$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3c07ebe-84e2-3b64-84f8-5a8c713ff11b.roa File: a3c07ebe-84e2-3b64-84f8-5a8c713ff11b.roa (raw, json) Hash identifier: lTdLFiDpEw+qjgItqqsj3UOgSi+ALhNlqB6BaBq2xrk= Subject key identifier: 4B:5B:BF:5E:9C:CC:81:14:F0:0F:E9:72:75:5F:4C:64:61:B8:20:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC9DB9BC9549214171151DDA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3c07ebe-84e2-3b64-84f8-5a8c713ff11b.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 17204 IP address blocks: 64.89.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9b:c9:54:92:14:17:11:51:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=71c8c900-455f-47be-bd7e-b8448cdce1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:72:76:17:7f:f2:3a:00:a3:6b:f5:ea:1b: 5a:4e:d3:30:8e:22:f0:a6:d1:5d:6e:f2:1e:a0:e3: ee:d2:ab:7d:68:f5:75:51:89:3d:54:08:8b:90:bc: 5a:47:6e:15:8f:30:2e:51:94:4e:32:7e:b8:9c:72: 06:09:f0:a9:22:f6:01:4c:ed:55:ca:39:5e:4f:dc: f5:74:68:ab:36:b2:44:81:dc:1a:3f:ff:1d:63:3b: d6:d6:d8:cc:dc:83:3a:bd:d6:be:89:a9:8a:6c:0d: b8:a9:db:1c:98:41:1c:84:87:80:20:d6:9f:22:fc: c1:29:71:c4:14:bd:5a:20:e2:aa:e7:4e:de:a1:a2: 45:db:0f:24:74:6c:b1:70:6a:9f:fa:00:81:17:d7: 8c:db:ac:b4:31:e2:c4:77:d7:e4:f6:d7:3b:c0:a0: e6:f5:5c:ff:dd:53:b5:a6:eb:8b:a7:da:1f:85:92: fc:75:16:f5:c8:f7:82:7d:d8:66:a5:6d:f3:76:d1: d8:29:d6:09:19:40:ce:2d:17:e8:f0:56:05:15:f3: 0c:87:ac:ce:87:85:c9:16:5b:51:19:40:18:bc:6c: ef:86:93:8e:ef:fe:c7:c4:51:cc:69:4b:e5:97:0b: 4e:9b:1b:f0:a8:b0:13:27:ad:21:2b:5f:d2:0a:66: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:BF:5E:9C:CC:81:14:F0:0F:E9:72:75:5F:4C:64:61:B8:20:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3c07ebe-84e2-3b64-84f8-5a8c713ff11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 64.89.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ad:e6:fb:e8:9b:9a:27:86:2d:ae:61:99:fc:03:bb:1b:0d: 83:5e:4f:4e:af:ed:01:c9:38:a0:82:89:9f:6f:8b:10:e7:64: 55:2c:0c:cb:03:7c:74:e8:15:c4:b4:e7:b4:1a:fa:06:de:96: 25:fb:6b:05:db:ca:15:aa:fb:f5:9e:d6:6e:7d:93:ff:fc:3b: 2f:6a:61:a4:96:75:65:73:44:01:12:58:be:e6:2d:99:63:8f: 03:39:97:fb:e8:a5:61:7b:de:3f:aa:ee:e1:34:04:46:c7:69: 93:e7:fe:d9:76:8d:6f:f6:b8:d0:50:e0:9c:1d:c5:09:6e:bf: 56:06:eb:15:0b:2e:8f:5b:84:04:81:68:95:d2:1e:5e:9b:d1: 39:e5:42:c9:46:68:71:44:ac:ef:c5:bb:7a:83:47:45:ff:c5: 41:bc:51:90:00:21:1c:b2:9d:e2:f9:34:12:44:6d:7d:9d:63: 06:7c:3f:81:a7:04:30:40:06:3d:0a:4f:8b:50:aa:c5:17:00: b3:97:36:27:93:e9:d3:18:1c:68:8c:18:a9:37:05:54:d8:94: d1:d1:67:7e:4b:4c:9f:05:e3:90:98:3a:dc:19:07:d6:32:e4: a2:a0:38:84:35:fd:f2:f6:2a:97:74:90:7c:de:07:7c:b7:b5: bd:e1:12:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ25vJVJIUFxFR3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NzFjOGM5MDAtNDU1Zi00N2JlLWJkN2UtYjg0NDhjZGNlMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/5ydhd/8joAo2v16htaTtMwjiLwptFdbvIe oOPu0qt9aPV1UYk9VAiLkLxaR24VjzAuUZROMn64nHIGCfCpIvYBTO1VyjleT9z1 dGirNrJEgdwaP/8dYzvW1tjM3IM6vda+iamKbA24qdscmEEchIeAINafIvzBKXHE FL1aIOKq507eoaJF2w8kdGyxcGqf+gCBF9eM26y0MeLEd9fk9tc7wKDm9Vz/3VO1 puuLp9ofhZL8dRb1yPeCfdhmpW3zdtHYKdYJGUDOLRfo8FYFFfMMh6zOh4XJFltR GUAYvGzvhpOO7/7HxFHMaUvllwtOmxvwqLATJ60hK1/SCmYNnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtbv16czIEU8A/pcnVfTGRhuCDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNjMDdlYmUtODRlMi0z YjY0LTg0ZjgtNWE4YzcxM2ZmMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmt5vvom5onhi2uYZn8A7sbDYNeT06v7QHJOKCCiZ9vixDnZFUsDMsD fHToFcS057Qa+gbeliX7awXbyhWq+/We1m59k//8Oy9qYaSWdWVzRAESWL7mLZlj jwM5l/vopWF73j+q7uE0BEbHaZPn/tl2jW/2uNBQ4JwdxQluv1YG6xULLo9bhASB aJXSHl6b0TnlQslGaHFErO/Fu3qDR0X/xUG8UZAAIRyyneL5NBJEbX2dYwZ8P4Gn BDBABj0KT4tQqsUXALOXNieT6dMYHGiMGKk3BVTYlNHRZ35LTJ8F45CYOtwZB9Yy 5KKgOIQ1/fL2Kpd0kHzeB3y3tb3hEu8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:54:12 2025 by rpki-client