$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa File: 654966e7-4171-3ec2-8448-3233091cbe98.roa (raw, json) Hash identifier: fSXfkUxcT2C8snllTl61At8cnzbIXyo6/VthWQb0iPg= Subject key identifier: 40:C3:E7:B9:EC:60:64:68:7C:37:42:01:6A:3D:3F:B0:AE:BE:24:39 Certificate issuer: /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Certificate serial: 010D0C9F4328584B047C129A9919684A48008E40 Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 173.213.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:12:9a:99:19:68:4a:48:00:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=5705a123-f1ee-41ac-b7b4-020bc7b79a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:b1:c6:ce:cd:69:19:05:e5:18:47:54:b0: 0f:9f:46:09:9d:84:4b:e5:67:9b:9c:f1:e0:c8:23: 74:d8:5e:dc:a8:dc:a6:bd:c1:2b:51:4f:27:50:c0: 38:6c:a3:5d:1e:b2:8f:d6:78:2d:3e:7d:46:a4:0e: 3a:ed:55:fd:8d:f2:dc:45:dc:73:d1:07:43:50:e7: e5:b4:78:12:23:64:c0:89:b7:63:ca:a2:c7:73:9a: ce:0a:ff:d4:66:9e:06:86:65:55:84:11:cf:08:f6: fb:b4:be:6e:39:c7:b1:0c:73:46:d4:af:e1:a9:c5: 3c:c4:5b:25:77:9f:35:a0:1a:13:d0:f3:da:48:d1: 07:db:e5:e8:b6:9d:c9:6d:3a:67:7a:46:0f:45:1c: 15:ca:a0:bf:d1:1b:67:b9:dc:96:b1:72:59:44:4a: 37:b5:14:d8:d1:02:4c:59:3f:fb:23:49:d0:ea:5e: ba:cd:a0:ca:45:01:d1:44:8e:70:aa:59:1e:11:b5: 56:5a:5a:c1:cb:6d:5a:ba:5d:d4:2a:82:96:a1:e6: 95:01:50:4f:24:68:b8:42:61:4e:ab:b1:8b:1c:00: a8:c5:87:e4:15:a4:5e:d3:6d:23:eb:35:42:57:ed: ec:56:42:00:34:9a:de:7f:6c:58:b0:64:80:13:20: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:E7:B9:EC:60:64:68:7C:37:42:01:6A:3D:3F:B0:AE:BE:24:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl X509v3 Authority Key Identifier: keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer sbgp-ipAddrBlock: critical IPv4: 173.213.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a7:9f:37:fe:0e:25:45:af:ca:4f:31:1c:3f:8d:14:e1:f0: 6c:c8:1f:ef:3f:0f:92:ac:63:d2:d6:df:60:3f:fc:5b:cf:0c: dd:a8:95:84:58:ea:a3:66:73:90:95:3b:8c:4c:48:86:e9:c2: a9:08:8d:a4:17:4b:11:0b:86:81:62:1d:a3:d9:43:ba:02:95: 8e:cf:1b:c2:81:0c:0f:76:1b:06:5b:49:7a:12:17:8f:f8:66: 5c:92:e1:79:78:17:6f:b2:06:0f:64:04:67:1b:e7:03:56:7b: 9b:43:f5:78:80:c3:3d:e9:95:8e:49:9b:57:6f:60:31:7f:87: a3:be:f3:44:bc:16:7e:48:d3:54:48:0f:5b:00:fa:0a:2d:57: f6:00:d4:4c:00:f5:c3:d1:79:26:8c:29:2e:56:be:07:df:77: 3b:6e:19:e9:af:7a:2a:60:29:8b:c0:3a:16:ec:48:50:05:4d: 16:1a:7c:5a:d7:46:70:3d:87:c5:f0:35:cf:85:2e:77:7a:ba: 22:5a:7f:ae:e5:d0:da:d6:9a:fd:ff:99:e4:9f:3a:81:ba:96: 6e:13:f2:29:6d:f3:d4:a2:60:e3:af:69:7b:22:3d:b8:05:c4: 97:05:26:7f:8f:e9:e0:40:30:c8:c2:02:11:e8:22:56:1d:52: 91:8f:1e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBKamRloSkgAjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy ZTQxMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NTcwNWExMjMtZjFlZS00MWFjLWI3YjQtMDIwYmM3Yjc5YTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VOxxs7NaRkF5RhHVLAPn0YJnYRL5WebnPHg yCN02F7cqNymvcErUU8nUMA4bKNdHrKP1ngtPn1GpA467VX9jfLcRdxz0QdDUOfl tHgSI2TAibdjyqLHc5rOCv/UZp4GhmVVhBHPCPb7tL5uOcexDHNG1K/hqcU8xFsl d581oBoT0PPaSNEH2+Xotp3JbTpnekYPRRwVyqC/0RtnudyWsXJZREo3tRTY0QJM WT/7I0nQ6l66zaDKRQHRRI5wqlkeEbVWWlrBy21aul3UKoKWoeaVAVBPJGi4QmFO q7GLHACoxYfkFaRe020j6zVCV+3sVkIANJref2xYsGSAEyBmgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDD57nsYGRofDdCAWo9P7CuviQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvNjU0OTY2ZTctNDE3MS0z ZWMyLTg0NDgtMzIzMzA5MWNiZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2 MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrdUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWnnzf+DiVFr8pPMRw/jRTh8GzIH+8/D5KsY9LW32A//FvPDN2olYRY 6qNmc5CVO4xMSIbpwqkIjaQXSxELhoFiHaPZQ7oClY7PG8KBDA92GwZbSXoSF4/4 ZlyS4Xl4F2+yBg9kBGcb5wNWe5tD9XiAwz3plY5Jm1dvYDF/h6O+80S8Fn5I01RI D1sA+gotV/YA1EwA9cPReSaMKS5WvgffdztuGemveipgKYvAOhbsSFAFTRYafFrX RnA9h8XwNc+FLnd6uiJaf67l0NrWmv3/meSfOoG6lm4T8ilt89SiYOOvaXsiPbgF xJcFJn+P6eBAMMjCAhHoIlYdUpGPHpQ= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:45 2025 by rpki-client