$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/86895382-8fbd-3247-a11b-816425f20c48.roa File: 86895382-8fbd-3247-a11b-816425f20c48.roa (raw, json) Hash identifier: K/FlG6tHKFUhCA/furU10QpTGtUNsfmrP1SiNu0eeXw= Subject key identifier: E2:AF:0B:03:4D:F2:CA:BF:82:C2:4E:71:2C:F2:01:39:07:06:C2:35 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AC01647D9457A4D72A25F4080 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/86895382-8fbd-3247-a11b-816425f20c48.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 399439 IP address blocks: 64.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:47:d9:45:7a:4d:72:a2:5f:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=07bec0a2-d5b6-4659-a668-748555660f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:58:d5:84:8a:fd:a9:9a:a4:af:49:6d:45: 7f:fa:ce:17:6d:8b:99:04:8d:2f:98:d1:bb:c1:bf: bc:23:e5:74:5b:e9:f2:a2:b8:97:9f:2c:a6:4b:28: 9f:d6:d4:e7:dd:1d:92:5f:63:e8:0d:2a:2b:d6:3c: cf:bb:a9:c2:fc:0e:de:d8:25:8b:4e:23:d2:40:52: 01:4b:31:e9:86:70:d8:aa:a5:4b:8f:9d:83:8c:b9: a4:26:24:69:83:23:5e:4c:b4:22:c7:52:1a:c4:dd: ec:61:1e:9d:34:86:fc:a5:94:18:e4:c2:1d:d5:23: 14:f3:28:d7:95:28:12:31:c2:ee:51:4b:f9:ce:a7: f2:1d:09:c3:36:8a:e7:12:85:34:e1:20:f9:d2:51: bf:1a:66:84:6e:49:70:01:af:cf:50:1b:25:62:f2: 8b:29:48:d4:bf:29:3d:33:9c:1f:79:fe:c5:03:58: f4:dd:7b:73:2c:bb:ea:e3:66:5c:52:2e:ff:00:27: 7f:08:55:08:fb:d3:a8:b2:e5:1a:a8:3e:78:ea:80: 1d:a8:2f:59:b0:55:e4:7f:af:09:a0:dd:15:2e:a1: ac:25:fd:ec:f6:4a:76:75:bd:b5:6e:8f:b5:fa:08: bf:ea:23:34:3b:26:40:2e:d2:3e:87:7c:02:42:40: ed:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AF:0B:03:4D:F2:CA:BF:82:C2:4E:71:2C:F2:01:39:07:06:C2:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/86895382-8fbd-3247-a11b-816425f20c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ed:d9:46:f0:81:d0:97:db:bc:0b:81:7b:b1:a7:95:93:33: 1b:f5:6a:15:31:cc:9c:81:a7:a2:a3:22:6e:55:55:00:bc:c3: 56:8d:0f:e9:68:68:56:f3:31:e0:18:f0:e2:9c:45:22:9d:ec: e9:5b:4c:d5:19:52:39:06:5a:c1:e6:63:0f:b9:e7:74:b4:2e: a1:0b:84:49:a3:c7:0b:a8:76:55:5a:00:3a:2e:b7:ee:60:78: e3:e1:13:74:11:2d:2e:d6:39:fa:d9:35:03:a9:7d:44:42:17: 0a:a6:4c:36:88:46:d6:86:ff:d9:1b:6e:49:1f:1a:4d:06:e3: 1c:de:84:26:18:6f:26:12:f1:2c:d6:ea:61:1e:84:02:e9:1d: 44:4e:85:39:ca:c7:61:03:08:02:4f:d8:1b:8d:e3:01:d1:98: b1:c3:70:1d:61:cb:3e:45:75:db:be:d3:b8:c2:15:ad:eb:ec: e0:c5:8d:1f:4d:1d:86:8a:9d:a8:fc:ab:66:4c:4c:33:24:d0: 0b:d7:ba:72:c6:db:e0:36:18:fc:d2:9c:e7:87:28:5f:9a:da: 14:e8:4f:d7:31:69:9d:e7:2c:a6:ab:9c:40:75:bd:47:b2:84: f6:79:8d:e8:ae:6c:5e:5a:89:28:00:26:85:61:1b:04:19:30: 2e:83:e7:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkfZRXpNcqJfQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MDdiZWMwYTItZDViNi00NjU5LWE2NjgtNzQ4NTU1NjYwZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbNY1YSK/amapK9JbUV/+s4XbYuZBI0vmNG7 wb+8I+V0W+nyoriXnyymSyif1tTn3R2SX2PoDSor1jzPu6nC/A7e2CWLTiPSQFIB SzHphnDYqqVLj52DjLmkJiRpgyNeTLQix1IaxN3sYR6dNIb8pZQY5MId1SMU8yjX lSgSMcLuUUv5zqfyHQnDNornEoU04SD50lG/GmaEbklwAa/PUBslYvKLKUjUvyk9 M5wfef7FA1j03XtzLLvq42ZcUi7/ACd/CFUI+9OosuUaqD546oAdqC9ZsFXkf68J oN0VLqGsJf3s9kp2db21bo+1+gi/6iM0OyZALtI+h3wCQkDtKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKvCwNN8sq/gsJOcSzyATkHBsI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODY4OTUzODItOGZiZC0z MjQ3LWExMWItODE2NDI1ZjIwYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITt2UbwgdCX27wLgXuxp5WTMxv1ahUxzJyBp6KjIm5VVQC8w1aND+lo aFbzMeAY8OKcRSKd7OlbTNUZUjkGWsHmYw+553S0LqELhEmjxwuodlVaADout+5g eOPhE3QRLS7WOfrZNQOpfURCFwqmTDaIRtaG/9kbbkkfGk0G4xzehCYYbyYS8SzW 6mEehALpHUROhTnKx2EDCAJP2BuN4wHRmLHDcB1hyz5Fddu+07jCFa3r7ODFjR9N HYaKnaj8q2ZMTDMk0AvXunLG2+A2GPzSnOeHKF+a2hToT9cxaZ3nLKarnEB1vUey hPZ5jeiubF5aiSgAJoVhGwQZMC6D5+4= -----END CERTIFICATE-----Generated at Sun Aug 24 03:53:31 2025 by rpki-client