$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/971eede3-20ac-302c-b119-039a743f9378.roa File: 971eede3-20ac-302c-b119-039a743f9378.roa (raw, json) Hash identifier: /DYS6FDuYHmXoJzYeKC0TnAcVYOmjqfVY//8PWeBds4= Subject key identifier: AE:AB:44:A1:C3:DE:2E:4B:CD:22:D2:F4:7F:DF:18:BA:8C:BC:0B:C7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE84BFF1A1AA6529C6631D880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/971eede3-20ac-302c-b119-039a743f9378.roa Signing time: Tue 19 Aug 2025 10:41:25 +0000 ROA not before: Tue 19 Aug 2025 10:41:25 +0000 ROA not after: Mon 17 Nov 2025 11:41:25 +0000 asID: 49608 IP address blocks: 64.81.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:4b:ff:1a:1a:a6:52:9c:66:31:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 19 10:41:25 2025 GMT Not After : Nov 17 11:41:25 2025 GMT Subject: CN=db0f1fe8-a2fc-455f-aa5a-19e6e8eb50c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:62:36:5d:bb:03:47:75:01:ca:1f:c5:d7: b7:a0:5e:5b:85:0d:92:62:eb:f6:e4:3e:5d:33:fb: f2:f3:d3:84:a1:c8:f4:fa:f0:fc:ba:02:0e:d6:35: 49:99:b8:cc:af:7e:5c:f7:bf:3b:ef:e2:7b:c2:41: c1:b4:b8:1e:69:b8:39:7e:6d:9a:91:26:56:65:9e: de:ea:0b:26:2a:96:97:8d:cb:c9:e5:c0:06:0d:e0: 0f:00:34:f1:3f:62:70:0a:ab:dd:aa:36:24:a3:a0: 74:cd:c2:5a:eb:d5:c1:b6:a7:00:f5:ef:e3:6a:68: 7f:9b:e3:da:e4:d9:1e:76:80:50:6e:f2:6c:02:5c: 93:b2:8e:ee:7a:7f:05:a6:3c:e1:66:cd:77:2f:21: 9f:f5:4f:85:64:21:c5:bf:8b:52:55:cc:7e:97:b8: 52:a2:e9:a4:61:c5:c0:89:0d:d7:31:99:bb:9d:b6: a5:72:b0:54:a9:87:60:3c:4e:61:bf:98:cd:a7:e3: 19:64:bc:16:66:04:b4:f5:fd:ec:5a:f6:c7:bc:2b: 36:db:6b:49:96:f8:8e:8c:a5:09:08:a1:e3:c5:52: c2:50:7c:4e:ed:c3:78:1a:f1:84:db:4c:33:c3:87: 17:04:c7:ba:5a:dd:09:bf:88:da:43:52:ee:22:7f: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AB:44:A1:C3:DE:2E:4B:CD:22:D2:F4:7F:DF:18:BA:8C:BC:0B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/971eede3-20ac-302c-b119-039a743f9378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:13:35:86:01:c8:fe:d5:a0:35:d8:f7:b4:c8:7e:14:5e:b6: 4c:2b:9b:6c:9d:4c:aa:65:8c:b6:b7:f5:2a:ce:f0:ed:79:d5: 53:2b:11:f0:74:8c:c9:a5:c0:8c:a4:d0:91:b6:ce:1c:3e:1a: 59:db:e5:c5:27:db:a2:51:91:2b:c0:b7:02:01:86:f1:0e:de: 1a:46:30:16:56:09:c5:d4:4e:83:2e:3f:63:5d:e5:ef:58:b6: cb:43:8d:c7:0a:f4:1f:4c:f5:e5:36:a2:49:16:5b:ee:ff:e3: 1e:58:aa:2a:c2:df:bc:7f:f1:0a:58:63:de:e9:a5:0b:9a:b9: 41:0f:8c:35:fb:6f:3b:28:5e:e7:5b:e6:27:17:46:af:a5:82: 63:37:3e:39:c0:5b:84:bd:9b:95:dd:5e:12:1e:1a:e8:dd:52: 4d:f6:29:9d:cd:91:98:28:76:0b:87:a0:74:ce:f5:01:5a:54: fe:56:42:8e:2f:4c:5f:6f:0d:86:96:66:84:ee:64:2b:11:97: 38:21:04:3c:1d:28:3f:6c:f3:7f:b9:7a:9a:97:19:5b:30:10: e2:52:8a:dc:69:d5:97:2f:46:db:96:7e:b0:88:4e:1c:c5:a5: 4a:fe:3a:99:f0:f9:00:16:8c:7d:65:f7:4a:ae:6d:ad:7a:d5: a0:c7:e1:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroS/8aGqZSnGYx2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxOTEwNDEyNVoXDTI1MTExNzExNDEyNVowLzEtMCsGA1UEAxMk ZGIwZjFmZTgtYTJmYy00NTVmLWFhNWEtMTllNmU4ZWI1MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC1iNl27A0d1Acofxde3oF5bhQ2SYuv25D5d M/vy89OEocj0+vD8ugIO1jVJmbjMr35c97877+J7wkHBtLgeabg5fm2akSZWZZ7e 6gsmKpaXjcvJ5cAGDeAPADTxP2JwCqvdqjYko6B0zcJa69XBtqcA9e/jamh/m+Pa 5NkedoBQbvJsAlyTso7uen8FpjzhZs13LyGf9U+FZCHFv4tSVcx+l7hSoumkYcXA iQ3XMZm7nbalcrBUqYdgPE5hv5jNp+MZZLwWZgS09f3sWvbHvCs222tJlviOjKUJ CKHjxVLCUHxO7cN4GvGE20wzw4cXBMe6Wt0Jv4jaQ1LuIn+SiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6rRKHD3i5LzSLS9H/fGLqMvAvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTcxZWVkZTMtMjBhYy0z MDJjLWIxMTktMDM5YTc0M2Y5Mzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcTNYYByP7VoDXY97TIfhRetkwrm2ydTKpljLa39SrO8O151VMrEfB0 jMmlwIyk0JG2zhw+Glnb5cUn26JRkSvAtwIBhvEO3hpGMBZWCcXUToMuP2Nd5e9Y tstDjccK9B9M9eU2okkWW+7/4x5YqirC37x/8QpYY97ppQuauUEPjDX7bzsoXudb 5icXRq+lgmM3PjnAW4S9m5XdXhIeGujdUk32KZ3NkZgodguHoHTO9QFaVP5WQo4v TF9vDYaWZoTuZCsRlzghBDwdKD9s83+5epqXGVswEOJSitxp1ZcvRtuWfrCIThzF pUr+Opnw+QAWjH1l90quba161aDH4SI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:22 2025 by rpki-client