$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cfd5200c-ec6a-32e1-8cb0-a4938c714449.roa File: cfd5200c-ec6a-32e1-8cb0-a4938c714449.roa (raw, json) Hash identifier: 9GFjlF59fsU6ZuggJYdd30pHEoRz/SN2ZK9wSwqZqsA= Subject key identifier: 6B:EB:D6:2D:5B:D0:5E:43:55:52:00:9C:7E:65:B6:74:41:D3:7C:BE Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A96368D73F355281D3E334980 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cfd5200c-ec6a-32e1-8cb0-a4938c714449.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 396253 IP address blocks: 97.64.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:8d:73:f3:55:28:1d:3e:33:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=95e2f5ab-2cb4-4308-8fe4-b7d8971b4fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:00:fb:ac:6c:6e:cd:20:00:56:88:2e:e4: f9:fd:54:de:a1:bf:58:19:a2:a4:00:83:ad:39:e6: ac:7c:91:fb:d0:54:db:3a:a7:31:9d:c3:d4:6c:ec: ac:0e:de:48:1b:10:7a:b2:50:77:e9:ee:57:9a:c4: 6c:5c:38:fd:56:43:a5:10:fd:cd:61:b8:22:88:14: 07:b5:5a:10:ea:9f:cc:4c:4f:eb:08:d7:0c:a0:bc: e6:8b:24:0a:e8:2e:2d:59:71:83:9d:7c:e7:79:ec: 22:8a:cb:78:40:f2:ce:5c:f3:45:48:fb:0c:0b:4d: bb:f8:e8:84:ff:ca:09:9a:e4:e0:0c:5d:ca:67:08: 3c:3f:ef:08:c2:f7:2a:a6:49:05:72:0b:0a:e9:53: b5:df:84:65:db:73:d7:c8:47:f5:1d:d1:a3:9d:de: 2e:f4:7a:55:a1:cc:c0:16:36:8e:35:4d:ae:13:17: 22:8f:6b:35:0f:2b:0b:1e:e1:8b:ca:1f:e0:07:b9: 64:31:79:00:9f:85:f7:b7:7f:d3:73:0f:dd:59:6e: 63:75:ed:91:ec:83:6a:42:d7:9e:a6:58:42:e9:ca: a5:dd:de:e2:64:37:2f:06:75:6c:30:87:e1:ce:d7: 9e:ab:74:08:a4:b3:43:9d:26:64:00:ee:53:aa:95: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EB:D6:2D:5B:D0:5E:43:55:52:00:9C:7E:65:B6:74:41:D3:7C:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cfd5200c-ec6a-32e1-8cb0-a4938c714449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 97.64.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:3f:48:92:08:e6:e7:df:42:43:9e:c5:85:84:3d:c2:db:30: 57:f0:10:9e:bb:e2:dd:90:29:7c:2b:d7:a6:15:d9:29:56:79: d4:e2:69:3c:a0:3e:ab:00:6e:0e:6c:b0:11:5f:e1:0b:51:e5: 15:d2:b8:dd:ff:7d:b4:de:93:db:6f:0f:e8:13:62:78:74:36: ac:ed:e9:ee:33:7c:07:a4:18:84:c3:32:0c:3f:e4:b6:1c:37: e4:9a:cf:44:35:d2:51:4d:8b:a5:09:68:06:cb:6f:d2:fd:a5: 91:43:2c:50:a7:16:45:85:37:4c:9c:b1:bc:87:28:39:c5:2f: e0:a4:26:a7:c3:9c:76:88:12:54:af:ed:00:1e:62:18:97:ec: 0a:f9:7d:72:09:7b:3e:aa:82:ca:f8:84:5c:eb:ec:f8:e6:3a: 97:bc:63:ee:fc:a9:10:48:df:1c:ac:a6:53:1b:ca:a5:9b:49: 17:2e:87:ef:0c:c7:60:75:6b:42:68:57:13:e8:e1:e5:c9:73: b9:b7:31:fe:42:1a:8a:98:ed:fe:3d:87:57:97:46:93:21:24: cc:fc:31:76:cb:aa:f9:4d:46:b2:d5:69:9c:21:32:c6:d7:76: 27:0d:8b:38:09:53:0e:ba:fc:d6:af:94:01:36:73:97:82:b4: 80:b0:66:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNo1z81UoHT4zSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OTVlMmY1YWItMmNiNC00MzA4LThmZTQtYjdkODk3MWI0ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdIA+6xsbs0gAFaILuT5/VTeob9YGaKkAIOt OeasfJH70FTbOqcxncPUbOysDt5IGxB6slB36e5XmsRsXDj9VkOlEP3NYbgiiBQH tVoQ6p/MTE/rCNcMoLzmiyQK6C4tWXGDnXzneewiist4QPLOXPNFSPsMC027+OiE /8oJmuTgDF3KZwg8P+8IwvcqpkkFcgsK6VO134Rl23PXyEf1HdGjnd4u9HpVoczA FjaONU2uExcij2s1DysLHuGLyh/gB7lkMXkAn4X3t3/Tcw/dWW5jde2R7INqQtee plhC6cql3d7iZDcvBnVsMIfhzteeq3QIpLNDnSZkAO5TqpWmdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvr1i1b0F5DVVIAnH5ltnRB03y+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2ZkNTIwMGMtZWM2YS0z MmUxLThjYjAtYTQ5MzhjNzE0NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYUAyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs/SJII5uffQkOexYWEPcLbMFfwEJ674t2QKXwr16YV2SlWedTiaTyg PqsAbg5ssBFf4QtR5RXSuN3/fbTek9tvD+gTYnh0Nqzt6e4zfAekGITDMgw/5LYc N+Saz0Q10lFNi6UJaAbLb9L9pZFDLFCnFkWFN0ycsbyHKDnFL+CkJqfDnHaIElSv 7QAeYhiX7Ar5fXIJez6qgsr4hFzr7PjmOpe8Y+78qRBI3xysplMbyqWbSRcuh+8M x2B1a0JoVxPo4eXJc7m3Mf5CGoqY7f49h1eXRpMhJMz8MXbLqvlNRrLVaZwhMsbX dicNizgJUw66/NavlAE2c5eCtICwZj8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:22 2025 by rpki-client