$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/818c230a-1189-3b7e-8037-d4dd46a31c50.roa File: 818c230a-1189-3b7e-8037-d4dd46a31c50.roa (raw, json) Hash identifier: 3uJizd3J1N/lpCBleXmCWffn1KlJPc2rlNhQ7FAwMQk= Subject key identifier: B7:1F:61:E6:AF:3B:D2:42:52:FA:E2:DC:B2:32:60:41:AF:18:46:52 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A9FFB84A855AF06C5F3040480 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/818c230a-1189-3b7e-8037-d4dd46a31c50.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 834 IP address blocks: 64.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:84:a8:55:af:06:c5:f3:04:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=c46b5be4-f600-48d0-9f0c-36f2a38a27a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:ea:95:a4:aa:76:12:67:8e:1b:fb:c4:f5: cd:81:60:32:c5:fd:b6:17:5c:92:a8:c6:ce:4a:9b: 25:9a:0b:24:9a:50:57:fd:5b:d7:9e:a6:e0:f7:98: bf:30:38:d2:4f:8f:76:c0:bf:1a:bf:72:a5:0b:dd: 71:69:0d:c1:28:54:84:a0:f3:2e:e7:21:30:a2:3d: 2c:56:9b:59:ed:1f:24:61:71:23:bf:3a:ca:aa:b2: 05:68:8c:55:20:f3:c0:5d:f0:2e:18:03:4e:e8:65: bc:1a:a9:e6:f6:0f:00:8c:3f:17:52:d6:46:51:c7: 44:c8:b6:75:ac:a3:dd:c1:e2:ff:fd:1a:c6:78:47: 1f:7a:5e:13:d6:73:dd:f2:4b:42:68:49:d0:91:01: c9:a3:4a:57:80:9e:93:05:06:e3:bf:f5:22:4f:e3: 0e:1d:d6:a2:ce:d7:39:46:0b:87:2c:0b:62:9c:94: 4a:3c:ab:26:83:8d:3f:e6:0b:2e:b4:e9:6a:b6:c3: da:21:96:f1:9c:4e:8a:99:26:57:d9:98:94:61:19: 90:1f:a9:00:1a:8f:a8:13:e7:03:bb:fe:26:b2:fb: 6f:a3:b7:db:b5:99:b5:bd:c7:da:a8:ef:4e:02:62: 00:48:23:51:e7:21:d0:ce:59:43:b0:ef:46:1c:b4: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1F:61:E6:AF:3B:D2:42:52:FA:E2:DC:B2:32:60:41:AF:18:46:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/818c230a-1189-3b7e-8037-d4dd46a31c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:47:cc:18:bf:aa:bb:28:8a:3c:d3:19:49:7d:27:a8:ca:94: 69:eb:a1:16:b6:66:fe:54:11:a5:c3:63:3b:ae:6d:24:ef:b9: 19:4f:c2:19:69:35:fd:f1:b9:0e:6b:61:7f:cd:79:6b:b3:2f: 12:8e:6b:3d:e6:8e:c1:4b:79:6e:b4:e8:5d:61:9b:ec:51:f0: 6e:b5:3f:ec:06:27:0a:eb:46:eb:57:f3:84:d5:bf:c7:32:14: 0b:10:83:07:44:04:f6:53:70:44:3c:67:c4:8b:fb:37:aa:a2: f3:e4:07:c5:e6:ad:0a:b6:4c:5b:85:65:c8:6b:a1:93:7f:13: 58:0c:0f:74:48:ff:a3:10:79:c2:6d:f5:30:be:3c:1a:c5:95: ef:e4:0b:dd:7f:6e:f7:48:3b:bf:0d:82:aa:e8:3c:4b:61:dc: 4b:7b:08:e5:82:cc:78:e3:b9:de:30:b3:3e:1e:8f:f3:2e:06: 98:e8:3a:cf:57:ab:2c:8d:01:4e:66:50:93:29:24:09:12:9d: 2f:c4:cd:ea:bb:3e:56:15:e2:fc:4d:fd:df:92:1b:d6:21:48: 7a:a8:1e:27:cc:e1:10:1c:67:5d:41:3b:6c:26:65:b2:9a:37: 4f:63:c1:83:9e:21:61:d4:15:57:58:4c:3d:ea:33:26:5c:84: 27:67:0c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4SoVa8GxfMEBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YzQ2YjViZTQtZjYwMC00OGQwLTlmMGMtMzZmMmEzOGEyN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSjqlaSqdhJnjhv7xPXNgWAyxf22F1ySqMbO SpslmgskmlBX/VvXnqbg95i/MDjST492wL8av3KlC91xaQ3BKFSEoPMu5yEwoj0s VptZ7R8kYXEjvzrKqrIFaIxVIPPAXfAuGANO6GW8Gqnm9g8AjD8XUtZGUcdEyLZ1 rKPdweL//RrGeEcfel4T1nPd8ktCaEnQkQHJo0pXgJ6TBQbjv/UiT+MOHdaiztc5 RguHLAtinJRKPKsmg40/5gsutOlqtsPaIZbxnE6KmSZX2ZiUYRmQH6kAGo+oE+cD u/4msvtvo7fbtZm1vcfaqO9OAmIASCNR5yHQzllDsO9GHLRiHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcfYeavO9JCUvri3LIyYEGvGEZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODE4YzIzMGEtMTE4OS0z YjdlLTgwMzctZDRkZDQ2YTMxYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJHzBi/qrsoijzTGUl9J6jKlGnroRa2Zv5UEaXDYzuubSTvuRlPwhlp Nf3xuQ5rYX/NeWuzLxKOaz3mjsFLeW606F1hm+xR8G61P+wGJwrrRutX84TVv8cy FAsQgwdEBPZTcEQ8Z8SL+zeqovPkB8XmrQq2TFuFZchroZN/E1gMD3RI/6MQecJt 9TC+PBrFle/kC91/bvdIO78NgqroPEth3Et7COWCzHjjud4wsz4ej/MuBpjoOs9X qyyNAU5mUJMpJAkSnS/Ezeq7PlYV4vxN/d+SG9YhSHqoHifM4RAcZ11BO2wmZbKa N09jwYOeIWHUFVdYTD3qMyZchCdnDNY= -----END CERTIFICATE-----Generated at Mon Aug 4 07:47:55 2025 by rpki-client