$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/b8de485f-6d19-38dc-b135-710947fa94af.roa File: b8de485f-6d19-38dc-b135-710947fa94af.roa (raw, json) Hash identifier: bqJAV5nf0jwfxFSu4BIH7R67u3n/eodeGeYUKdVGTj8= Subject key identifier: 1E:A8:34:2E:69:92:E6:4A:2C:36:1C:E0:A7:99:8F:4F:EB:0C:99:27 Certificate issuer: /CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Certificate serial: 010D0C9F4328584AADF10E778759707EE2125680 Authority key identifier: 5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/b8de485f-6d19-38dc-b135-710947fa94af.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14860 IP address blocks: 64.209.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0e:77:87:59:70:7e:e2:12:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=84a546d6-b955-48f3-b1d7-ed8635e4ec23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:c7:8c:fa:2e:97:de:20:c7:80:fe:c3:29: 2e:34:9a:53:4d:46:a8:bd:0f:5b:d1:ad:1e:b0:c8: b1:73:3a:65:99:c6:ff:0f:e3:d0:05:bf:78:ef:92: 24:79:b0:d8:4c:54:b8:32:49:2a:b0:68:96:84:52: 51:c3:be:c3:88:73:f1:42:60:1f:ca:3f:df:9e:79: 49:e0:a3:01:6a:16:7c:ac:ba:07:79:e1:77:2f:47: 2a:f9:d6:10:ef:4b:dc:37:e4:ab:5f:a9:33:d2:bf: ba:73:18:df:85:20:9a:62:9a:e4:2c:73:e8:b4:90: 30:db:b7:46:10:0c:6e:97:9d:6f:90:61:70:93:0d: 37:19:37:85:f9:99:20:46:4d:e7:87:a2:5f:fc:82: 93:ac:0a:ad:dc:34:27:e5:fd:4b:18:48:ac:f5:fd: a5:6b:da:20:b2:a9:7e:c0:a4:ec:46:83:1f:5b:19: b7:53:48:19:ad:df:5a:40:ad:ae:2d:37:6b:77:c0: 65:a3:f4:5f:5c:f7:12:64:db:5d:75:10:c9:ed:69: 6d:c9:ab:73:cc:4b:94:7b:ea:cd:8e:aa:48:03:96: 6c:65:4e:37:60:1c:dc:e5:de:36:15:09:76:6a:c0: 17:25:19:a3:03:a8:af:1d:ca:93:78:18:9d:58:89: 2f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A8:34:2E:69:92:E6:4A:2C:36:1C:E0:A7:99:8F:4F:EB:0C:99:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/b8de485f-6d19-38dc-b135-710947fa94af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl X509v3 Authority Key Identifier: keyid:5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer sbgp-ipAddrBlock: critical IPv4: 64.209.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7a:d0:7b:2e:a5:8e:97:c8:a0:b4:88:6d:4d:42:5b:f5:b0: 1f:00:a3:97:15:c2:37:b7:ae:d1:2e:7e:fc:1f:6e:b5:80:86: a8:96:87:24:1c:bd:f4:61:25:af:ad:a5:2a:bb:3c:55:58:2e: 4d:1d:5e:01:50:48:1a:3b:5b:79:71:f0:e1:b9:5a:0b:98:7c: 61:d4:31:cc:bc:c8:2a:fd:a2:5e:3e:4b:0d:b1:90:9b:ef:00: d3:a1:7a:90:83:b9:7f:41:1c:a3:67:b3:55:83:17:7c:e8:21: 0c:5c:af:9b:77:5f:5c:a2:e6:cd:6c:d5:17:97:f4:95:b4:2d: a4:07:1e:aa:f5:12:49:b5:f9:50:01:c2:88:9f:32:09:03:b9: 95:ad:83:da:3e:af:87:c7:44:2d:fa:76:ad:6c:3b:e4:d5:18: ba:2d:dd:1d:3c:2b:cb:b9:74:b8:4f:be:1e:57:30:33:4d:3d: 4b:b8:84:25:a9:44:db:ad:fa:d0:79:55:d0:c6:cd:40:0e:60: cc:55:40:c2:30:f5:28:35:00:b3:f6:68:fb:13:2e:b8:59:b4: 2d:38:f8:ce:11:9b:f3:c5:6b:89:c3:54:6d:d0:b9:1e:fa:c1: 64:07:d1:51:a0:5c:30:89:77:bb:91:25:70:4a:b2:97:a5:7e: 43:bb:a7:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Q53h1lwfuISVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYwODFlZTUtMWFmMS00YTA0LTlmZWUtMjU0MGJjZWY5 NWMzMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ODRhNTQ2ZDYtYjk1NS00OGYzLWIxZDctZWQ4NjM1ZTRlYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3/HjPoul94gx4D+wykuNJpTTUaovQ9b0a0e sMixczplmcb/D+PQBb9475IkebDYTFS4MkkqsGiWhFJRw77DiHPxQmAfyj/fnnlJ 4KMBahZ8rLoHeeF3L0cq+dYQ70vcN+SrX6kz0r+6cxjfhSCaYprkLHPotJAw27dG EAxul51vkGFwkw03GTeF+ZkgRk3nh6Jf/IKTrAqt3DQn5f1LGEis9f2la9ogsql+ wKTsRoMfWxm3U0gZrd9aQK2uLTdrd8Blo/RfXPcSZNtddRDJ7WltyatzzEuUe+rN jqpIA5ZsZU43YBzc5d42FQl2asAXJRmjA6ivHcqTeBidWIkvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6oNC5pkuZKLDYc4KeZj0/rDJknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4 MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQwYmNlZjk1YzMvYjhkZTQ4NWYtNmQxOS0z OGRjLWIxMzUtNzEwOTQ3ZmE5NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmYwODFlZTUtMWFmMS00YTA0LTlm ZWUtMjU0MGJjZWY5NWMzL2ZmMDgxZWU1LTFhZjEtNGEwNC05ZmVlLTI1NDBiY2Vm OTVjMy5jcmwwHwYDVR0jBBgwFoAUXHpd+mU6MtrmNfmS2mlcrfZ+gsUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQw YmNlZjk1YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQNGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId60HsupY6XyKC0iG1NQlv1sB8Ao5cVwje3rtEufvwfbrWAhqiWhyQc vfRhJa+tpSq7PFVYLk0dXgFQSBo7W3lx8OG5WguYfGHUMcy8yCr9ol4+Sw2xkJvv ANOhepCDuX9BHKNns1WDF3zoIQxcr5t3X1yi5s1s1ReX9JW0LaQHHqr1Ekm1+VAB woifMgkDuZWtg9o+r4fHRC36dq1sO+TVGLot3R08K8u5dLhPvh5XMDNNPUu4hCWp RNut+tB5VdDGzUAOYMxVQMIw9Sg1ALP2aPsTLrhZtC04+M4Rm/PFa4nDVG3QuR76 wWQH0VGgXDCJd7uRJXBKspelfkO7pyA= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:32 2025 by rpki-client