$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa File: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (raw, json) Hash identifier: P9QeY+VUdPEuz9g/mNzoQrlcwYRlWO5teM6zuEztoMQ= Subject key identifier: 0E:3B:0D:85:71:0A:F2:AA:67:CD:2F:53:8F:88:A9:62:47:AE:27:42 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F4328584AA42B7AB5106B974C773AB100 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 6327 IP address blocks: 64.59.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7a:b5:10:6b:97:4c:77:3a:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=6b049901-fa8c-4174-8919-cc9a5efecd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:fc:09:8e:5c:75:c2:ce:5c:27:ac:9b:0d: 4f:9f:57:8e:a9:ff:f3:d2:ad:d9:22:40:b0:a8:f5: f6:b3:74:a0:90:65:5f:c4:e4:fb:ff:aa:70:87:ae: 30:6f:bf:d4:4f:b8:85:e6:3d:24:99:f3:78:77:68: 07:ad:a7:a5:1b:a1:80:f4:4c:02:1a:32:b8:b9:c3: a5:61:be:93:4d:78:6c:d3:1b:2a:7d:71:8d:a4:55: a6:48:a8:e7:ac:e7:bf:40:7e:6f:07:24:ed:a4:07: 67:78:27:9f:7b:9f:b8:54:1e:26:88:b1:67:56:96: db:8f:4b:d5:82:79:f8:d7:a2:00:e2:dc:5a:74:70: f4:dd:3f:60:66:cf:e5:87:37:57:0b:7f:5f:37:ba: 2f:92:21:ce:89:03:e9:07:30:7c:5b:b4:62:0b:d8: 9a:36:b3:d8:a3:73:90:ce:15:5d:95:9f:47:b6:6f: 2e:31:00:c2:77:3d:46:d9:04:97:41:c8:f7:4f:52: f1:00:a4:0e:57:65:22:f0:e2:3f:f5:77:4e:70:1f: 77:eb:38:48:74:5a:88:b2:da:c5:3c:91:f0:71:b4: e4:d7:87:1d:b9:eb:b3:52:b4:90:ad:d9:a6:bd:90: 00:71:ea:ec:d2:df:28:23:d1:6b:3e:52:97:bb:73: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3B:0D:85:71:0A:F2:AA:67:CD:2F:53:8F:88:A9:62:47:AE:27:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: 64.59.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2a:96:d3:8e:68:c3:ec:9e:27:f0:e0:c3:c3:bd:7d:ce:24: 4d:6e:48:93:5d:1b:8c:c4:f2:ba:d9:b6:a9:b8:20:5d:a8:9a: 9c:d5:6c:ae:2d:95:aa:33:ff:80:69:12:a4:c1:53:2c:c3:2a: 00:ee:bc:37:82:98:8f:54:72:1b:d1:85:32:c0:83:02:08:d1: c8:2a:dd:a5:ab:3e:50:bf:d0:71:bf:7a:1e:03:39:c2:68:9f: 4d:db:b4:c1:ad:07:2f:a4:f6:85:57:67:42:d8:46:95:14:59: 85:f1:ba:ff:8a:e2:78:2f:da:8c:60:12:11:8b:2c:1e:b3:16: 77:8d:fe:50:bd:84:09:bb:5e:61:b2:42:d7:f2:ba:61:f4:ca: d1:25:7b:cb:30:c2:db:3c:7e:af:19:3f:44:89:fe:08:3f:48: 00:3e:e7:3f:57:b2:77:db:52:3e:7a:fb:d1:28:a4:50:0d:30: 35:c6:d9:09:72:72:de:4c:45:28:26:c9:76:8f:88:8d:ed:0e: 33:1f:25:6d:20:93:e5:27:06:af:26:12:19:81:62:69:bb:56: 03:82:53:c2:11:a4:71:ff:50:38:56:17:cf:75:d3:b2:63:59: 70:49:0d:ba:99:f5:f0:23:ef:59:94:5e:05:6d:11:18:d8:eb: f2:91:cf:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3q1EGuXTHc6sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NmIwNDk5MDEtZmE4Yy00MTc0LTg5MTktY2M5YTVlZmVjZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtID8CY5cdcLOXCesmw1Pn1eOqf/z0q3ZIkCw qPX2s3SgkGVfxOT7/6pwh64wb7/UT7iF5j0kmfN4d2gHraelG6GA9EwCGjK4ucOl Yb6TTXhs0xsqfXGNpFWmSKjnrOe/QH5vByTtpAdneCefe5+4VB4miLFnVpbbj0vV gnn416IA4txadHD03T9gZs/lhzdXC39fN7ovkiHOiQPpBzB8W7RiC9iaNrPYo3OQ zhVdlZ9Htm8uMQDCdz1G2QSXQcj3T1LxAKQOV2Ui8OI/9XdOcB936zhIdFqIstrF PJHwcbTk14cdueuzUrSQrdmmvZAAcers0t8oI9FrPlKXu3NDGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA47DYVxCvKqZ80vU4+IqWJHridCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvNGU3ZDhhOTAtNzhlOS0z MDhhLTg5OGItMTNkNDBjMjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYqltOOaMPsnifw4MPDvX3OJE1uSJNdG4zE8rrZtqm4IF2ompzVbK4t laoz/4BpEqTBUyzDKgDuvDeCmI9UchvRhTLAgwII0cgq3aWrPlC/0HG/eh4DOcJo n03btMGtBy+k9oVXZ0LYRpUUWYXxuv+K4ngv2oxgEhGLLB6zFneN/lC9hAm7XmGy QtfyumH0ytEle8swwts8fq8ZP0SJ/gg/SAA+5z9XsnfbUj56+9EopFANMDXG2Qly ct5MRSgmyXaPiI3tDjMfJW0gk+UnBq8mEhmBYmm7VgOCU8IRpHH/UDhWF89107Jj WXBJDbqZ9fAj71mUXgVtERjY6/KRz/o= -----END CERTIFICATE-----Generated at Mon Aug 4 14:41:51 2025 by rpki-client