$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa File: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (raw, json) Hash identifier: O37gPkeFZX4QV2lGsk9khnSUVdnVn+Zk5Hq3lfoq9mQ= Subject key identifier: B3:1E:E6:19:32:63:25:29:4F:FA:17:B3:C1:34:18:74:57:BA:D5:23 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584AA160E29078DF73CDBD7BAF80 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 46687 IP address blocks: 64.82.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e2:90:78:df:73:cd:bd:7b:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=896bb4bd-70ec-4aff-961f-e98a3ee15035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d6:90:6b:ea:a7:7c:2a:98:a5:13:50:33:35: e2:40:58:a5:c2:a6:b8:1b:d0:1d:aa:ce:64:05:0f: 2a:a9:64:af:a9:fb:17:1d:47:a0:39:8a:64:ed:0a: dd:b6:66:2f:7b:26:a9:09:b6:12:df:63:9a:e8:6a: 31:d5:9c:17:c9:ea:92:f4:32:61:eb:dd:c7:eb:77: 60:e8:e7:61:8f:f7:32:23:51:65:41:ac:c3:45:f2: f5:66:9a:43:80:0b:d1:58:d5:7b:da:cf:d1:3d:93: 97:30:ba:82:d2:6f:f3:6f:51:c9:92:81:89:f3:86: 76:10:ca:ab:a3:6c:d5:11:ab:5b:b8:25:be:e2:6d: 86:0a:ca:d1:40:f4:15:f5:9a:2b:e9:42:03:15:f1: ea:64:01:4e:8f:e4:d9:26:6c:bf:0f:67:ca:1a:bf: 6d:be:5d:bd:ba:2f:05:c2:58:ca:f3:c8:de:93:ba: 34:30:60:01:e4:4b:4b:30:dd:a9:15:75:dd:a5:c9: b4:a1:7c:9a:c2:bd:dc:2e:ad:2d:93:9d:d3:1e:32: 4b:ed:05:7b:48:0f:d2:23:3c:16:8e:68:1d:c0:f2: 49:87:98:c8:b5:d0:26:c0:97:b7:20:b2:47:de:e9: 6c:ba:d8:92:cd:20:b8:40:a5:03:e9:d4:60:76:12: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:E6:19:32:63:25:29:4F:FA:17:B3:C1:34:18:74:57:BA:D5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 64.82.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3b:e9:50:a7:af:de:48:9b:1f:54:e2:af:92:0e:25:96:18: 37:7d:6f:36:09:b3:d8:04:6a:79:2c:ba:63:99:7a:f5:eb:60: 31:dd:9f:82:22:ea:13:7c:28:c8:10:39:e6:ea:ff:6e:09:e0: d5:89:5b:3d:31:e4:96:26:3e:cc:53:76:75:75:8a:62:06:6f: 7d:b4:98:bf:b3:46:55:ad:c4:06:4f:61:47:66:f0:39:40:e8: 34:3b:9e:03:83:95:02:f0:3b:3a:d1:81:b0:65:ae:18:6e:52: 79:d4:95:b1:01:92:0f:6f:34:59:64:c2:98:18:89:1b:bd:d0: 4d:72:f0:14:66:36:bf:8f:20:44:bd:e0:f2:23:5b:4f:71:e4: bb:6e:98:f5:e2:92:fb:52:12:74:6e:5f:32:42:84:67:e9:32: 53:e5:06:52:c9:89:9c:be:f4:5b:fc:55:13:c4:6b:61:5e:14: 3c:1a:a4:80:4d:7a:16:8b:50:c3:0a:13:39:48:ed:d0:86:e2: 50:11:ef:a4:1f:b9:55:f4:70:25:0e:68:fe:78:4b:61:d0:11: bd:d3:f7:70:13:8c:88:24:48:dc:dd:35:cf:ca:a2:94:d3:41: 63:ba:d1:f6:50:a7:84:fc:e2:26:a9:d1:46:86:8e:ba:3c:de: 4a:58:53:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOKQeN9zzb17r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ODk2YmI0YmQtNzBlYy00YWZmLTk2MWYtZTk4YTNlZTE1MDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdaQa+qnfCqYpRNQMzXiQFilwqa4G9Adqs5k BQ8qqWSvqfsXHUegOYpk7QrdtmYveyapCbYS32Oa6Gox1ZwXyeqS9DJh693H63dg 6Odhj/cyI1FlQazDRfL1ZppDgAvRWNV72s/RPZOXMLqC0m/zb1HJkoGJ84Z2EMqr o2zVEatbuCW+4m2GCsrRQPQV9Zor6UIDFfHqZAFOj+TZJmy/D2fKGr9tvl29ui8F wljK88jek7o0MGAB5EtLMN2pFXXdpcm0oXyawr3cLq0tk53THjJL7QV7SA/SIzwW jmgdwPJJh5jItdAmwJe3ILJH3ulsutiSzSC4QKUD6dRgdhKMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMe5hkyYyUpT/oXs8E0GHRXutUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYTY0YmJmYWEtYTE0Ny0z OWY5LWJmMWYtZGJhZTk5NzFkOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI76VCnr95Imx9U4q+SDiWWGDd9bzYJs9gEanksumOZevXrYDHdn4Ii 6hN8KMgQOebq/24J4NWJWz0x5JYmPsxTdnV1imIGb320mL+zRlWtxAZPYUdm8DlA 6DQ7ngODlQLwOzrRgbBlrhhuUnnUlbEBkg9vNFlkwpgYiRu90E1y8BRmNr+PIES9 4PIjW09x5LtumPXikvtSEnRuXzJChGfpMlPlBlLJiZy+9Fv8VRPEa2FeFDwapIBN ehaLUMMKEzlI7dCG4lAR76QfuVX0cCUOaP54S2HQEb3T93ATjIgkSNzdNc/KopTT QWO60fZQp4T84iap0UaGjro83kpYUys= -----END CERTIFICATE-----Generated at Sat Aug 9 20:48:08 2025 by rpki-client