$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a53f508b-796d-3f45-b3b7-1a1b4bf17c49.roa File: a53f508b-796d-3f45-b3b7-1a1b4bf17c49.roa (raw, json) Hash identifier: jhWH2rSK4znbgUIXCoZ5jF8Wsb2tJ4N7D32yRwdyXUk= Subject key identifier: 91:58:CC:A4:CE:AE:05:3C:60:5A:15:A2:07:BB:E0:34:9A:49:4E:09 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE03212B5EAC8DD7106973280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a53f508b-796d-3f45-b3b7-1a1b4bf17c49.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 5065 IP address blocks: 69.17.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:12:b5:ea:c8:dd:71:06:97:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=eb5002d3-96a8-4162-a702-0379131dfbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:4b:86:74:a1:54:51:a5:34:3c:59:9b:48: 14:8c:db:74:32:93:c6:81:45:d8:11:65:64:3a:a7: b2:2f:a5:6b:ce:db:74:84:59:25:10:d2:5a:6e:dd: 9c:eb:91:a1:cd:66:1d:6a:02:cf:7f:44:e4:4a:7d: ae:af:6c:b4:c5:d5:46:f6:74:1f:01:2f:9d:52:15: 88:68:8e:bb:a5:1a:b1:ab:37:4f:0e:04:4f:0d:61: 5b:ae:51:8f:1c:4c:63:b7:ac:40:2b:b7:9c:fc:b7: e7:f9:54:f5:89:74:a8:65:6b:aa:f6:08:51:a1:b0: cc:58:b6:43:e2:99:c9:7f:b4:37:6a:b9:1d:3e:8b: 26:eb:d2:2f:3c:97:28:d8:63:e1:60:0e:b0:43:6d: b5:61:49:fc:ee:09:25:46:1a:6e:cc:70:eb:93:e9: c6:2d:18:35:0b:98:35:44:4e:5a:c7:cb:b0:f5:16: ba:90:a8:95:84:b1:d2:f7:74:24:03:9d:e5:fa:26: 50:77:74:a0:49:b6:ea:9e:26:34:9c:54:47:01:fe: 81:ad:db:84:19:fc:55:56:cc:ff:ac:00:e7:9a:12: 25:31:e7:63:e2:9a:70:eb:42:68:69:8a:ec:cd:38: e2:e7:ad:53:41:06:ca:dd:bf:4b:a0:9d:f2:be:33: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:CC:A4:CE:AE:05:3C:60:5A:15:A2:07:BB:E0:34:9A:49:4E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a53f508b-796d-3f45-b3b7-1a1b4bf17c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:47:69:e3:74:1a:ab:2e:d8:1e:20:b5:1e:6f:5d:77:39:03: 1c:14:d3:c4:17:ae:22:c5:e2:08:0d:27:0e:db:49:1e:08:5b: a0:8e:33:53:f1:08:15:b2:c7:93:fa:24:7b:9a:c9:93:1a:70: 6f:ec:09:7f:43:5b:0d:96:ba:9a:2b:2a:94:ee:33:42:0a:6d: cf:7d:fb:07:88:d5:8e:ca:ff:a8:0c:56:82:9c:b4:95:27:ce: b7:53:97:36:f8:6d:18:75:87:da:f9:53:9b:09:61:d9:c1:82: a0:ca:24:83:03:7c:7e:97:12:d3:4e:cf:fa:45:95:59:86:47: 95:1f:9d:20:ec:05:21:57:7a:ae:f2:7c:45:4d:e4:bc:4b:7e: dd:58:e4:ee:df:22:a9:c2:e0:94:7f:1e:b7:d6:63:be:08:eb: cd:c8:c8:c0:e7:99:47:76:4a:e1:32:35:88:f6:22:6a:70:ef: 6c:17:76:cc:7a:52:d4:19:1c:28:7c:08:69:4e:37:d1:d4:b3: cc:23:2f:77:0d:6e:b8:56:8a:29:c2:02:07:91:08:4e:3c:d1: a4:55:62:9b:44:9c:e4:00:e1:de:d4:d6:ab:85:5c:5e:d5:0a: 6c:13:08:ac:77:da:80:ff:52:81:1a:72:8a:31:13:91:4c:12: af:9b:ae:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMhK16sjdcQaXMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ZWI1MDAyZDMtOTZhOC00MTYyLWE3MDItMDM3OTEzMWRmYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKpLhnShVFGlNDxZm0gUjNt0MpPGgUXYEWVk OqeyL6Vrztt0hFklENJabt2c65GhzWYdagLPf0TkSn2ur2y0xdVG9nQfAS+dUhWI aI67pRqxqzdPDgRPDWFbrlGPHExjt6xAK7ec/Lfn+VT1iXSoZWuq9ghRobDMWLZD 4pnJf7Q3arkdPosm69IvPJco2GPhYA6wQ221YUn87gklRhpuzHDrk+nGLRg1C5g1 RE5ax8uw9Ra6kKiVhLHS93QkA53l+iZQd3SgSbbqniY0nFRHAf6BrduEGfxVVsz/ rADnmhIlMedj4ppw60JoaYrszTji561TQQbK3b9LoJ3yvjOLNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFYzKTOrgU8YFoVoge74DSaSU4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTUzZjUwOGItNzk2ZC0z ZjQ1LWIzYjctMWExYjRiZjE3YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRHaeN0Gqsu2B4gtR5vXXc5AxwU08QXriLF4ggNJw7bSR4IW6COM1Px CBWyx5P6JHuayZMacG/sCX9DWw2WuporKpTuM0IKbc99+weI1Y7K/6gMVoKctJUn zrdTlzb4bRh1h9r5U5sJYdnBgqDKJIMDfH6XEtNOz/pFlVmGR5UfnSDsBSFXeq7y fEVN5LxLft1Y5O7fIqnC4JR/HrfWY74I683IyMDnmUd2SuEyNYj2Impw72wXdsx6 UtQZHCh8CGlON9HUs8wjL3cNbrhWiinCAgeRCE480aRVYptEnOQA4d7U1quFXF7V CmwTCKx32oD/UoEacooxE5FMEq+brkA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:59 2025 by rpki-client