d:f5:20:20:25: 9e:bf:52:ca:a8:62:7f:20:a7:d2:b1:72:79:c7:cc:9b:a2:40: 50:df:66:3a:95:66:b0:25:dd:dd:85:0c:3b:d5:92:cc:86:22: 79:9a:35:25:fb:4a:e5:d8:14:86:59:34:b2:b4:75:66:cc:b6: 14:00:62:63:58:b9:7c:eb:49:13:b4:88:40:52:7a:a7:5c:e1: f4:b8:37:5e:d3:b9:65:75:ce:51:ae:b1:c3:cf:cb:59:09:5c: f2:23:32:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SmllF62YEphduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OGE3ZjViYzEtMjlhNC00YjVlLTgxN2UtZGI2ZTc4YWQxYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLen9+bo8H9raqXjOxMsUW17/vrdZPayXDR5 elLi2/XfT/MbJ2qFvppp3tcxIiuc9oWY3mAF5kQtLap5pOa4ZMznQhtSqhHbh9p2 G4RNmTZjQoruFG0dRR7Youjk1PyKoIkRo+IDJtFZUTfpMUmv+yvFY2BgSHrUsgS5 9kv7m2/5xPx1S3rkMUnuJCdKQnIydi0Q8z/hevzBKAqLa2qzmKJ5WqNrx15dVuOq pqRwyriBkmkMXOQR6GN5x17kseeye1MgtYWVgAU+6QTAvZ7HVg0H3mub5ohAWgfI 5nwnmZP7u/6nrdp9483qFncLk0iqZUfaAPoQzjs1fNYi8F3QjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaiNMbkzkSFf6re6GMMmHvW1oFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMTE1NWM2NjYtZjZiOS0z NGQxLTliZDMtY2IxMzJlYWZlNTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBNlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmF5w6Az1ruPgjDIeo2K0f49NAsSI6BzUgAxLaNhTDLr0RQt/0WxWbN JpWbBmgKtGGroUeGLbwjMRxdOrtfXGuBfqfZW9pdNvyNu9tOUzOBFB2UzRfOARDr jenCFVKu08pbPsJiLV8QqBe4SURIdPFWHRvjlZDsUxjAOvtwI23HTiQF662FrffB 4aj4/BqEetTcWz/u3toVy+XlYPMN9SAgJZ6/UsqoYn8gp9KxcnnHzJuiQFDfZjqV ZrAl3d2FDDvVksyGInmaNSX7SuXYFIZZNLK0dWbMthQAYmNYuXzrSRO0iEBSeqdc 4fS4N17TuWV1zlGuscPPy1kJXPIjMhc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:19:07 2025 by rpki-client