$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa File: a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa (raw, json) Hash identifier: FPDGfbt0JoViZl0QSYYaOP4iMQ4tqIcNtf6RceMMfuQ= Subject key identifier: 53:EE:84:50:64:3D:48:8C:73:4C:AF:E1:28:FB:AF:4B:1A:08:A4:41 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584AEBE64C0E4216BC281AAA3A40 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa Signing time: Wed 20 Aug 2025 17:39:45 +0000 ROA not before: Wed 20 Aug 2025 17:39:45 +0000 ROA not after: Tue 18 Nov 2025 18:39:45 +0000 asID: 29057 IP address blocks: 192.91.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:e6:4c:0e:42:16:bc:28:1a:aa:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Aug 20 17:39:45 2025 GMT Not After : Nov 18 18:39:45 2025 GMT Subject: CN=c0b2ea6e-6b45-426a-b313-bc63f432801e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:7d:23:c6:31:04:9b:92:28:11:ea:7a:88: 76:42:0b:6b:5d:64:4f:6b:30:07:b3:61:eb:08:b5: 9b:78:47:f8:4a:d4:78:33:13:59:b4:cc:90:30:51: 69:e3:c1:d6:70:9c:50:1d:55:95:89:5f:ea:a6:dc: f2:f5:cd:aa:2b:5a:b2:d4:47:4a:d8:7b:47:99:1a: ac:9d:6b:1d:20:1b:cb:4f:fa:c1:f8:d7:ef:ca:33: 98:f3:e9:ff:81:59:78:42:9c:38:f3:0b:e0:26:9b: 50:72:43:e4:a1:7e:a6:e7:be:d6:01:c9:25:9b:d9: fb:7b:3a:f2:43:d2:92:06:4a:3d:70:9e:43:3d:cd: 8b:7b:66:4e:e3:e9:e8:24:c1:f4:ff:9d:47:07:36: aa:fb:bf:4e:26:48:97:ce:d2:e5:81:66:89:81:20: e8:1a:28:c9:2f:28:6f:c6:3b:76:e8:c4:7b:e2:bd: 75:66:b8:ac:04:9e:d8:5b:d0:3b:62:d3:9e:a0:04: 4e:6a:11:6e:f2:81:ac:fc:8b:ec:32:6c:b6:0b:c1: 1a:aa:41:54:d7:ba:b1:95:cd:76:bd:77:fb:3b:b4: 89:1b:17:09:6d:1b:8f:5a:b5:43:f6:c3:d3:24:bc: 04:ec:07:19:1a:1a:5a:2d:27:54:a1:e5:4b:b5:7f: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EE:84:50:64:3D:48:8C:73:4C:AF:E1:28:FB:AF:4B:1A:08:A4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/a7b9c984-121f-38b6-83f4-f45ee1762fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.91.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9d:b0:bd:12:42:6e:e9:8d:89:b7:94:07:a1:22:b9:77:b8: 53:6d:82:df:0b:a5:50:c9:39:05:ec:85:f8:21:5c:47:2b:b1: de:a6:32:bc:a4:15:f0:1d:ef:4a:56:21:00:d1:b8:1f:50:bf: af:d9:de:ee:16:a4:ad:35:72:c3:e6:74:e4:2b:ff:78:13:09: f2:3d:51:66:60:92:ca:c3:1c:bf:76:a1:65:8d:54:0d:31:d1: 1c:95:ce:46:a6:6b:86:ea:6c:f9:76:77:59:43:43:60:9c:b6: 3b:17:1b:71:41:cb:f3:7f:11:d5:12:f1:ec:fc:1f:b8:a9:fa: 5b:03:47:85:b3:91:cb:df:1b:f5:fe:1c:12:17:11:29:9a:97: d1:17:df:ab:0d:db:57:af:32:52:cb:2c:85:55:26:b2:1b:8f: ae:bf:f0:b2:9a:20:b1:ce:42:8a:4a:29:08:45:95:fe:63:7e: d8:11:d8:58:70:6f:a6:c5:51:11:62:44:af:ca:8d:a1:f9:5c: 97:d1:4c:71:49:66:8b:9c:70:9b:3c:b1:50:d2:68:5c:16:64: b2:35:90:49:e8:5d:72:e0:67:7f:95:c5:a5:3d:05:6c:9d:85: 75:00:3a:6a:0f:97:b4:24:30:7b:79:ba:aa:25:63:fc:c4:d1: cb:45:95:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErr5kwOQha8KBqqOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI1MDgyMDE3Mzk0NVoXDTI1MTExODE4Mzk0NVowLzEtMCsGA1UEAxMk YzBiMmVhNmUtNmI0NS00MjZhLWIzMTMtYmM2M2Y0MzI4MDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAV9I8YxBJuSKBHqeoh2QgtrXWRPazAHs2Hr CLWbeEf4StR4MxNZtMyQMFFp48HWcJxQHVWViV/qptzy9c2qK1qy1EdK2HtHmRqs nWsdIBvLT/rB+NfvyjOY8+n/gVl4Qpw48wvgJptQckPkoX6m577WAcklm9n7ezry Q9KSBko9cJ5DPc2Le2ZO4+noJMH0/51HBzaq+79OJkiXztLlgWaJgSDoGijJLyhv xjt26MR74r11ZrisBJ7YW9A7YtOeoAROahFu8oGs/IvsMmy2C8EaqkFU17qxlc12 vXf7O7SJGxcJbRuPWrVD9sPTJLwE7AcZGhpaLSdUoeVLtX/JfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPuhFBkPUiMc0yv4Sj7r0saCKRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvYTdiOWM5ODQtMTIxZi0z OGI2LTgzZjQtZjQ1ZWUxNzYyZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmdsL0SQm7pjYm3lAehIrl3uFNtgt8LpVDJOQXshfghXEcrsd6mMryk FfAd70pWIQDRuB9Qv6/Z3u4WpK01csPmdOQr/3gTCfI9UWZgksrDHL92oWWNVA0x 0RyVzkama4bqbPl2d1lDQ2CctjsXG3FBy/N/EdUS8ez8H7ip+lsDR4WzkcvfG/X+ HBIXESmal9EX36sN21evMlLLLIVVJrIbj66/8LKaILHOQopKKQhFlf5jftgR2Fhw b6bFURFiRK/KjaH5XJfRTHFJZouccJs8sVDSaFwWZLI1kEnoXXLgZ3+VxaU9BWyd hXUAOmoPl7QkMHt5uqolY/zE0ctFla0= -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:56 2025 by rpki-client