$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa File: 41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa (raw, json) Hash identifier: JRPCckqX1bYFXE5Y7uJcskkRddArsB7s0uOE6GelAGw= Subject key identifier: C0:D2:FC:F3:46:62:6B:B5:64:D3:E1:1E:65:9F:19:1E:2B:FD:E3:31 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584A90A0A80F886877B5BA186B40 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22709 IP address blocks: 64.70.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:a8:0f:88:68:77:b5:ba:18:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=511a6a58-443b-4d06-aa50-881791560ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:50:23:e7:43:4f:60:cd:22:c0:e3:ec:c4: d4:00:ce:5c:76:6f:24:db:25:39:03:ca:b4:e8:bb: 10:3d:16:6a:37:66:de:89:d2:f4:35:f1:98:0a:3a: 2f:3b:8a:c3:90:13:16:ae:88:6e:5f:95:71:f8:4d: 3d:fa:e9:1e:fb:db:06:f5:3e:6b:78:c3:2f:f9:73: 0b:d6:15:7c:5c:f1:d1:68:aa:26:b1:8c:e4:bf:00: 82:c6:f9:d0:a2:86:dc:3f:1f:c4:49:8c:22:46:1a: 88:c5:3b:65:78:10:2d:5f:35:8f:fb:cb:f0:2c:a7: 49:09:63:94:e2:6e:82:c3:dc:56:95:2c:60:3c:b1: ff:26:c5:8c:ca:9c:56:cf:4d:d4:59:56:c9:65:22: 19:d1:7e:f3:1a:d9:d4:0c:ed:9e:60:0e:93:45:8d: d0:52:36:7c:b7:17:48:87:48:90:54:dc:ef:f4:67: e8:1f:9e:0f:b5:55:9f:75:75:cd:f8:4e:76:30:84: fa:78:d3:36:9d:7b:58:a7:78:5d:13:05:38:56:c7: 52:15:a0:ea:e1:91:b1:55:f8:f7:0d:cb:53:dd:f3: 0c:d2:bc:91:ef:0c:81:60:d9:b4:84:aa:42:9c:6e: e9:7c:50:fc:c8:6f:8a:f2:5c:2b:75:3d:59:5a:61: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D2:FC:F3:46:62:6B:B5:64:D3:E1:1E:65:9F:19:1E:2B:FD:E3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 64.70.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1a:b6:d7:f6:9a:31:a9:a6:21:b3:e6:d1:e3:2d:77:14:2a: f4:58:fc:68:67:07:c2:95:d0:e8:0a:b8:90:ba:10:e5:f9:cc: 36:ae:0c:ee:e2:34:6d:89:d7:bf:c4:a6:e6:f4:d7:25:a6:cd: d9:b4:70:9d:a8:86:0d:1e:af:98:f1:ec:28:f2:b9:e3:78:23: 3d:50:c8:f9:04:5e:93:c8:b8:e5:61:e4:6f:ed:3e:9b:65:87: 05:81:20:09:5f:8b:00:44:46:e9:81:ca:a0:6d:89:49:a3:99: 6b:36:c8:eb:20:52:1c:f6:8d:8d:de:9c:56:d0:c7:ea:26:51: 78:13:1b:ab:42:c0:12:93:30:d5:27:81:ba:2e:53:75:ac:e2: 8a:04:f3:e0:00:d4:e4:b2:52:09:b5:58:df:34:f1:41:2d:97: 6e:32:9d:81:51:4b:79:49:83:de:48:19:c7:1b:39:2d:f8:eb: 99:9b:ca:55:01:69:2b:71:ab:8c:66:27:c3:04:1f:2b:49:24: 16:ac:5a:67:6c:ac:53:6b:35:cd:48:ee:29:a8:23:5f:4d:0e: 08:c8:16:b6:2f:73:07:27:fd:7f:3e:2a:43:ac:4d:31:ff:67: 19:9e:2c:af:37:42:75:9b:0a:7a:47:0e:d9:f6:65:ce:4a:7d: 66:07:a1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoKgPiGh3tboYa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NTExYTZhNTgtNDQzYi00ZDA2LWFhNTAtODgxNzkxNTYwY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFJQI+dDT2DNIsDj7MTUAM5cdm8k2yU5A8q0 6LsQPRZqN2beidL0NfGYCjovO4rDkBMWrohuX5Vx+E09+uke+9sG9T5reMMv+XML 1hV8XPHRaKomsYzkvwCCxvnQoobcPx/ESYwiRhqIxTtleBAtXzWP+8vwLKdJCWOU 4m6Cw9xWlSxgPLH/JsWMypxWz03UWVbJZSIZ0X7zGtnUDO2eYA6TRY3QUjZ8txdI h0iQVNzv9GfoH54PtVWfdXXN+E52MIT6eNM2nXtYp3hdEwU4VsdSFaDq4ZGxVfj3 DctT3fMM0ryR7wyBYNm0hKpCnG7pfFD8yG+K8lwrdT1ZWmHCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDS/PNGYmu1ZNPhHmWfGR4r/eMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvNDFiYzNhOGEtOWIyMy0z NmU1LWFjZDgtMGY4ZmE1MTEzZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQEaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8attf2mjGppiGz5tHjLXcUKvRY/GhnB8KV0OgKuJC6EOX5zDauDO7i NG2J17/Epub01yWmzdm0cJ2ohg0er5jx7CjyueN4Iz1QyPkEXpPIuOVh5G/tPptl hwWBIAlfiwBERumByqBtiUmjmWs2yOsgUhz2jY3enFbQx+omUXgTG6tCwBKTMNUn gbouU3Ws4ooE8+AA1OSyUgm1WN808UEtl24ynYFRS3lJg95IGccbOS3465mbylUB aStxq4xmJ8MEHytJJBasWmdsrFNrNc1I7imoI19NDgjIFrYvcwcn/X8+KkOsTTH/ ZxmeLK83QnWbCnpHDtn2Zc5KfWYHoQI= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:21 2025 by rpki-client