$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/b88f00ad-140f-3079-83ac-77b0f6907420.roa File: b88f00ad-140f-3079-83ac-77b0f6907420.roa (raw, json) Hash identifier: Y4fbORtPvRZEZYPCnMhPJ6OauNbmz6e/3H16fldtK9Y= Subject key identifier: 9A:78:C4:4E:24:94:0C:D9:04:78:A9:23:16:99:85:78:41:77:E2:8D Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584AF0F153A9E394722894A1CA80 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/b88f00ad-140f-3079-83ac-77b0f6907420.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 12213 IP address blocks: 64.255.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:53:a9:e3:94:72:28:94:a1:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=b2669008-7dc4-4552-902b-43be3c8d4922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:c8:0f:98:d3:f3:0d:15:45:8f:ed:f2:66: dc:46:e5:91:eb:c4:02:09:25:c5:ba:db:0c:a0:77: dd:27:ab:ff:94:04:9a:e2:99:b5:53:23:73:cd:11: 3e:fd:55:5d:28:6b:7b:78:d9:cd:5e:bd:31:1e:59: 3d:8e:b0:f8:b0:ee:71:85:76:18:93:91:c8:f3:4d: d8:29:43:c9:90:2c:fa:a2:b9:b0:84:06:bc:05:e1: 37:24:58:82:62:eb:30:e4:ef:af:26:01:cb:99:b5: 50:3b:11:09:bb:18:8f:5d:aa:9f:0e:84:c6:0a:e6: 4d:c9:14:bc:35:54:a1:49:32:a4:38:c6:f7:eb:75: 14:00:3f:a0:c9:79:26:b7:58:22:d1:66:2c:6a:06: 80:1f:8d:bc:44:b3:ce:b0:4d:0d:d5:e9:23:87:8a: dc:fa:15:33:b2:d0:25:34:a9:e2:23:fb:4c:c3:9b: b7:e2:e8:76:bc:fb:6a:34:0a:6c:04:7e:8d:ce:59: e3:b8:2e:67:d1:56:e0:4b:a3:9a:6c:2a:a1:98:eb: b7:f0:d5:09:af:e1:2c:0d:e5:22:55:0e:54:05:84: 01:e3:08:b4:21:85:a2:cf:5c:41:b7:d7:a4:82:b9: d5:73:31:57:e3:bb:ec:57:65:56:78:22:7f:28:a0: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:78:C4:4E:24:94:0C:D9:04:78:A9:23:16:99:85:78:41:77:E2:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/b88f00ad-140f-3079-83ac-77b0f6907420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 64.255.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:57:4a:c9:84:0e:c4:4e:e4:32:03:20:e6:9b:18:1f:14:8d: 88:18:3f:fa:97:e1:b1:b8:98:b3:18:d8:9e:4b:40:99:8d:92: 43:3d:20:fd:0a:fa:86:74:bb:3b:e7:ba:b5:46:17:6c:d5:75: 9d:a9:13:b1:23:7c:a1:27:b7:42:c9:75:7c:4a:64:cc:0c:58: 66:b7:c2:42:8e:f3:77:56:09:45:c0:ac:02:95:77:1a:61:61: 2c:2b:5d:33:80:62:bc:25:88:b1:30:93:cb:bf:b3:5f:ef:8d: df:1d:9c:ff:f0:64:c8:2f:3f:c0:df:56:08:8e:c5:37:56:f2: dd:54:34:cd:5c:fd:9d:83:fc:83:58:b7:3f:f9:8d:3f:91:e3: a0:54:92:cd:56:f5:35:3d:fb:51:9d:11:e3:37:69:af:78:0c: 28:73:e6:6c:1e:a2:dd:2b:3a:30:97:6a:da:ae:1f:d7:9f:6a: 60:9b:78:54:cc:0b:76:79:80:e6:2a:ca:66:b8:23:04:4d:a6: 6a:cb:74:8b:ac:78:95:bc:14:77:26:c3:55:1e:bc:00:b8:4c: cb:d5:8a:79:ca:c9:63:54:90:79:06:42:4c:51:1b:36:aa:e8: c0:95:e2:69:f7:23:6c:50:28:16:3a:23:6d:16:e3:9e:b0:57: 48:22:53:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VOp45RyKJShyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YjI2NjkwMDgtN2RjNC00NTUyLTkwMmItNDNiZTNjOGQ0OTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f3ID5jT8w0VRY/t8mbcRuWR68QCCSXFutsM oHfdJ6v/lASa4pm1UyNzzRE+/VVdKGt7eNnNXr0xHlk9jrD4sO5xhXYYk5HI803Y KUPJkCz6ormwhAa8BeE3JFiCYusw5O+vJgHLmbVQOxEJuxiPXaqfDoTGCuZNyRS8 NVShSTKkOMb363UUAD+gyXkmt1gi0WYsagaAH428RLPOsE0N1ekjh4rc+hUzstAl NKniI/tMw5u34uh2vPtqNApsBH6NzlnjuC5n0VbgS6OabCqhmOu38NUJr+EsDeUi VQ5UBYQB4wi0IYWiz1xBt9ekgrnVczFX47vsV2VWeCJ/KKB3vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp4xE4klAzZBHipIxaZhXhBd+KNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYjg4ZjAwYWQtMTQwZi0z MDc5LTgzYWMtNzdiMGY2OTA3NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQP/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1XSsmEDsRO5DIDIOabGB8UjYgYP/qX4bG4mLMY2J5LQJmNkkM9IP0K +oZ0uzvnurVGF2zVdZ2pE7EjfKEnt0LJdXxKZMwMWGa3wkKO83dWCUXArAKVdxph YSwrXTOAYrwliLEwk8u/s1/vjd8dnP/wZMgvP8DfVgiOxTdW8t1UNM1c/Z2D/INY tz/5jT+R46BUks1W9TU9+1GdEeM3aa94DChz5mweot0rOjCXatquH9efamCbeFTM C3Z5gOYqyma4IwRNpmrLdIuseJW8FHcmw1UevAC4TMvVinnKyWNUkHkGQkxRGzaq 6MCV4mn3I2xQKBY6I20W456wV0giU5s= -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:32 2025 by rpki-client