$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json) Hash identifier: x+DluZuEuBAw9JZo81JuxsRILFCaCtRIelHrpqzT+4U= Subject key identifier: 0A:55:94:A2:39:78:56:5B:F0:90:E2:71:BF:74:2B:18:51:81:99:F6 Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Certificate serial: 010D0C9F4328584AB220C11F6168A02296910500 Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 18863 IP address blocks: 64.28.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c1:1f:61:68:a0:22:96:91:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=1a919d3d-7a20-48de-96f8-8cfd67e661dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:dd:ee:00:5a:a7:60:79:6f:8c:1d:64:ec: 96:dd:11:65:33:bd:88:d8:e6:76:53:c8:b8:f6:2e: 2b:93:24:c3:d3:29:0a:7a:54:fd:17:b6:60:57:66: e2:39:54:ae:3d:e8:8c:14:a7:11:26:32:3c:03:bd: f5:f7:37:bc:24:8b:de:07:7b:6e:c6:81:e4:ac:13: d4:2c:77:ee:1a:64:ab:ce:83:16:fe:47:94:3a:c5: 45:8e:68:97:da:c7:cf:45:a6:2b:65:6b:85:5e:f4: 3d:78:c3:06:db:94:ea:2d:bf:52:dc:91:d2:7f:ba: dd:06:d0:20:2f:39:8c:bb:92:7f:1f:86:0b:af:2c: 9a:d2:96:11:a2:da:4d:ee:81:4f:0b:36:4f:5f:e7: ef:33:3d:e4:86:ab:05:4a:4c:c6:d2:47:57:9f:03: 35:4f:b3:cf:86:f4:32:d4:3f:b5:d0:79:5e:9e:8b: c1:c1:1d:96:19:ef:b6:a2:ea:c5:cd:73:54:d7:a8: a0:ba:e5:be:38:9b:8b:96:de:a1:1e:a5:04:ec:20: 5d:f6:ff:94:59:db:dc:a8:7a:da:25:9d:19:a8:57: fd:80:77:8d:13:36:2d:42:7f:38:5e:df:68:e3:96: a3:b8:d4:90:e8:62:10:db:da:c4:c3:22:50:03:53: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:55:94:A2:39:78:56:5B:F0:90:E2:71:BF:74:2B:18:51:81:99:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl X509v3 Authority Key Identifier: keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer sbgp-ipAddrBlock: critical IPv4: 64.28.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:98:a3:2c:e9:4f:95:d8:a3:36:20:35:f6:4b:62:53:16:da: 97:a0:b2:80:31:14:d8:61:f3:fa:7f:f4:84:5e:b4:bb:bc:95: 6d:3a:13:73:12:5d:65:24:ae:39:cb:ed:a4:ee:aa:1a:2e:b6: fb:3a:59:db:5f:27:ce:a9:49:70:be:2d:91:f5:70:6d:e9:6c: 4d:e7:b2:f5:68:f7:a7:29:e5:a4:73:db:36:1f:61:c3:5a:f5: fe:9e:ea:3d:d6:f1:a3:9d:dd:c2:57:d3:00:22:b9:59:b8:c9: 34:61:cd:06:3f:20:18:cb:7b:7a:ef:40:f7:81:8e:97:ef:9f: 59:5a:d4:c0:60:1b:a7:88:0c:fa:b2:e6:d4:16:ed:fd:9f:2e: 0b:24:5b:9b:4e:12:f1:5e:5c:75:d2:77:33:87:3f:b7:81:d1: 40:e7:7a:47:70:53:6c:f8:38:3e:3f:6b:65:00:d3:fb:4c:4e: d1:b7:cd:0e:8c:23:e2:4c:48:66:3e:e6:76:9f:d5:f5:78:07: af:46:4e:da:ba:b7:8c:88:80:cb:41:df:c8:a4:9d:ec:31:49: da:bb:89:05:10:ac:9e:fd:0a:d5:6f:18:31:4c:d6:25:f5:27: db:aa:d8:0a:a4:86:e1:36:29:2a:bb:68:21:cb:5c:23:9e:15: d7:c0:95:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMEfYWigIpaRBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2ODNhMTYtZTljNC00ODlhLWE1ZTktM2JiMWI0MDFm MTkwMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWE5MTlkM2QtN2EyMC00OGRlLTk2ZjgtOGNmZDY3ZTY2MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q/d7gBap2B5b4wdZOyW3RFlM72I2OZ2U8i4 9i4rkyTD0ykKelT9F7ZgV2biOVSuPeiMFKcRJjI8A7319ze8JIveB3tuxoHkrBPU LHfuGmSrzoMW/keUOsVFjmiX2sfPRaYrZWuFXvQ9eMMG25TqLb9S3JHSf7rdBtAg LzmMu5J/H4YLryya0pYRotpN7oFPCzZPX+fvMz3khqsFSkzG0kdXnwM1T7PPhvQy 1D+10HlenovBwR2WGe+2ourFzXNU16iguuW+OJuLlt6hHqUE7CBd9v+UWdvcqHra JZ0ZqFf9gHeNEzYtQn84Xt9o45ajuNSQ6GIQ29rEwyJQA1Mr7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApVlKI5eFZb8JDicb90KxhRgZn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4 M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIxYjQwMWYxOTAvZDg1NjFjYzAtNDJkZS0z OThjLTgyYTYtMmNhZTQ4N2VjNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI2ODNhMTYtZTljNC00ODlhLWE1 ZTktM2JiMWI0MDFmMTkwLzFiNjgzYTE2LWU5YzQtNDg5YS1hNWU5LTNiYjFiNDAx ZjE5MC5jcmwwHwYDVR0jBBgwFoAUupsdKD3J+C8QFwwOpRR5BRY1TZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIx YjQwMWYxOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGYoyzpT5XYozYgNfZLYlMW2pegsoAxFNhh8/p/9IRetLu8lW06E3MS XWUkrjnL7aTuqhoutvs6WdtfJ86pSXC+LZH1cG3pbE3nsvVo96cp5aRz2zYfYcNa 9f6e6j3W8aOd3cJX0wAiuVm4yTRhzQY/IBjLe3rvQPeBjpfvn1la1MBgG6eIDPqy 5tQW7f2fLgskW5tOEvFeXHXSdzOHP7eB0UDnekdwU2z4OD4/a2UA0/tMTtG3zQ6M I+JMSGY+5naf1fV4B69GTtq6t4yIgMtB38iknewxSdq7iQUQrJ79CtVvGDFM1iX1 J9uq2AqkhuE2KSq7aCHLXCOeFdfAlbY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:05 2025 by rpki-client