$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json) Hash identifier: 3q0E6WKx3sxekr6LRKidq0CuNci26FrUUriftUsuziU= Subject key identifier: 1A:60:8D:4C:5A:7F:2F:40:AA:74:E5:B8:D8:3B:5A:0E:EE:97:95:88 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584A9E961FC454C0042AF0C17A00 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 64.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1f:c4:54:c0:04:2a:f0:c1:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=23a0a0c4-d4d9-43ea-bea8-cd74b21de290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:01:63:11:fe:f2:d1:3f:60:55:8a:8f:bd:6c: 52:2d:e4:08:6d:4e:b2:54:f8:23:cf:27:cd:40:f0: 79:c8:0c:f4:99:0d:aa:ef:94:d8:2e:44:b6:f6:5d: ca:6e:fd:5d:02:d6:e6:0f:08:ee:85:68:05:62:33: c0:b2:47:7e:cb:bc:82:41:9a:9e:d4:a8:42:a3:ed: 88:e4:1c:ca:1a:60:f6:6b:52:d4:60:9a:b5:5c:05: 0b:ec:e6:7c:0f:07:4d:fa:94:3d:ba:c9:42:f9:4f: d1:55:73:d5:0b:cb:c8:9c:5a:62:96:2b:10:f0:a8: c1:9d:b8:4a:06:0b:ff:81:ee:7e:0b:a3:0d:85:fd: 4a:27:00:2b:83:ae:e0:29:82:82:b4:23:c6:9b:c4: 6c:14:08:b8:e6:6e:9f:d4:aa:fe:a5:62:c9:90:09: 62:0e:ad:6e:91:ca:1a:23:95:7c:f7:bb:75:49:82: 4a:a1:3d:69:55:a4:0e:9e:60:ea:26:47:fb:94:78: 91:c9:76:23:04:bc:fd:c5:87:af:3e:14:ee:60:65: 3b:df:ed:0e:37:c5:04:97:f3:f2:15:96:8c:a8:bf: 9c:e9:6f:7f:a2:77:d3:e0:b5:22:0d:2b:3a:f7:db: 0a:a7:84:57:1c:8f:6b:b8:de:76:f7:91:d6:52:a5: ec:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:8D:4C:5A:7F:2F:40:AA:74:E5:B8:D8:3B:5A:0E:EE:97:95:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:f7:91:20:a0:5f:90:4e:37:2a:02:07:06:db:94:91:67:5a: 4e:3b:0d:74:33:eb:e8:61:0d:97:3b:ae:13:e8:f5:08:d9:6a: 61:c9:12:9a:a7:ea:cc:75:eb:b0:c9:54:b4:8e:5c:31:fc:e5: 87:ce:0b:24:92:9e:75:74:a5:3a:73:a0:12:8a:f9:b2:b9:9b: 1d:63:ff:0b:da:ca:52:c2:64:16:c0:a7:f9:fe:15:f7:e5:67: 82:2e:84:51:50:77:59:24:17:f0:83:df:7c:8c:af:c2:14:74: 10:c8:1b:3e:f6:95:e9:86:85:c9:79:8c:10:78:c4:8e:eb:b2: 4a:8b:3b:32:a3:ed:a9:79:57:af:af:ea:78:8b:a2:3d:e3:43: 39:39:fa:47:96:a3:46:dc:35:65:70:45:da:21:cf:b6:87:bf: 2e:90:30:36:70:72:25:01:0c:af:ee:b4:1a:0c:33:cf:5b:7a: 21:e3:7f:a4:53:1d:05:8a:94:01:9e:b4:64:24:89:5e:29:4f: 38:96:93:ae:cb:1a:7d:1c:0d:93:5e:fb:5a:9f:7e:72:b6:50: e4:68:4b:d2:7f:4e:ba:22:14:6a:28:11:b6:da:66:a2:3b:05: 70:84:9a:f1:cf:f3:5b:fe:75:26:ab:88:86:a9:92:0b:9d:5f: 09:af:2d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelh/EVMAEKvDBegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjNhMGEwYzQtZDRkOS00M2VhLWJlYTgtY2Q3NGIyMWRlMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwFjEf7y0T9gVYqPvWxSLeQIbU6yVPgjzyfN QPB5yAz0mQ2q75TYLkS29l3Kbv1dAtbmDwjuhWgFYjPAskd+y7yCQZqe1KhCo+2I 5BzKGmD2a1LUYJq1XAUL7OZ8DwdN+pQ9uslC+U/RVXPVC8vInFpilisQ8KjBnbhK Bgv/ge5+C6MNhf1KJwArg67gKYKCtCPGm8RsFAi45m6f1Kr+pWLJkAliDq1ukcoa I5V897t1SYJKoT1pVaQOnmDqJkf7lHiRyXYjBLz9xYevPhTuYGU73+0ON8UEl/Py FZaMqL+c6W9/onfT4LUiDSs699sKp4RXHI9ruN5295HWUqXsWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpgjUxafy9AqnTluNg7Wg7ul5WIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGE1YjhiMzgtZDRiNy0z YjQ4LWE4YWMtZWYyOTM4YjExOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOX3kSCgX5BONyoCBwbblJFnWk47DXQz6+hhDZc7rhPo9QjZamHJEpqn 6sx167DJVLSOXDH85YfOCySSnnV0pTpzoBKK+bK5mx1j/wvaylLCZBbAp/n+Fffl Z4IuhFFQd1kkF/CD33yMr8IUdBDIGz72lemGhcl5jBB4xI7rskqLOzKj7al5V6+v 6niLoj3jQzk5+keWo0bcNWVwRdohz7aHvy6QMDZwciUBDK/utBoMM89beiHjf6RT HQWKlAGetGQkiV4pTziWk67LGn0cDZNe+1qffnK2UORoS9J/TroiFGooEbbaZqI7 BXCEmvHP81v+dSariIapkgudXwmvLTU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:45 2025 by rpki-client