$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa File: b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa (raw, json) Hash identifier: nS/8IQNew/qQibuD3Z4y7hekJghrHYc9e4c/9D5SZsM= Subject key identifier: 4C:40:4F:01:0B:DB:6E:04:62:91:D2:0F:54:AF:84:01:5F:AB:FA:1D Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584AADF1190CF4C596F5A8C16080 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 11260 IP address blocks: 64.178.128.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:19:0c:f4:c5:96:f5:a8:c1:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=de5875f6-8d60-4534-b4bc-045cbec714d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:f8:76:10:f0:47:66:34:98:ac:37:41:cd: af:bc:a5:cc:f6:a0:45:d6:73:b0:42:f8:f7:f3:e6: 69:df:7b:fb:54:ec:cd:25:c9:57:a0:cd:a2:55:32: 78:25:24:39:24:f8:a6:2c:0c:05:c8:2c:31:49:89: 33:01:a8:5b:ef:09:87:e4:d0:a4:27:3d:15:b7:a0: 81:33:e0:98:58:c9:64:06:47:19:5c:b9:36:7d:2e: e7:c4:96:af:25:00:aa:8c:29:11:3f:08:a3:eb:8d: 43:e3:84:54:4c:27:cc:a2:26:b1:9d:02:bf:dc:97: ed:86:b1:1a:c4:36:56:ef:47:1f:e4:8a:e3:fc:5b: a3:a1:2a:46:63:23:47:98:42:19:8a:28:49:ca:2c: 03:b0:11:25:d5:2d:dd:e6:de:82:c2:3e:92:be:c3: fb:5b:6f:34:c2:5a:b3:80:d9:c9:ee:2f:f5:7c:2a: 44:2e:49:5e:20:99:f3:e9:59:bf:42:fb:35:d5:e0: 76:05:1e:cc:47:c1:27:b0:3a:d1:8b:2d:af:7f:a0: 81:04:b2:46:4c:5e:5f:d3:5d:af:38:65:c7:91:0b: 89:ef:71:db:ac:32:7e:54:45:a5:c6:aa:55:b3:44: 5b:1e:74:07:e7:28:fa:57:91:09:83:88:23:9e:84: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:40:4F:01:0B:DB:6E:04:62:91:D2:0F:54:AF:84:01:5F:AB:FA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 64.178.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8a:ba:bf:e8:8a:9d:fb:59:be:85:92:d2:74:45:76:40:07: b4:53:38:03:42:e8:02:c7:22:00:f0:4f:d7:7e:27:7d:5b:ef: 8f:60:2f:ed:ce:eb:2b:e8:7d:44:cb:10:bb:0e:98:0d:35:84: ab:66:71:2c:17:86:eb:cb:5c:10:88:7f:c0:b8:e2:bb:f1:5f: eb:a1:7f:ca:b2:e8:9f:ba:32:d6:87:68:05:56:9b:f1:f4:6a: 1f:15:51:99:f9:e0:b9:2b:b4:9c:59:46:86:c5:62:ee:1e:48: 92:ec:c2:b2:09:3d:a9:cc:70:eb:3f:42:7c:2a:87:f3:73:2f: ac:0c:12:1a:26:31:b2:fe:f5:64:db:86:86:8a:40:67:01:e0: c4:85:58:a6:05:25:d2:db:93:da:eb:9c:89:7f:52:f8:65:e9: f2:61:8f:08:6d:97:df:cb:c6:22:8d:d5:a4:cc:a5:30:a3:e5: 8c:3b:3b:11:06:51:a0:95:ad:71:02:b1:00:d1:16:e2:3b:e0: 96:bb:87:35:aa:e4:c2:a0:d8:de:73:b9:ac:b3:b6:d1:e0:c0: ca:09:10:ec:22:f2:86:0f:60:38:ad:ef:ba:5b:e6:bd:3e:82: 40:c6:b9:b8:01:cb:86:fa:95:5d:e3:78:45:79:0d:31:7b:66: 99:05:a9:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RkM9MWW9ajBYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZGU1ODc1ZjYtOGQ2MC00NTM0LWI0YmMtMDQ1Y2JlYzcxNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1D4dhDwR2Y0mKw3Qc2vvKXM9qBF1nOwQvj3 8+Zp33v7VOzNJclXoM2iVTJ4JSQ5JPimLAwFyCwxSYkzAahb7wmH5NCkJz0Vt6CB M+CYWMlkBkcZXLk2fS7nxJavJQCqjCkRPwij641D44RUTCfMoiaxnQK/3JfthrEa xDZW70cf5Irj/FujoSpGYyNHmEIZiihJyiwDsBEl1S3d5t6Cwj6SvsP7W280wlqz gNnJ7i/1fCpELkleIJnz6Vm/Qvs11eB2BR7MR8EnsDrRiy2vf6CBBLJGTF5f012v OGXHkQuJ73HbrDJ+VEWlxqpVs0RbHnQH5yj6V5EJg4gjnoQilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExATwEL224EYpHSD1SvhAFfq/odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvYjUxZWNjODgtOWM1Zi0z NWRkLWE5YmUtMzg1ZmI4Y2FjNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQLKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmKur/oip37Wb6FktJ0RXZAB7RTOANC6ALHIgDwT9d+J31b749gL+3O 6yvofUTLELsOmA01hKtmcSwXhuvLXBCIf8C44rvxX+uhf8qy6J+6MtaHaAVWm/H0 ah8VUZn54LkrtJxZRobFYu4eSJLswrIJPanMcOs/Qnwqh/NzL6wMEhomMbL+9WTb hoaKQGcB4MSFWKYFJdLbk9rrnIl/Uvhl6fJhjwhtl9/LxiKN1aTMpTCj5Yw7OxEG UaCVrXECsQDRFuI74Ja7hzWq5MKg2N5zuayzttHgwMoJEOwi8oYPYDit77pb5r0+ gkDGubgBy4b6lV3jeEV5DTF7ZpkFqRc= -----END CERTIFICATE-----Generated at Tue Aug 5 22:56:53 2025 by rpki-client