$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa File: f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (raw, json) Hash identifier: wtFV+EyZoUKhU2fb5E9dwwob0towO+3YyNK97QeGT08= Subject key identifier: 6B:4E:39:C4:84:32:E3:86:A0:E8:56:44:71:46:E6:57:25:C0:E9:96 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584AB91B963DCFAD567F21ED3120 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 395035 IP address blocks: 64.239.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:96:3d:cf:ad:56:7f:21:ed:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=c6cf438e-8a72-4d24-a22d-a66ef1bd6029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:c8:f9:c6:15:e0:d7:0f:c7:e0:e5:1e:46: fc:38:fc:d1:e3:9e:66:25:2e:5b:77:94:d3:34:a1: c7:19:ad:30:56:6c:70:67:d1:c0:20:1f:f1:e3:d6: 41:18:27:65:ab:fa:11:ac:0d:09:55:c6:f2:d3:ce: 73:63:54:39:59:b0:fc:6f:05:ef:59:30:33:50:7c: bf:c9:8a:f4:73:6d:8e:5a:71:c4:b8:b8:d3:2e:5b: c0:b2:d7:4d:9f:4e:06:0f:78:73:0e:c5:3c:01:dc: d5:76:90:2f:b3:15:ff:06:1d:33:d7:5f:63:b7:38: 6a:ce:a1:1d:33:ec:9c:6c:30:53:b4:c2:85:78:d3: c0:08:5e:f6:b1:6a:a1:dd:2f:9c:f8:0f:ff:9d:46: 92:27:00:ba:98:df:34:63:b3:7b:3a:8a:77:00:0b: a6:20:59:64:e8:6a:0f:b1:e1:eb:0d:ae:2b:04:40: bc:d7:bb:4e:3c:c7:ca:dd:ce:bd:92:d1:d4:47:57: 5d:c8:03:5f:31:d5:a0:8e:ed:5f:0b:c8:b7:a9:34: e2:97:0c:fa:98:3a:f7:8d:b8:9d:e0:bd:67:9f:ff: e0:b3:05:ac:0a:9a:dd:ab:a3:e6:b5:b6:d7:5a:bd: 88:df:cb:7e:22:d8:64:a2:e9:a5:8c:11:70:78:74: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4E:39:C4:84:32:E3:86:A0:E8:56:44:71:46:E6:57:25:C0:E9:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:58:8b:b3:1b:6d:04:25:66:72:01:19:2b:17:e4:f2:22:fa: d5:92:e1:e4:5f:9e:32:c5:ec:6f:9a:a9:f2:7a:bb:3d:27:c8: 4e:9a:b4:86:81:d9:17:3e:64:ce:a3:7c:80:cb:92:67:c3:aa: e0:96:23:33:61:20:a4:d8:c3:4c:12:19:20:16:4e:af:8c:00: 52:9a:d2:8b:48:65:a7:44:d7:1f:19:5b:6c:43:09:ad:a3:bd: dd:a6:55:fe:a9:0e:8c:73:4a:f3:bf:e4:9d:5c:26:31:b6:37: 92:47:68:08:ad:5a:e8:7f:10:fd:0c:c4:99:d6:2f:dc:37:9b: 69:6e:5b:39:b6:39:46:5e:2f:ed:5e:88:3b:a9:fb:58:fd:7b: 0e:ee:6e:58:f0:e4:2d:5a:0c:7c:67:20:b5:73:b4:9b:7a:f0: 96:9e:c0:a8:a7:89:c7:34:de:15:f1:e0:77:9d:23:b4:af:c9: be:40:7e:8f:02:be:b2:c2:26:0e:e1:52:ea:c6:61:5a:ee:13: f6:4e:22:37:eb:99:ef:fc:58:be:13:db:a5:d5:64:fd:f1:91: 83:59:64:fd:9f:38:b5:2d:7d:4d:ed:be:29:71:a2:68:a4:67: 4b:09:46:75:76:7c:d7:8a:02:93:b0:22:20:d2:86:a5:ba:f6: e1:a0:15:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5Y9z61WfyHtMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzZjZjQzOGUtOGE3Mi00ZDI0LWEyMmQtYTY2ZWYxYmQ2MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS7I+cYV4NcPx+DlHkb8OPzR455mJS5bd5TT NKHHGa0wVmxwZ9HAIB/x49ZBGCdlq/oRrA0JVcby085zY1Q5WbD8bwXvWTAzUHy/ yYr0c22OWnHEuLjTLlvAstdNn04GD3hzDsU8AdzVdpAvsxX/Bh0z119jtzhqzqEd M+ycbDBTtMKFeNPACF72sWqh3S+c+A//nUaSJwC6mN80Y7N7Oop3AAumIFlk6GoP seHrDa4rBEC817tOPMfK3c69ktHUR1ddyANfMdWgju1fC8i3qTTilwz6mDr3jbid 4L1nn//gswWsCprdq6PmtbbXWr2I38t+IthkoumljBFweHR3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtOOcSEMuOGoOhWRHFG5lclwOmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZjc5NDA1N2EtNmFjYi0z ZTBjLWFmYWMtYWIyM2I0ZDJhMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhYi7MbbQQlZnIBGSsX5PIi+tWS4eRfnjLF7G+aqfJ6uz0nyE6atIaB 2Rc+ZM6jfIDLkmfDquCWIzNhIKTYw0wSGSAWTq+MAFKa0otIZadE1x8ZW2xDCa2j vd2mVf6pDoxzSvO/5J1cJjG2N5JHaAitWuh/EP0MxJnWL9w3m2luWzm2OUZeL+1e iDup+1j9ew7ubljw5C1aDHxnILVztJt68JaewKinicc03hXx4HedI7Svyb5Afo8C vrLCJg7hUurGYVruE/ZOIjfrme/8WL4T26XVZP3xkYNZZP2fOLUtfU3tvilxomik Z0sJRnV2fNeKApOwIiDShqW69uGgFTI= -----END CERTIFICATE-----Generated at Mon Aug 4 18:18:27 2025 by rpki-client