$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa File: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (raw, json) Hash identifier: ST1YMtw3m5+ioRUl8alvwzRBSbFYA0TfXHF37daStVk= Subject key identifier: 8E:70:06:70:98:5B:56:76:98:5E:C5:C2:3D:CF:84:DC:DD:F0:7E:81 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584AC2E0EAC978ED9B408DC57B00 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:ea:c9:78:ed:9b:40:8d:c5:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=2b02c4d5-0373-4171-8083-99ca80ac3b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:78:dc:eb:b6:09:95:33:fa:f2:5a:24:9d:cc: b3:6a:bb:99:1e:96:40:56:0d:ae:4c:45:1b:58:ad: 02:12:4f:8f:8b:f8:8e:4f:75:92:4d:c7:2f:85:7f: 06:44:07:aa:5b:eb:03:51:8d:90:b0:18:fa:8f:d0: 66:36:a9:c2:28:25:3d:dc:f8:13:a1:9a:40:50:50: 87:b1:63:2c:d2:94:eb:9b:2e:76:b3:14:74:d8:98: bc:a3:07:1f:ff:dd:87:6a:a4:9e:bd:48:ea:2e:d5: 6b:f7:87:9f:6e:95:ad:3f:ec:bf:ee:f7:3b:8a:e7: 9d:29:33:5f:65:45:d9:36:62:99:8f:7e:29:8c:8e: 7e:f9:28:2f:37:66:46:40:fc:15:8f:5e:52:eb:19: 64:b5:1d:be:2f:36:7c:33:69:12:99:20:30:74:b5: c9:5f:72:25:7c:01:13:5c:35:cd:33:86:c7:b9:29: 24:81:bd:8a:49:09:85:cb:5c:fb:24:56:a3:2e:45: 90:a8:a9:79:ab:6c:8b:8f:41:a5:fd:9a:b2:42:27: fb:e0:77:52:cf:27:ee:fd:c5:c0:60:35:7d:54:65: c3:31:96:22:58:fb:f8:35:8d:c5:91:ca:f0:c4:0e: 7b:59:58:4f:36:b2:39:ed:ce:b2:e0:28:98:c1:b8: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:70:06:70:98:5B:56:76:98:5E:C5:C2:3D:CF:84:DC:DD:F0:7E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:de:87:a8:d7:1c:de:4b:f3:fd:bb:88:e5:1f:dc:4b:5b:0c: 0c:49:34:bb:5c:be:b6:f3:c7:67:92:39:68:e5:03:9f:ef:a5: d0:dd:77:b2:3d:65:4c:0f:6c:ab:bf:5f:a2:64:5c:5c:c6:b2: 28:9e:34:91:cd:d9:f5:4d:d8:0e:21:71:03:c4:4d:2e:88:35: 27:e9:1f:cb:f5:2e:a8:5b:0a:5a:0f:26:44:eb:fe:0a:a3:a8: e0:cb:1a:54:8b:ca:69:fe:09:52:95:21:6c:fb:0d:90:77:1f: 44:97:9a:16:6f:32:7d:bd:e0:5a:60:83:5f:10:d1:42:6e:14: 78:6d:cd:a1:de:b8:e8:92:08:ea:e4:13:81:77:70:f2:f1:36: 3b:e3:5f:e6:87:0c:4d:53:a4:a4:2d:e7:59:da:24:4c:4a:47: 36:43:4a:c6:57:88:f6:a6:13:12:45:31:07:8a:e0:58:69:d0: a7:f0:92:e1:ea:41:de:27:2b:9f:23:11:7a:a9:58:c1:79:57: c3:cc:db:40:b6:b7:34:ca:07:e4:10:28:5c:b0:e0:aa:5a:cb: 29:fc:98:c6:72:4e:0e:6d:c2:b2:88:d6:b8:2d:cc:0d:15:36: d8:23:9f:ed:30:7f:ec:09:d5:c3:01:e7:2c:9f:d4:6a:1f:90: a4:11:5c:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OrJeO2bQI3FewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MmIwMmM0ZDUtMDM3My00MTcxLTgwODMtOTljYTgwYWMzYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnjc67YJlTP68lokncyzaruZHpZAVg2uTEUb WK0CEk+Pi/iOT3WSTccvhX8GRAeqW+sDUY2QsBj6j9BmNqnCKCU93PgToZpAUFCH sWMs0pTrmy52sxR02Ji8owcf/92HaqSevUjqLtVr94efbpWtP+y/7vc7iuedKTNf ZUXZNmKZj34pjI5++SgvN2ZGQPwVj15S6xlktR2+LzZ8M2kSmSAwdLXJX3IlfAET XDXNM4bHuSkkgb2KSQmFy1z7JFajLkWQqKl5q2yLj0Gl/ZqyQif74HdSzyfu/cXA YDV9VGXDMZYiWPv4NY3FkcrwxA57WVhPNrI57c6y4CiYwbhhhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5wBnCYW1Z2mF7Fwj3PhNzd8H6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvOTczYTk2YTItMDE2Mi0z NWU3LTkwZGItZjQ4ODJmZGRmOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPeh6jXHN5L8/27iOUf3EtbDAxJNLtcvrbzx2eSOWjlA5/vpdDdd7I9 ZUwPbKu/X6JkXFzGsiieNJHN2fVN2A4hcQPETS6INSfpH8v1LqhbCloPJkTr/gqj qODLGlSLymn+CVKVIWz7DZB3H0SXmhZvMn294Fpgg18Q0UJuFHhtzaHeuOiSCOrk E4F3cPLxNjvjX+aHDE1TpKQt51naJExKRzZDSsZXiPamExJFMQeK4Fhp0KfwkuHq Qd4nK58jEXqpWMF5V8PM20C2tzTKB+QQKFyw4Kpayyn8mMZyTg5twrKI1rgtzA0V Ntgjn+0wf+wJ1cMB5yyf1GofkKQRXPA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:40 2025 by rpki-client