$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa File: 472a87dc-5a34-3721-9aec-494ce65fdcb4.roa (raw, json) Hash identifier: U1uvMT4KtYZwdZvDLBp3vpM7c+KUy03N9bcdz+Q9zSQ= Subject key identifier: 60:42:5E:3B:4A:08:75:D8:EC:7C:6A:37:CA:BA:55:31:93:04:A2:EE Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584AB91B965047517B33C14DE980 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 395035 IP address blocks: 64.239.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:96:50:47:51:7b:33:c1:4d:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d97ecf91-69cc-4b53-b420-ad088de6bc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:ba:35:96:31:ba:84:ec:2c:08:dd:5f:fc: 70:31:4d:53:2f:76:64:d3:fd:d2:b4:d3:8a:8f:e3: b5:14:0e:6e:94:0b:4e:09:d3:01:f4:78:f2:db:50: fb:52:68:5a:95:c1:be:2d:9a:22:94:8a:0f:87:be: a9:e5:6c:1b:9f:e8:a5:03:6c:16:d6:1f:4c:95:ad: bc:95:60:d2:39:56:db:a8:a7:20:f4:77:f6:18:40: ab:55:4f:54:6f:5b:24:40:4b:2f:58:9c:86:5c:fe: cf:6e:fc:c8:9c:08:2e:4c:91:ea:70:af:34:54:b4: a3:f4:9f:f0:97:ea:c4:9f:d7:88:30:40:98:86:d3: a8:5e:b5:11:79:6a:2f:50:6f:eb:df:cd:55:54:a3: 5c:59:b5:62:94:91:c4:62:40:36:0e:51:1c:bf:3b: b0:9f:3d:ca:66:6a:d3:d2:4d:48:e2:6b:b1:21:5a: ea:65:1b:a9:59:77:18:0e:d6:ba:c9:e4:35:93:d5: a9:0e:68:e2:51:d3:ad:63:71:e1:3c:0b:47:d0:68: eb:fd:95:aa:fc:86:95:df:67:70:34:2f:16:9b:de: cf:91:5f:ad:c3:ee:a0:cf:5b:49:7c:4a:95:79:4b: 78:41:5c:c2:46:2d:cd:af:be:b0:0a:f3:f0:73:d7: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:42:5E:3B:4A:08:75:D8:EC:7C:6A:37:CA:BA:55:31:93:04:A2:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:44:b8:e3:a8:db:4c:9c:b6:93:69:f7:92:fb:b8:15:86:cf: a6:f5:20:0e:ca:c4:53:f1:2c:72:8c:8d:b4:0b:c2:da:2f:1d: 85:6c:0e:58:56:56:c3:6a:0f:28:82:05:1d:21:c5:11:58:5c: 67:c2:26:c4:3a:65:e0:dd:24:9e:bf:fc:73:3c:14:45:cf:76: 6a:71:dd:62:59:ed:b8:40:d6:7a:45:8c:00:d6:0b:ff:ab:d8: 46:0d:f3:7d:05:7c:58:3c:ea:a2:55:d6:1c:d8:ec:c4:cb:a5: 8c:01:5b:47:33:6a:b0:7a:9a:8f:3d:b5:94:81:29:6d:1a:8c: d3:55:6e:01:5d:cc:ea:06:a9:a1:ce:b5:9a:a5:13:96:60:5e: c3:75:33:16:e5:1a:87:6a:98:18:4f:99:6d:10:02:46:60:62: 3d:fc:cb:31:b9:9d:dd:eb:ef:41:41:9a:49:8b:3f:cf:dc:e3: 6d:ec:52:2f:53:77:da:71:0f:03:96:ec:56:b5:05:c0:e5:b8: e9:ee:e3:7b:ce:34:63:9d:75:65:bd:f3:0e:68:13:40:62:67: 17:92:64:00:e2:48:97:41:12:76:dc:00:32:2d:1a:8b:4b:46: 5d:93:35:a0:3a:4b:41:af:1a:90:75:d8:10:42:fb:a7:9d:93: 1c:b8:48:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5ZQR1F7M8FN6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDk3ZWNmOTEtNjljYy00YjUzLWI0MjAtYWQwODhkZTZiYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj26NZYxuoTsLAjdX/xwMU1TL3Zk0/3StNOK j+O1FA5ulAtOCdMB9Hjy21D7UmhalcG+LZoilIoPh76p5Wwbn+ilA2wW1h9Mla28 lWDSOVbbqKcg9Hf2GECrVU9Ub1skQEsvWJyGXP7PbvzInAguTJHqcK80VLSj9J/w l+rEn9eIMECYhtOoXrUReWovUG/r381VVKNcWbVilJHEYkA2DlEcvzuwnz3KZmrT 0k1I4muxIVrqZRupWXcYDta6yeQ1k9WpDmjiUdOtY3HhPAtH0Gjr/ZWq/IaV32dw NC8Wm97PkV+tw+6gz1tJfEqVeUt4QVzCRi3Nr76wCvPwc9cBuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBCXjtKCHXY7HxqN8q6VTGTBKLuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvNDcyYTg3ZGMtNWEzNC0z NzIxLTlhZWMtNDk0Y2U2NWZkY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFEuOOo20yctpNp95L7uBWGz6b1IA7KxFPxLHKMjbQLwtovHYVsDlhW VsNqDyiCBR0hxRFYXGfCJsQ6ZeDdJJ6//HM8FEXPdmpx3WJZ7bhA1npFjADWC/+r 2EYN830FfFg86qJV1hzY7MTLpYwBW0czarB6mo89tZSBKW0ajNNVbgFdzOoGqaHO tZqlE5ZgXsN1MxblGodqmBhPmW0QAkZgYj38yzG5nd3r70FBmkmLP8/c423sUi9T d9pxDwOW7Fa1BcDluOnu43vONGOddWW98w5oE0BiZxeSZADiSJdBEnbcADItGotL Rl2TNaA6S0GvGpB12BBC+6edkxy4SN4= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:47 2025 by rpki-client