$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa File: 4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa (raw, json) Hash identifier: xEbkf8HTfksfthtyIDK2eCBvz5s5WScYBNgDoSNmNRw= Subject key identifier: 81:E0:F6:A5:E6:36:EB:1C:82:98:96:11:75:3F:4B:C8:31:BE:0F:66 Certificate issuer: /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26 Certificate serial: 010D0C9F4328584AC2E0DC60811A50113A700180 Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 11260 IP address blocks: 67.213.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:dc:60:81:1a:50:11:3a:70:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=bc429658-56be-417d-b1eb-0943d4fb1a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:cd:08:c4:60:d5:4f:9d:97:75:a1:39:8b: 73:a0:ad:dc:68:b5:72:b4:f4:46:61:5c:8d:7c:4f: f5:21:6c:1b:57:12:e6:7a:61:94:57:28:23:90:83: 90:f4:55:42:11:ed:b7:76:59:c3:de:bc:f7:b9:0d: bf:40:b5:0a:db:d3:54:72:5d:f2:bd:c9:95:13:74: 19:af:28:ab:9b:60:db:f1:06:96:54:7f:6b:87:b7: f7:3c:a4:78:6f:8b:6b:36:18:06:b9:e4:4d:ba:4a: cd:c5:ed:96:39:6f:61:1b:65:72:b8:56:99:aa:70: df:e5:b5:36:7d:60:20:1a:5c:94:2d:b0:ad:ab:54: 3b:07:6f:26:e2:56:31:d3:7e:96:89:c3:0e:78:fc: 86:df:24:7e:63:0b:3b:2d:17:ac:4a:71:d2:f7:17: d3:3b:d6:3c:a6:70:9e:0c:5b:11:d5:e4:5e:3f:f4: d9:bb:38:dd:a5:75:66:0d:3d:85:db:00:db:05:10: f5:ea:c9:eb:a2:0e:2e:df:87:b3:f1:c6:1b:e2:94: f3:89:4b:17:af:a7:50:15:d3:89:1f:12:ac:39:b9: ff:88:e5:c5:b1:ec:7c:6a:6e:54:9b:d6:d8:e4:b6: 9b:5f:33:70:51:95:12:ec:39:8f:73:64:21:f8:62: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E0:F6:A5:E6:36:EB:1C:82:98:96:11:75:3F:4B:C8:31:BE:0F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl X509v3 Authority Key Identifier: keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer sbgp-ipAddrBlock: critical IPv4: 67.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c0:dd:19:43:3d:d4:df:ea:9b:ff:be:b0:1b:cb:ef:24:ef: d9:c3:95:68:29:de:09:e9:4c:1f:18:13:4e:78:7e:0e:d2:3f: 45:ea:6d:0c:82:26:0e:f8:65:6d:ed:ee:2f:6c:d9:fe:75:b0: d9:8e:6e:2c:37:69:5f:1f:f1:61:e6:c3:bb:d8:fe:1f:94:5f: 53:27:56:44:96:32:40:19:81:4b:ec:f5:57:45:c8:17:90:b1: ed:65:ea:d3:6b:0e:79:4a:32:4f:30:2d:a1:b0:d9:38:b3:8c: 84:e2:b8:6a:61:c0:68:da:bc:0b:e5:7b:fa:1e:07:99:c9:58: 85:22:2a:ef:4c:90:89:3b:cf:07:36:ce:e7:f2:6f:40:d4:63: c3:90:20:3c:25:b9:7e:b8:7d:f7:c5:43:bf:f1:b0:c3:dd:9d: b4:40:b0:67:1b:ea:1f:26:eb:33:92:4a:ba:7b:b6:40:43:65: 64:8d:36:f3:53:6a:11:98:9f:81:f7:e5:1c:06:50:d9:64:fd: c6:1b:1f:7e:8e:6b:32:c5:90:09:62:14:cd:38:00:8a:46:b4: 25:bc:5c:81:ad:36:91:bc:95:96:e6:fd:29:84:05:a3:cb:6d: e5:04:44:77:f7:4e:ad:5e:5a:57:0c:f4:c8:ef:e6:0f:47:e8: db:39:ad:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NxggRpQETpwAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVh YTI2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YmM0Mjk2NTgtNTZiZS00MTdkLWIxZWItMDk0M2Q0ZmIxYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwPNCMRg1U+dl3WhOYtzoK3caLVytPRGYVyN fE/1IWwbVxLmemGUVygjkIOQ9FVCEe23dlnD3rz3uQ2/QLUK29NUcl3yvcmVE3QZ ryirm2Db8QaWVH9rh7f3PKR4b4trNhgGueRNukrNxe2WOW9hG2VyuFaZqnDf5bU2 fWAgGlyULbCtq1Q7B28m4lYx036WicMOePyG3yR+Yws7LResSnHS9xfTO9Y8pnCe DFsR1eReP/TZuzjdpXVmDT2F2wDbBRD16snrog4u34ez8cYb4pTziUsXr6dQFdOJ HxKsObn/iOXFsex8am5Um9bY5LabXzNwUZUS7DmPc2Qh+GKitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHg9qXmNuscgpiWEXU/S8gxvg9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0 OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvNGI2ZDczZGEtMThmYS0z MDAyLTk4NjItNmIxY2I5ZDhkZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmNhNDhhZDAtZjYxMy00YzY2LWIw N2EtNjQ3M2Q4YTVhYTI2L2JjYTQ4YWQwLWY2MTMtNGM2Ni1iMDdhLTY0NzNkOGE1 YWEyNi5jcmwwHwYDVR0jBBgwFoAUlVtTPU6qo+ng50X9/OZIWSdLLRIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDcz ZDhhNWFhMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHA3RlDPdTf6pv/vrAby+8k79nDlWgp3gnpTB8YE054fg7SP0XqbQyC Jg74ZW3t7i9s2f51sNmObiw3aV8f8WHmw7vY/h+UX1MnVkSWMkAZgUvs9VdFyBeQ se1l6tNrDnlKMk8wLaGw2TizjITiuGphwGjavAvle/oeB5nJWIUiKu9MkIk7zwc2 zufyb0DUY8OQIDwluX64fffFQ7/xsMPdnbRAsGcb6h8m6zOSSrp7tkBDZWSNNvNT ahGYn4H35RwGUNlk/cYbH36OazLFkAliFM04AIpGtCW8XIGtNpG8lZbm/SmEBaPL beUERHf3Tq1eWlcM9Mjv5g9H6Ns5rak= -----END CERTIFICATE-----Generated at Wed Aug 6 13:11:28 2025 by rpki-client