$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa File: ace46686-2760-3bbc-8069-6ec4c46c5107.roa (raw, json) Hash identifier: G5VoT9spT5nt0yTYIOECFERgiCysLyrCKKrQZ7qYs4o= Subject key identifier: 20:4B:0F:A5:F1:18:D1:58:F8:AA:85:D2:E9:4D:BE:24:C3:66:50:C0 Certificate issuer: /CN=64c0f0d2-36a3-4e64-b974-bfb8301baf21 Certificate serial: 010D0C9F4328584ACE0BAD8FD7550EE99A285480 Authority key identifier: 3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 3128 IP address blocks: 137.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ad:8f:d7:55:0e:e9:9a:28:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c0f0d2-36a3-4e64-b974-bfb8301baf21 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=2d5c607a-1cef-4dbc-b560-a05390f994c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:40:0e:8c:af:7e:d3:58:06:21:b7:e7:5a: 0d:c0:15:9e:e9:24:ce:cf:ee:16:9c:34:7a:1f:98: 70:4d:3e:2f:5f:44:56:2e:c8:2c:03:a5:e8:69:a6: 23:46:e9:5b:67:1b:55:cf:f5:29:da:41:30:73:ba: 99:24:8e:e2:74:13:44:c2:5d:c1:25:b1:78:36:a6: 63:77:88:a4:38:6a:0f:d5:c5:c1:49:10:23:5d:72: 8b:2f:2d:b5:4f:b1:d9:e2:f7:6b:59:5a:5e:6b:f3: f2:fc:f3:3f:63:1c:06:1d:c0:37:e4:65:92:29:e2: 59:7a:a4:7c:6f:5c:ee:05:9c:5d:bf:c5:05:5c:b5: ca:4b:e9:8b:06:62:a6:fe:b1:86:75:f9:a6:aa:33: f1:8d:13:b1:15:e9:5d:a7:9b:4b:14:32:35:fa:19: 1d:16:82:0d:05:cd:2e:54:f8:2e:1f:c5:47:9b:cc: ba:e4:20:02:aa:87:67:7f:4f:02:20:e1:f6:cb:51: ff:40:f6:46:cb:7c:b4:7c:d6:ab:25:34:43:bc:18: 8a:83:5e:b5:63:dc:aa:e8:00:f3:5c:2a:af:15:84: 0b:cd:28:01:59:47:be:30:d2:fc:eb:70:b5:f4:c0: a8:25:b4:e6:3f:ee:b0:df:fe:c3:2d:87:22:8d:16: ee:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4B:0F:A5:F1:18:D1:58:F8:AA:85:D2:E9:4D:BE:24:C3:66:50:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.crl X509v3 Authority Key Identifier: keyid:3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer sbgp-ipAddrBlock: critical IPv4: 137.81.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4b:c7:f3:fb:ab:15:d2:0f:0b:1d:24:5f:3e:1f:2e:3f:c1: 12:cc:7f:09:d1:14:9d:6a:b0:8e:97:7c:b4:56:d7:6e:df:01: 28:ea:16:d1:3e:b4:76:7e:7a:a3:e7:8b:df:95:92:5d:4a:6a: 5c:ab:09:f8:55:8e:6c:b5:31:76:48:e0:65:bd:b1:b6:a3:a9: 46:41:10:fb:48:41:6e:b4:f3:23:7b:7a:cb:7c:96:de:95:7a: 0c:3c:91:e1:db:3d:21:f5:d2:be:92:7e:63:2a:e1:85:e0:c4: a4:b6:99:97:2d:60:4a:46:cd:0a:2b:bd:48:64:e9:12:df:8f: ec:d7:3f:fc:72:ef:b5:ac:d1:09:98:ca:f8:a9:3d:d0:1e:af: 5b:1f:23:45:cf:53:0f:0a:78:7e:92:ad:59:69:4c:68:02:60: 94:41:69:b0:49:55:27:58:68:54:7d:78:4e:4a:03:a8:bb:02: 7a:db:6f:cb:2a:71:d7:b4:51:9e:47:f6:df:e7:37:02:39:83: 40:34:e2:3b:ef:3c:e8:51:1a:25:09:b8:10:4c:8f:e0:68:59: d8:f3:36:fa:3d:3e:48:53:5d:46:d6:7c:87:33:38:aa:4f:f0: d6:2b:e7:21:cc:f1:a3:f2:1c:82:80:c4:f6:88:f1:1d:42:b6: 0d:4e:d1:d9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErOC62P11UO6ZooVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRjMGYwZDItMzZhMy00ZTY0LWI5NzQtYmZiODMwMWJh ZjIxMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MmQ1YzYwN2EtMWNlZi00ZGJjLWI1NjAtYTA1MzkwZjk5NGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4xADoyvftNYBiG351oNwBWe6STOz+4WnDR6 H5hwTT4vX0RWLsgsA6XoaaYjRulbZxtVz/Up2kEwc7qZJI7idBNEwl3BJbF4NqZj d4ikOGoP1cXBSRAjXXKLLy21T7HZ4vdrWVpea/Py/PM/YxwGHcA35GWSKeJZeqR8 b1zuBZxdv8UFXLXKS+mLBmKm/rGGdfmmqjPxjROxFeldp5tLFDI1+hkdFoINBc0u VPguH8VHm8y65CACqodnf08CIOH2y1H/QPZGy3y0fNarJTRDvBiKg161Y9yq6ADz XCqvFYQLzSgBWUe+MNL863C19MCoJbTmP+6w3/7DLYcijRbubwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCBLD6XxGNFY+KqF0ulNviTDZlDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NGMw ZjBkMi0zNmEzLTRlNjQtYjk3NC1iZmI4MzAxYmFmMjEvYWNlNDY2ODYtMjc2MC0z YmJjLTgwNjktNmVjNGM0NmM1MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjRjMGYwZDItMzZhMy00ZTY0LWI5 NzQtYmZiODMwMWJhZjIxLzY0YzBmMGQyLTM2YTMtNGU2NC1iOTc0LWJmYjgzMDFi YWYyMS5jcmwwHwYDVR0jBBgwFoAUPhB8wc0zaKhkfHLiXR2OQRfYiYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NGMwZjBkMi0zNmEzLTRlNjQtYjk3NC1iZmI4 MzAxYmFmMjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAn0vH8/urFdIPCx0kXz4fLj/BEsx/CdEUnWqwjpd8tFbXbt8BKOoW0T60 dn56o+eL35WSXUpqXKsJ+FWObLUxdkjgZb2xtqOpRkEQ+0hBbrTzI3t6y3yW3pV6 DDyR4ds9IfXSvpJ+YyrhheDEpLaZly1gSkbNCiu9SGTpEt+P7Nc//HLvtazRCZjK +Kk90B6vWx8jRc9TDwp4fpKtWWlMaAJglEFpsElVJ1hoVH14TkoDqLsCettvyypx 17RRnkf23+c3AjmDQDTiO+886FEaJQm4EEyP4GhZ2PM2+j0+SFNdRtZ8hzM4qk/w 1ivnIczxo/IcgoDE9ojxHUK2DU7R2Q== -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:13 2025 by rpki-client