$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa File: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json) Hash identifier: K/xuSVvYbxj+Kp2abalZsnCm453fwysRwEAw9PGQTso= Subject key identifier: 57:7C:7D:A5:64:45:41:E4:B5:8D:8B:68:05:65:F1:7E:19:A2:58:60 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584B4E770906C8EF11DFD247A120 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:09:06:c8:ef:11:df:d2:47:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=9c1d1074-0a4a-4c62-991f-cf11c06066ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:2b:51:99:5d:66:42:5a:85:9e:f5:0c:1d: bd:ac:05:68:00:df:b0:c6:f5:34:76:69:c5:39:fa: 4d:71:38:57:53:9c:8b:9b:6f:54:c9:01:04:cb:f6: 8b:3f:0b:31:f7:17:5b:35:13:78:62:65:d1:b5:a8: 16:de:2b:3a:a2:db:0f:95:76:b1:ab:ab:06:e8:66: 98:0d:e3:28:42:87:0e:d4:21:a9:a9:93:2a:fd:5d: d4:94:c4:86:15:cb:81:53:18:4f:06:29:8d:21:54: cd:39:d1:73:f2:1b:b2:19:24:46:97:f9:fe:dc:82: 62:90:09:1d:5e:06:f1:e6:09:2e:75:a2:63:c0:22: 95:a1:5c:bb:68:de:89:c1:24:d6:2a:bb:40:8e:fa: f6:db:29:4f:7a:46:ad:7d:48:72:0e:69:1a:eb:cd: 6b:a5:2e:40:df:b3:69:62:2a:19:05:d7:87:b9:9a: 28:22:f5:7e:44:fb:22:ef:7c:f2:84:b4:c2:83:91: b3:7e:6e:42:41:4b:dd:bb:2f:b5:c7:c5:bb:b4:2c: c5:6c:37:a5:b5:92:5d:aa:93:44:96:68:4f:51:88: 23:20:6a:80:02:6e:fb:fe:8f:e8:46:c6:8d:a6:79: 1d:98:d4:cf:7d:d2:fc:5b:1c:7b:03:aa:cf:d5:47: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7C:7D:A5:64:45:41:E4:B5:8D:8B:68:05:65:F1:7E:19:A2:58:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9a:f6:f0:eb:3a:08:f0:d0:fa:c8:e0:94:ba:c6:71:86:17: 97:39:0b:3f:e3:5b:a6:41:74:d3:c6:e6:0e:98:04:17:4e:b5: 15:24:52:76:e9:8d:d8:3a:ea:e5:c1:97:08:59:3c:3b:57:5d: 7e:3f:60:5c:0e:36:b8:18:e4:b5:63:7c:10:15:ff:93:4d:4a: 42:cd:25:aa:f5:d1:4a:e9:82:24:3f:8d:14:d9:a7:b9:26:24: b6:8e:6d:4a:3f:92:bb:bf:26:57:25:ed:b1:35:dc:6a:2a:73: 6d:f2:43:ae:78:6b:d9:ba:5a:70:a2:8d:6b:91:9d:a8:dd:c3: 47:d1:d1:35:88:d6:65:d8:19:0d:a0:db:d5:b2:f5:4d:5f:3a: ff:7d:06:35:ae:30:35:52:c2:db:ed:c9:00:70:1b:2d:f9:d5: a1:9c:c5:78:28:89:52:e5:cf:73:0c:8b:2a:a1:e8:05:f6:a4: 2e:e5:60:df:90:90:0d:c6:0b:fd:66:55:78:63:da:bc:d9:5a: 71:9f:0b:be:c8:06:8b:18:9c:a8:66:c3:37:38:93:f1:91:29: 06:af:9b:c8:62:d7:f3:59:cf:7c:dd:57:d4:fd:24:c9:36:44: 28:8d:11:3e:e0:1d:f0:71:cf:95:9c:bf:83:3c:55:8d:04:fd: fc:e1:1b:7d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtOdwkGyO8R39JHoSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OWMxZDEwNzQtMGE0YS00YzYyLTk5MWYtY2YxMWMwNjA2NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqorUZldZkJahZ71DB29rAVoAN+wxvU0dmnF OfpNcThXU5yLm29UyQEEy/aLPwsx9xdbNRN4YmXRtagW3is6otsPlXaxq6sG6GaY DeMoQocO1CGpqZMq/V3UlMSGFcuBUxhPBimNIVTNOdFz8huyGSRGl/n+3IJikAkd Xgbx5gkudaJjwCKVoVy7aN6JwSTWKrtAjvr22ylPekatfUhyDmka681rpS5A37Np YioZBdeHuZooIvV+RPsi73zyhLTCg5Gzfm5CQUvduy+1x8W7tCzFbDeltZJdqpNE lmhPUYgjIGqAAm77/o/oRsaNpnkdmNTPfdL8Wxx7A6rP1Ud3ywIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFd8faVkRUHktY2LaAVl8X4ZolhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNTg5ZTNlNjEtOGZhZS0z ODRlLTk5YTAtMDExYzM5YzA4ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEaa9vDrOgjw0PrI4JS6xnGGF5c5Cz/jW6ZBdNPG 5g6YBBdOtRUkUnbpjdg66uXBlwhZPDtXXX4/YFwONrgY5LVjfBAV/5NNSkLNJar1 0UrpgiQ/jRTZp7kmJLaObUo/kru/Jlcl7bE13Goqc23yQ654a9m6WnCijWuRnajd w0fR0TWI1mXYGQ2g29Wy9U1fOv99BjWuMDVSwtvtyQBwGy351aGcxXgoiVLlz3MM iyqh6AX2pC7lYN+QkA3GC/1mVXhj2rzZWnGfC77IBosYnKhmwzc4k/GRKQavm8hi 1/NZz3zdV9T9JMk2RCiNET7gHfBxz5Wcv4M8VY0E/fzhG30= -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:01 2025 by rpki-client