$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: w7SU+XTKz3BQ+1CR3+5C2lw3nGJi8jAjLL+FQC49YxA= Subject key identifier: AC:12:C1:73:18:74:8E:8C:24:2D:B1:A6:55:D2:4B:28:57:5C:C9:49 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584AC2E0EAB56F9C8FD8892C5FC0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:ea:b5:6f:9c:8f:d8:89:2c:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=efd8be76-23c3-4fb6-97eb-2a8a7731a6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:ab:67:62:4a:e3:26:53:5c:56:4a:67:09: 1d:6d:4b:29:59:4a:c5:b4:10:65:6b:9a:9b:aa:6a: f1:a9:a7:47:4a:f8:bb:a7:51:df:3f:c4:69:9b:41: c6:e0:00:59:6e:13:b9:3f:8f:30:98:d7:20:05:8e: e7:3b:c7:8a:23:5c:e4:fb:72:19:e3:80:81:19:f3: 97:02:c4:5b:59:d9:0d:66:b1:e1:8c:85:62:6a:3c: c1:0a:e4:0a:02:11:63:47:60:98:27:2f:a0:4f:7c: 14:07:cc:a4:68:71:e7:6e:76:21:12:69:31:cf:00: 45:5f:f2:a8:14:06:db:35:1a:de:03:cb:ed:07:09: 61:67:47:ca:3b:a1:58:b4:9a:ca:38:c7:0d:10:0e: e1:9b:e5:a6:a6:bc:76:ab:54:41:c2:0d:4c:f0:06: dc:ba:e8:b7:77:c4:4e:83:f6:f2:74:5f:ef:a8:a4: 24:7e:c3:19:17:5a:f6:ea:0f:96:87:32:92:c4:7c: 8c:c0:84:68:07:18:7e:51:92:df:42:41:86:26:6e: 74:2d:68:fc:97:bf:45:14:6f:9e:51:de:6b:b8:19: 67:50:c5:5b:4e:80:6f:d7:80:88:38:24:22:3e:5e: 8e:63:01:be:8b:dd:de:a7:44:1c:f1:59:c3:07:40: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:12:C1:73:18:74:8E:8C:24:2D:B1:A6:55:D2:4B:28:57:5C:C9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:01:be:77:9b:7e:12:6e:c7:29:1e:8d:38:53:5a:b1:a7:9c: 7e:c4:4b:ba:6b:26:28:91:50:4b:3f:7b:a7:10:e2:20:dc:1e: 55:c3:a8:fc:9f:ce:03:62:fb:21:f6:3f:2c:50:64:9f:ab:eb: 43:b2:37:80:4d:eb:26:94:3b:6d:2e:7a:d7:be:de:a0:c3:f5: 87:f8:f0:4c:d2:37:f1:7f:70:19:f8:eb:1f:29:eb:8f:a3:d9: 37:f9:31:2f:e6:c2:04:85:41:6c:3b:a2:68:db:21:a6:50:e6: cd:9f:95:09:80:f4:36:78:39:e2:80:44:d7:43:8e:3a:8a:ef: b0:fc:96:ed:bf:21:8a:01:93:73:16:e4:2a:5e:12:77:e3:70: 2e:31:23:ac:af:79:4b:80:42:4e:4a:e7:25:e3:ba:d3:23:ce: 6a:71:9f:6f:a1:3b:86:f1:00:ce:e5:89:5e:4d:48:47:3e:fc: 55:6c:35:e4:ae:50:7b:a5:43:e6:71:39:19:09:ba:3d:49:cb: fa:56:cc:12:81:c5:5e:0e:e0:42:24:c6:5d:5d:29:ba:5c:2a: 7f:29:6e:07:13:05:5c:04:d5:bb:89:93:f1:4f:c6:81:80:26: 5f:88:ad:ff:67:1a:6c:54:f8:f2:d4:f2:05:02:e9:b9:1c:46: 55:67:06:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Oq1b5yP2IksX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWZkOGJlNzYtMjNjMy00ZmI2LTk3ZWItMmE4YTc3MzFhNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44KrZ2JK4yZTXFZKZwkdbUspWUrFtBBla5qb qmrxqadHSvi7p1HfP8Rpm0HG4ABZbhO5P48wmNcgBY7nO8eKI1zk+3IZ44CBGfOX AsRbWdkNZrHhjIViajzBCuQKAhFjR2CYJy+gT3wUB8ykaHHnbnYhEmkxzwBFX/Ko FAbbNRreA8vtBwlhZ0fKO6FYtJrKOMcNEA7hm+Wmprx2q1RBwg1M8Abcuui3d8RO g/bydF/vqKQkfsMZF1r26g+WhzKSxHyMwIRoBxh+UZLfQkGGJm50LWj8l79FFG+e Ud5ruBlnUMVbToBv14CIOCQiPl6OYwG+i93ep0Qc8VnDB0BJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwSwXMYdI6MJC2xplXSSyhXXMlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4BvnebfhJuxykejThTWrGnnH7ES7prJiiRUEs/e6cQ4iDcHlXDqPyf zgNi+yH2PyxQZJ+r60OyN4BN6yaUO20uete+3qDD9Yf48EzSN/F/cBn46x8p64+j 2Tf5MS/mwgSFQWw7omjbIaZQ5s2flQmA9DZ4OeKARNdDjjqK77D8lu2/IYoBk3MW 5CpeEnfjcC4xI6yveUuAQk5K5yXjutMjzmpxn2+hO4bxAM7liV5NSEc+/FVsNeSu UHulQ+ZxORkJuj1Jy/pWzBKBxV4O4EIkxl1dKbpcKn8pbgcTBVwE1buJk/FPxoGA Jl+Irf9nGmxU+PLU8gUC6bkcRlVnBv4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:29 2025 by rpki-client