$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa File: 65ef4bc4-564a-3e87-a343-8f86a487b13b.roa (raw, json) Hash identifier: YEhkTG7P8lEtRngWXAR7dNsSaiBDB9BfpJASi+PtlZk= Subject key identifier: 1B:08:8B:30:20:85:1E:51:33:8D:F4:3C:34:37:8F:C2:63:FA:29:47 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584ACF70FCEB2A7787ADBF201260 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 399122 IP address blocks: 64.130.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:fc:eb:2a:77:87:ad:bf:20:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=54b2cbf6-2982-4485-bd0b-0e53dd273d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:cc:68:bf:c7:2f:0a:1d:95:33:a0:b8:71: 94:dd:0b:ee:60:8b:af:1a:eb:c5:f3:df:00:82:ee: 84:17:01:7a:e7:85:c5:7d:68:b5:08:ac:9b:f9:cc: 07:72:6f:58:91:ae:ce:55:43:b5:58:4f:ca:4f:d0: bd:43:5d:35:eb:28:eb:98:e0:af:f8:81:21:2d:96: 92:f5:d2:c7:c1:9a:54:6d:2f:a9:f2:5a:38:a8:cf: 16:bf:e9:cf:c2:a1:f2:4b:f8:26:84:0b:f8:56:cf: 2d:52:ba:73:aa:4c:ba:e3:2a:a5:fe:92:1d:54:2b: 93:12:05:e4:50:75:53:af:d7:15:21:31:15:46:11: 92:c8:c5:7e:e6:07:43:af:81:86:c0:9a:c4:98:8d: de:08:e4:63:17:bf:28:d0:88:1a:d6:2e:f3:9e:5f: f4:d4:36:c3:8b:03:89:04:ef:8c:46:86:da:f5:ed: 27:a2:15:e3:6d:0c:46:7e:ea:43:79:ef:5d:ff:f5: c9:12:3d:df:fb:ae:49:06:2d:a8:90:09:00:0c:0d: 0d:86:f0:99:4f:56:c8:c2:d6:ec:1e:05:44:35:e1: f3:48:f3:82:85:79:16:39:1a:a3:35:9a:75:d7:a0: 87:e1:23:51:70:22:b2:44:5e:be:7b:fe:c6:da:15: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:08:8B:30:20:85:1E:51:33:8D:F4:3C:34:37:8F:C2:63:FA:29:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 64.130.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:20:be:a3:7a:7c:05:03:b0:1e:02:52:4c:cb:c4:91:8b:f8: c1:11:1b:92:f8:48:e6:60:19:1c:d5:a8:3f:8c:4d:fa:bd:05: 46:c6:ec:d9:65:e6:07:0a:92:0c:1b:7a:e7:32:95:ec:2f:e8: e9:59:c3:12:9c:c5:69:79:a1:67:85:ce:fe:80:7a:eb:c4:07: 86:e6:4b:bc:95:2a:a0:2f:d5:77:1d:44:05:ee:77:80:f4:a3: fd:69:77:72:b9:81:ef:c8:1a:de:80:ab:af:11:6e:80:80:a3: 50:2a:99:90:7c:20:96:88:07:50:cf:0a:f2:11:c8:b2:66:c7: 65:46:d5:be:60:e0:ee:67:77:47:14:8d:fd:e7:91:c6:7c:4b: 05:99:ad:6d:26:fc:6f:1b:9f:60:9c:93:21:72:98:4e:4c:1f: d1:83:5f:1c:d1:51:21:b5:95:cf:9e:34:76:39:1f:5c:8b:16: f9:a9:38:6b:13:15:91:d1:3c:0b:25:b1:c8:16:a0:51:35:fc: 9a:e5:fa:36:44:14:e6:84:cd:dc:9b:9b:14:1a:8b:c1:f0:36: 4a:95:a6:be:38:4c:a1:c2:32:93:27:2b:00:46:e6:19:43:96: 5d:34:61:d8:15:8b:e0:e6:ff:fc:84:83:07:96:c6:84:79:5f: 31:0b:69:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcPzrKneHrb8gEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NTRiMmNiZjYtMjk4Mi00NDg1LWJkMGItMGU1M2RkMjczZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5nMaL/HLwodlTOguHGU3QvuYIuvGuvF898A gu6EFwF654XFfWi1CKyb+cwHcm9Yka7OVUO1WE/KT9C9Q1016yjrmOCv+IEhLZaS 9dLHwZpUbS+p8lo4qM8Wv+nPwqHyS/gmhAv4Vs8tUrpzqky64yql/pIdVCuTEgXk UHVTr9cVITEVRhGSyMV+5gdDr4GGwJrEmI3eCORjF78o0Iga1i7znl/01DbDiwOJ BO+MRoba9e0nohXjbQxGfupDee9d//XJEj3f+65JBi2okAkADA0NhvCZT1bIwtbs HgVENeHzSPOChXkWORqjNZp116CH4SNRcCKyRF6+e/7G2hXuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsIizAghR5RM430PDQ3j8Jj+ilHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNjVlZjRiYzQtNTY0YS0z ZTg3LWEzNDMtOGY4NmE0ODdiMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4gvqN6fAUDsB4CUkzLxJGL+MERG5L4SOZgGRzVqD+MTfq9BUbG7Nll 5gcKkgwbeucylewv6OlZwxKcxWl5oWeFzv6AeuvEB4bmS7yVKqAv1XcdRAXud4D0 o/1pd3K5ge/IGt6Aq68RboCAo1AqmZB8IJaIB1DPCvIRyLJmx2VG1b5g4O5nd0cU jf3nkcZ8SwWZrW0m/G8bn2CckyFymE5MH9GDXxzRUSG1lc+eNHY5H1yLFvmpOGsT FZHRPAslscgWoFE1/Jrl+jZEFOaEzdybmxQai8HwNkqVpr44TKHCMpMnKwBG5hlD ll00YdgVi+Dm//yEgweWxoR5XzELaUg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:01:35 2025 by rpki-client