$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa File: 982f6e65-bd39-36a1-a90d-3b469a869a64.roa (raw, json) Hash identifier: sXJKTB7eP4oobaFRyUFEnKoDfbk8QsIoWiV49DMkpKg= Subject key identifier: 9D:17:37:56:DD:C5:A9:9C:E9:05:5C:90:52:25:CE:C4:FB:40:EF:72 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584ABA80C21B0808D4EB9B98A240 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 397873 IP address blocks: 64.20.208.0/24 maxlen: 24 66.248.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c2:1b:08:08:d4:eb:9b:98:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=ec002923-4210-47f8-8b31-9cc18c93b950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:d4:cd:15:0a:12:4c:83:33:0f:86:b9:41: 87:79:b3:2a:79:57:f4:82:ce:75:37:cb:ef:1a:fa: 79:33:39:f4:d0:c8:c1:8c:46:02:27:c6:6f:63:2b: 0c:d3:bd:9c:4e:c6:46:2e:c1:9f:df:29:1b:d5:24: 85:d2:93:94:73:53:27:9a:d0:b7:60:ef:37:d0:d7: 55:96:7c:29:1a:70:8b:81:48:4b:c4:80:e6:1b:85: 4d:e8:aa:67:d5:42:fa:8d:5f:5e:24:ad:b1:e3:85: 4c:1d:4f:6d:7d:20:2f:69:e0:58:1a:67:fb:78:a5: d6:97:51:36:6c:c2:96:09:d7:df:24:ad:bb:c7:54: d8:0d:e4:04:86:61:02:60:2d:d3:a2:01:8d:5d:70: 8d:6f:8d:28:77:13:a7:78:c0:e5:a2:16:e3:5e:02: 47:01:3a:c3:56:dd:7f:df:dc:c5:fa:fe:bb:5b:85: bd:4a:fb:3f:9d:aa:a6:42:9d:a4:60:f7:99:fb:99: fa:16:30:a3:19:1b:18:fb:db:86:30:8f:66:48:19: 16:00:7b:bd:c4:e2:8b:10:db:b2:88:a3:12:61:96: 16:e1:62:68:a9:cd:24:85:0a:67:c2:53:9b:78:f6: 09:9b:ea:24:7e:77:6a:75:08:11:b3:d7:09:47:eb: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:37:56:DD:C5:A9:9C:E9:05:5C:90:52:25:CE:C4:FB:40:EF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.208.0/24 66.248.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2b:1d:89:f1:e3:11:fd:fa:01:94:6b:c9:c0:18:c9:cd:b8: 32:1f:0b:5d:a8:15:4e:49:5c:54:67:04:f2:50:fc:53:4d:00: 05:80:f4:07:d4:b7:21:de:95:0e:98:88:eb:56:73:a6:63:3b: ed:b2:47:56:f8:63:01:a3:7b:df:37:15:40:e2:26:f5:20:62: a3:b8:44:62:66:43:67:07:ad:a1:54:e8:34:04:4b:50:79:0c: 14:fb:e9:00:0e:88:85:59:3f:48:c8:f2:0e:4f:d3:56:a7:ba: f8:94:6f:a9:2c:bb:20:9d:fc:b6:02:10:72:72:ff:7b:43:2a: e2:79:b8:ab:7a:60:5d:3e:d2:0d:9f:af:81:1d:07:c2:d5:b6: c7:a7:d4:55:cd:7e:ab:aa:90:b2:08:d6:43:92:f4:65:bc:a1: 88:f1:a3:34:de:b5:c7:9b:59:91:b9:2d:85:3f:73:68:c9:84: 26:93:af:e3:f6:d3:4d:ee:6d:cd:8c:40:f2:4c:24:62:47:bf: 53:a6:19:f6:a8:31:71:2e:f4:1d:dd:a4:43:0d:c7:2e:6a:02: af:97:3c:2d:c8:43:98:59:9e:a3:ed:20:7f:c2:6b:79:80:1a: 1c:23:4f:74:89:81:af:c2:80:fd:a0:24:0d:f2:5e:e3:f8:4e: ae:2f:8d:9c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq6gMIbCAjU65uYokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZWMwMDI5MjMtNDIxMC00N2Y4LThiMzEtOWNjMThjOTNiOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq/UzRUKEkyDMw+GuUGHebMqeVf0gs51N8vv Gvp5Mzn00MjBjEYCJ8ZvYysM072cTsZGLsGf3ykb1SSF0pOUc1MnmtC3YO830NdV lnwpGnCLgUhLxIDmG4VN6Kpn1UL6jV9eJK2x44VMHU9tfSAvaeBYGmf7eKXWl1E2 bMKWCdffJK27x1TYDeQEhmECYC3TogGNXXCNb40odxOneMDlohbjXgJHATrDVt1/ 39zF+v67W4W9Svs/naqmQp2kYPeZ+5n6FjCjGRsY+9uGMI9mSBkWAHu9xOKLENuy iKMSYZYW4WJoqc0khQpnwlObePYJm+okfndqdQgRs9cJR+tJbQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ0XN1bdxamc6QVckFIlzsT7QO9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOTgyZjZlNjUtYmQzOS0z NmExLWE5MGQtM2I0NjlhODY5YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBTQAwQA QvjwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABQrHYnx4xH9+gGUa8nAGMnNuDIfC12oFU5JXFRnBPJQ/FNN AAWA9AfUtyHelQ6YiOtWc6ZjO+2yR1b4YwGje983FUDiJvUgYqO4RGJmQ2cHraFU 6DQES1B5DBT76QAOiIVZP0jI8g5P01anuviUb6ksuyCd/LYCEHJy/3tDKuJ5uKt6 YF0+0g2fr4EdB8LVtsen1FXNfquqkLII1kOS9GW8oYjxozTetcebWZG5LYU/c2jJ hCaTr+P2003ubc2MQPJMJGJHv1OmGfaoMXEu9B3dpEMNxy5qAq+XPC3IQ5hZnqPt IH/Ca3mAGhwjT3SJga/CgP2gJA3yXuP4Tq4vjZw= -----END CERTIFICATE-----Generated at Thu Aug 7 11:18:55 2025 by rpki-client