$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa File: a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa (raw, json) Hash identifier: QmeQ+V+uZmPeGs+KphX8qP/6cIuleXv3C0wOCDhKMY4= Subject key identifier: 43:3E:45:78:15:11:17:DF:F1:F6:70:DA:CA:6C:11:9F:EB:77:4B:66 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F15170212CD240FEB60180 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 32298 IP address blocks: 64.255.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:51:70:21:2c:d2:40:fe:b6:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e126d6dd-0531-4dca-b52e-2cf963efb21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b7:fe:79:00:16:3d:bc:91:81:dc:94:2c:b5: 7f:0a:5d:00:50:ed:30:f9:73:ec:ff:c8:f7:45:f4: b7:3f:e1:10:53:3d:c5:4c:47:ef:c4:ac:8f:80:94: c1:85:a8:1f:c5:d7:f7:0f:e9:da:65:20:b3:41:58: bc:6c:d6:3e:86:4e:4b:07:0a:a7:0a:28:53:d2:a4: 9a:3f:9d:d9:89:db:e9:b4:01:ff:d4:d4:b2:3d:2b: 12:27:a4:13:d4:6a:94:f8:de:e2:99:2c:b2:d6:dc: 96:39:92:de:0f:06:1b:66:eb:f0:ef:53:f4:d8:35: 49:2f:69:4b:4c:ae:af:c7:a2:10:94:a1:76:b6:1e: 68:91:bb:99:6a:e9:7a:4f:26:c2:75:d9:c9:0c:09: 10:f3:9f:a5:98:80:e3:99:33:cd:88:d0:4a:bf:2f: e5:94:7b:44:a7:d9:74:8d:22:80:82:dd:5a:b2:0c: 3d:b9:5d:73:d1:8d:df:16:ed:12:60:e0:58:a1:fa: a2:a6:03:b3:0e:76:3e:13:93:74:06:8b:7a:da:90: 26:5c:4e:0a:ec:a3:26:aa:44:22:70:0a:bc:d4:5b: 06:52:e0:60:b6:1f:99:dc:e0:7f:dc:5f:75:3e:b8: 70:69:5f:ee:b3:0f:3f:04:d6:b5:f9:7a:1d:a1:e8: b9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3E:45:78:15:11:17:DF:F1:F6:70:DA:CA:6C:11:9F:EB:77:4B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 64.255.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:7b:2f:07:82:d5:7c:4d:26:99:f7:03:1f:a0:53:22:4c:90: 9a:72:10:73:58:be:a6:56:a6:c1:28:82:1e:a4:a2:84:e0:9d: ce:3e:87:a3:19:6c:50:88:2d:16:92:0f:50:f6:fa:d6:54:d5: 09:a7:b4:f0:66:89:f2:09:03:9b:c8:78:40:7a:8e:24:ff:21: 52:5f:54:73:91:e6:e0:a1:83:79:1b:b0:c5:72:56:6e:75:f4: 1d:92:8b:ef:84:17:c9:ec:f9:0b:86:45:77:4e:a5:7e:49:f9: 64:a3:43:89:3d:93:96:14:21:53:cb:f3:ca:4f:d7:08:a0:a6: 37:bf:2f:de:04:16:d4:3d:67:12:f0:5a:b5:1e:c7:68:42:66: 30:81:ac:3e:74:65:ae:eb:35:ef:59:22:fb:ca:73:39:66:df: 14:d5:dd:60:7d:4d:8c:b0:8b:8b:48:3b:86:0b:e6:de:9d:59: d3:1b:ff:37:93:8d:2e:ab:d2:60:c3:f1:21:b3:fd:93:00:8d: 75:cc:3b:fe:c0:7f:c4:43:09:25:8d:4e:99:e6:d3:05:b7:45: c7:0b:7c:df:fe:54:81:1c:04:5d:c3:07:34:c3:f1:a1:38:81: 06:5a:95:c8:a8:08:08:5d:1e:28:17:40:90:0f:1f:ca:92:56: 52:1c:ed:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VFwISzSQP62AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTEyNmQ2ZGQtMDUzMS00ZGNhLWI1MmUtMmNmOTYzZWZiMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLf+eQAWPbyRgdyULLV/Cl0AUO0w+XPs/8j3 RfS3P+EQUz3FTEfvxKyPgJTBhagfxdf3D+naZSCzQVi8bNY+hk5LBwqnCihT0qSa P53ZidvptAH/1NSyPSsSJ6QT1GqU+N7imSyy1tyWOZLeDwYbZuvw71P02DVJL2lL TK6vx6IQlKF2th5okbuZaul6TybCddnJDAkQ85+lmIDjmTPNiNBKvy/llHtEp9l0 jSKAgt1asgw9uV1z0Y3fFu0SYOBYofqipgOzDnY+E5N0Bot62pAmXE4K7KMmqkQi cAq81FsGUuBgth+Z3OB/3F91PrhwaV/usw8/BNa1+Xodoei5qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM+RXgVERff8fZw2spsEZ/rd0tmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYTZiZmE2NjgtZDJjMy0z MWMzLThlNzUtODg0ZTRmZGEyOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQP/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK97LweC1XxNJpn3Ax+gUyJMkJpyEHNYvqZWpsEogh6kooTgnc4+h6MZ bFCILRaSD1D2+tZU1QmntPBmifIJA5vIeEB6jiT/IVJfVHOR5uChg3kbsMVyVm51 9B2Si++EF8ns+QuGRXdOpX5J+WSjQ4k9k5YUIVPL88pP1wigpje/L94EFtQ9ZxLw WrUex2hCZjCBrD50Za7rNe9ZIvvKczlm3xTV3WB9TYywi4tIO4YL5t6dWdMb/zeT jS6r0mDD8SGz/ZMAjXXMO/7Af8RDCSWNTpnm0wW3RccLfN/+VIEcBF3DBzTD8aE4 gQZalcioCAhdHigXQJAPH8qSVlIc7T0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:01:22 2025 by rpki-client