$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/270ac685-9ea2-3fa3-9aaa-9fe264da94b7.roa File: 270ac685-9ea2-3fa3-9aaa-9fe264da94b7.roa (raw, json) Hash identifier: K1aIk4z9QiT0B9x25TIUL2XKcAzUGStGTRcwK5wt/s8= Subject key identifier: 12:97:FF:F8:0C:F5:7B:97:8B:0E:22:2F:74:CF:84:E0:16:1C:F9:94 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584AD5F870C54CF27A9D63EB3600 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/270ac685-9ea2-3fa3-9aaa-9fe264da94b7.roa Signing time: Tue 12 Aug 2025 21:08:31 +0000 ROA not before: Tue 12 Aug 2025 21:08:31 +0000 ROA not after: Mon 10 Nov 2025 22:08:31 +0000 asID: 25198 IP address blocks: 64.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:f8:70:c5:4c:f2:7a:9d:63:eb:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Aug 12 21:08:31 2025 GMT Not After : Nov 10 22:08:31 2025 GMT Subject: CN=5fbce2b7-5152-4021-959a-4157d6111fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:d4:6f:2f:15:24:8f:2b:88:af:b8:58:b4: 3c:32:05:6c:e2:ff:06:59:84:9e:0b:28:39:2a:1d: 10:45:81:eb:51:b1:66:6b:2e:0c:b6:da:e5:89:67: f2:7f:b3:49:69:46:34:54:0d:8d:9a:24:e2:05:d7: bb:29:c6:9c:5e:c7:66:45:d7:3f:f0:cb:44:98:d7: e1:03:07:57:c6:80:b1:61:39:9e:df:3d:07:65:47: 54:89:85:1c:3b:0c:90:bc:c2:0d:3e:e7:3b:c3:23: d7:93:81:f3:eb:7d:f8:f0:31:46:ff:50:04:83:2a: 8d:68:a8:4d:08:5d:46:e9:1c:f2:6b:3a:4c:e3:92: 4a:26:73:3b:d2:32:1c:d7:2e:a5:62:35:47:8c:c9: 79:b2:3f:01:4e:25:89:bf:3c:bd:43:d4:1a:f0:4f: fb:12:ea:92:cf:35:ef:37:1b:1f:00:29:57:e2:c2: 2b:57:58:5b:3c:63:c9:fc:ff:8c:c6:98:d6:c4:db: fa:2c:8f:28:c9:78:02:54:24:e7:35:12:38:35:75: 01:dc:db:73:52:db:bc:c9:6b:85:1b:d4:b5:36:ef: 11:55:86:b7:14:c4:54:3c:a1:ec:05:00:e4:17:a6: a7:c0:c7:63:11:70:6f:8a:80:3b:54:56:ea:cc:d2: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:97:FF:F8:0C:F5:7B:97:8B:0E:22:2F:74:CF:84:E0:16:1C:F9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/270ac685-9ea2-3fa3-9aaa-9fe264da94b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2d:ed:40:f9:4b:20:b7:a9:0b:9e:fa:1a:63:a4:e1:ec:f9: f2:88:43:c2:d5:6c:43:25:df:06:f8:cf:55:96:1d:ce:dd:26: 72:a3:3a:f1:05:9f:e9:54:2b:51:b8:69:93:17:3d:02:11:e4: 52:dd:15:09:e1:de:89:5b:41:57:f2:b1:de:60:f9:9a:f1:cc: cb:da:ee:3a:2d:53:a3:b8:68:e3:6e:34:7d:6f:db:21:02:d7: 4f:64:dc:85:7f:07:e0:3a:04:55:5c:49:91:3a:75:8b:fe:e3: f0:0a:e1:ad:86:67:77:41:40:47:bb:22:ce:2f:75:00:d7:70: bd:ae:71:22:06:25:a8:ce:78:e2:83:05:8c:43:31:55:90:17: 13:e9:72:fd:99:cc:6a:c2:0b:57:75:65:30:cf:2c:d4:a2:3f: 28:84:bf:ab:c5:91:23:e7:65:dd:21:dd:44:1a:a4:34:99:87: 01:c0:f4:77:a5:de:cf:d6:bc:60:26:e9:da:0a:c8:c3:a5:b5: 97:b4:54:06:f0:e2:2f:46:86:f4:f5:a3:02:50:ea:74:b5:1d: 9e:59:c6:f7:ed:45:b0:c7:3f:df:e4:df:b6:d6:ad:2b:3d:be: af:e7:eb:f4:5d:2e:b0:2d:96:f8:cf:ad:61:58:95:d4:e6:01: 16:49:c4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErV+HDFTPJ6nWPrNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDgxMjIxMDgzMVoXDTI1MTExMDIyMDgzMVowLzEtMCsGA1UEAxMk NWZiY2UyYjctNTE1Mi00MDIxLTk1OWEtNDE1N2Q2MTExZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL7Uby8VJI8riK+4WLQ8MgVs4v8GWYSeCyg5 Kh0QRYHrUbFmay4MttrliWfyf7NJaUY0VA2NmiTiBde7KcacXsdmRdc/8MtEmNfh AwdXxoCxYTme3z0HZUdUiYUcOwyQvMINPuc7wyPXk4Hz63348DFG/1AEgyqNaKhN CF1G6RzyazpM45JKJnM70jIc1y6lYjVHjMl5sj8BTiWJvzy9Q9Qa8E/7EuqSzzXv NxsfAClX4sIrV1hbPGPJ/P+MxpjWxNv6LI8oyXgCVCTnNRI4NXUB3NtzUtu8yWuF G9S1Nu8RVYa3FMRUPKHsBQDkF6anwMdjEXBvioA7VFbqzNJnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKX//gM9XuXiw4iL3TPhOAWHPmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMjcwYWM2ODUtOWVhMi0z ZmEzLTlhYWEtOWZlMjY0ZGE5NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgt7UD5SyC3qQue+hpjpOHs+fKIQ8LVbEMl3wb4z1WWHc7dJnKjOvEF n+lUK1G4aZMXPQIR5FLdFQnh3olbQVfysd5g+ZrxzMva7jotU6O4aONuNH1v2yEC 109k3IV/B+A6BFVcSZE6dYv+4/AK4a2GZ3dBQEe7Is4vdQDXcL2ucSIGJajOeOKD BYxDMVWQFxPpcv2ZzGrCC1d1ZTDPLNSiPyiEv6vFkSPnZd0h3UQapDSZhwHA9Hel 3s/WvGAm6doKyMOltZe0VAbw4i9GhvT1owJQ6nS1HZ5ZxvftRbDHP9/k37bWrSs9 vq/n6/RdLrAtlvjPrWFYldTmARZJxFw= -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:51 2025 by rpki-client