$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa File: 89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa (raw, json) Hash identifier: 7DhkXTy+I5Pib3ABID236i806cCFi4lvMQB9r5UHM88= Subject key identifier: F8:F0:26:22:E7:81:34:89:77:40:74:41:58:E8:D5:22:E3:9F:20:79 Certificate issuer: /CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0 Certificate serial: 010D0C9F4328584AA85BA57B0350778ED197CE20 Authority key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 9009 IP address blocks: 64.43.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a5:7b:03:50:77:8e:d1:97:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=99c5138c-8864-42c2-b78e-813c7040ab27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:88:04:aa:1d:70:16:c2:50:ba:d4:60:78: 2d:e3:0d:dd:8c:e3:da:8a:c1:88:57:f6:f8:5f:e2: e1:aa:69:81:f6:c1:13:76:82:db:99:e9:d8:a6:0c: 56:8b:f9:26:5e:a9:e0:7f:34:65:56:69:ba:0f:ed: 16:cb:78:53:b5:16:71:40:b2:d9:d2:08:cb:e3:e7: 06:08:61:16:74:79:c4:d2:f9:b0:9c:35:48:08:4b: 0b:79:8c:c6:55:b8:55:7f:07:b6:de:96:ca:1c:d5: 94:1f:26:68:8b:98:87:86:64:71:41:0f:7b:04:48: 50:f8:04:4c:1d:b8:d9:e4:2f:16:6b:d3:36:c4:4e: d7:e9:3d:c8:c7:90:14:8d:91:a1:84:5a:7c:fe:15: e4:de:1a:e1:e7:be:5e:07:ac:7c:c7:fa:d4:92:a3: 3c:40:f0:cd:a6:95:7f:d8:bf:ca:49:77:44:25:2c: e1:b6:08:58:90:0b:06:5e:43:aa:8b:97:75:8c:f3: 86:fb:4c:0a:b1:17:03:9d:90:bf:be:42:4b:b2:c0: 73:36:79:38:df:b4:ee:7e:64:93:83:7d:b3:b6:4b: ac:00:dc:e3:1a:53:f6:84:93:37:ca:93:91:6c:5e: ab:60:d6:d8:55:85:48:22:96:f6:43:a7:f4:af:96: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F0:26:22:E7:81:34:89:77:40:74:41:58:E8:D5:22:E3:9F:20:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl X509v3 Authority Key Identifier: keyid:AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer sbgp-ipAddrBlock: critical IPv4: 64.43.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a5:ee:c7:50:c4:e3:75:81:b5:ae:87:8d:1b:ce:23:01:79: d6:1c:de:b6:57:de:65:19:ed:41:11:8a:46:80:2d:b8:9b:4f: f8:0f:08:d1:f6:81:89:cd:2e:60:82:49:ae:0d:aa:78:bd:2d: 37:b7:14:b9:ce:8d:7f:27:ca:ff:93:b1:03:37:77:da:2d:1d: b7:8a:80:d3:9e:95:17:15:6f:58:46:4c:fb:ae:cd:f2:56:59: 79:6a:52:83:bb:bd:e6:98:95:34:df:08:21:bf:50:44:39:75: 27:fe:5b:48:79:b1:bf:8c:df:26:fa:50:27:e0:88:20:33:51: cc:8f:a5:9f:bd:70:a9:4d:11:cc:0f:53:6b:ca:2e:a3:77:3d: 41:32:f9:c6:c8:c9:81:e1:ca:16:22:83:d6:a2:43:f4:45:9f: b9:4f:9c:8e:58:16:ee:ac:a6:01:75:79:34:e7:04:2a:a5:d3: 7b:7d:35:85:21:7d:72:75:04:c6:8b:dd:2f:69:37:2b:31:78: 2a:16:43:81:b7:e0:d2:0e:93:de:df:f6:dd:77:c1:2a:df:10: 7a:33:b1:9c:2e:a5:27:4b:07:d5:d3:45:86:b5:2c:8d:d5:41: 86:a0:07:83:c9:bc:99:97:d3:49:b8:e7:30:6a:f4:59:51:51: 7f:c3:bc:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6V7A1B3jtGXziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1NGUzNWMtYTZjOS00N2UwLWI3ODgtODY2YmQzMzNk OGUwMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk OTljNTEzOGMtODg2NC00MmMyLWI3OGUtODEzYzcwNDBhYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aOIBKodcBbCULrUYHgt4w3djOPaisGIV/b4 X+LhqmmB9sETdoLbmenYpgxWi/kmXqngfzRlVmm6D+0Wy3hTtRZxQLLZ0gjL4+cG CGEWdHnE0vmwnDVICEsLeYzGVbhVfwe23pbKHNWUHyZoi5iHhmRxQQ97BEhQ+ARM HbjZ5C8Wa9M2xE7X6T3Ix5AUjZGhhFp8/hXk3hrh575eB6x8x/rUkqM8QPDNppV/ 2L/KSXdEJSzhtghYkAsGXkOqi5d1jPOG+0wKsRcDnZC/vkJLssBzNnk437TufmST g32ztkusANzjGlP2hJM3ypORbF6rYNbYVYVIIpb2Q6f0r5aF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjwJiLngTSJd0B0QVjo1SLjnyB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0 ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZiZDMzM2Q4ZTAvODlkMTEzMGItOGEyNC0z MWE3LTgxZWQtNGIwZmQyYTFhOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWM1NGUzNWMtYTZjOS00N2UwLWI3 ODgtODY2YmQzMzNkOGUwLzFjNTRlMzVjLWE2YzktNDdlMC1iNzg4LTg2NmJkMzMz ZDhlMC5jcmwwHwYDVR0jBBgwFoAUrANbXHq8eCeIEPJdUipaUCSmsqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZi ZDMzM2Q4ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQCvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCl7sdQxON1gbWuh40bziMBedYc3rZX3mUZ7UERikaALbibT/gPCNH2 gYnNLmCCSa4Nqni9LTe3FLnOjX8nyv+TsQM3d9otHbeKgNOelRcVb1hGTPuuzfJW WXlqUoO7veaYlTTfCCG/UEQ5dSf+W0h5sb+M3yb6UCfgiCAzUcyPpZ+9cKlNEcwP U2vKLqN3PUEy+cbIyYHhyhYig9aiQ/RFn7lPnI5YFu6spgF1eTTnBCql03t9NYUh fXJ1BMaL3S9pNysxeCoWQ4G34NIOk97f9t13wSrfEHozsZwupSdLB9XTRYa1LI3V QYagB4PJvJmX00m45zBq9FlRUX/DvJE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:07:52 2025 by rpki-client