$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa File: 85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa (raw, json) Hash identifier: 6A2gd7rJlH5ZzgmNvV5jjrjBlqceK+1NEqIl0Mj0yYw= Subject key identifier: 4E:7A:9A:4E:3B:77:34:99:72:CA:C3:6E:A8:4A:D8:C8:DB:0A:65:B6 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE096C2419E257135386700 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 64.112.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:96:c2:41:9e:25:71:35:38:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=acc519e9-3296-432a-b118-f01b66068d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:0c:45:3c:c3:1f:50:4c:2a:55:46:40:29: 0e:e4:ce:ed:ef:93:aa:e7:40:91:3c:cb:f0:81:e7: 15:a5:c9:66:78:af:28:cc:9a:b7:0a:eb:5c:29:fd: c7:ef:85:d5:75:c5:2d:0e:a4:22:65:b2:53:a4:6c: 2d:26:9f:0c:fe:1d:f1:fe:cf:02:65:43:39:57:05: 77:56:da:71:08:16:20:78:b4:34:5e:20:f8:7a:4f: 75:64:4a:9c:b6:46:99:20:ec:e9:42:62:b7:50:f8: 17:2b:4f:59:8f:2d:28:22:0f:39:72:db:a3:08:70: 69:8e:a5:5b:32:4e:55:67:24:ac:5f:49:78:02:e8: 16:e7:f5:e4:b5:ab:d9:1d:21:35:21:86:87:a9:5a: b6:90:f2:62:8f:3e:07:a8:77:88:5c:f1:1c:ba:fc: 16:16:03:a0:43:79:c7:a8:f3:7f:9e:a1:dd:cd:a4: 10:d2:d8:6f:d8:5b:78:d5:be:33:f7:69:0a:29:28: f3:1c:82:9b:6d:83:fd:5c:82:ad:ce:35:89:d4:8f: 1f:5a:3b:13:f4:c8:d6:8c:2b:2b:f5:ad:1d:37:2a: 54:cf:c4:fb:02:c7:b7:53:d0:f4:85:52:54:5f:da: 64:05:b1:09:41:70:08:21:57:a3:79:30:c0:f6:e2: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7A:9A:4E:3B:77:34:99:72:CA:C3:6E:A8:4A:D8:C8:DB:0A:65:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:32:4a:e3:15:95:b3:d9:2c:bc:30:71:91:d8:1c:b8:3c:21: f0:4d:2f:f9:ce:79:95:cc:39:71:3c:47:f9:4b:d9:f2:4e:18: 01:e2:3d:08:f1:1b:2c:52:4d:b1:2e:be:0f:14:8a:57:04:12: 93:61:4f:16:f5:72:4c:57:10:8b:5f:31:6d:a0:bc:42:79:d3: 3b:5e:52:0d:d2:0d:4a:ae:08:ba:8d:f3:8e:62:8a:48:0d:66: 8d:a9:ce:82:01:24:a9:55:04:4e:c1:42:37:6f:ab:8d:df:e2: b9:45:d9:1a:9b:ce:94:eb:5a:0f:2f:6d:b6:5a:26:c7:48:80: ad:f1:50:f8:23:13:92:75:7b:8d:dd:83:4f:c0:a6:03:35:63: a3:41:96:c8:fb:ab:1c:fd:eb:36:ce:ce:2b:80:f7:a0:d4:fa: ed:cf:d4:95:a6:e9:ed:9a:2c:41:43:18:ac:a5:4e:26:f9:25: a7:c4:b2:35:05:68:14:77:f1:92:0c:84:40:6d:05:6e:51:11: 66:ff:80:96:cd:07:3b:61:41:70:0a:ba:92:cb:e3:af:e3:af: 33:1b:68:92:41:67:98:1f:84:6a:fc:ef:73:d3:8f:30:b6:22: 83:fd:0e:8a:01:b3:92:a8:94:ef:0b:47:43:14:82:4d:a6:6e: 42:dc:fa:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JbCQZ4lcTU4ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk YWNjNTE5ZTktMzI5Ni00MzJhLWIxMTgtZjAxYjY2MDY4ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX4MRTzDH1BMKlVGQCkO5M7t75Oq50CRPMvw gecVpclmeK8ozJq3CutcKf3H74XVdcUtDqQiZbJTpGwtJp8M/h3x/s8CZUM5VwV3 VtpxCBYgeLQ0XiD4ek91ZEqctkaZIOzpQmK3UPgXK09Zjy0oIg85ctujCHBpjqVb Mk5VZySsX0l4AugW5/XktavZHSE1IYaHqVq2kPJijz4HqHeIXPEcuvwWFgOgQ3nH qPN/nqHdzaQQ0thv2Ft41b4z92kKKSjzHIKbbYP9XIKtzjWJ1I8fWjsT9MjWjCsr 9a0dNypUz8T7Ase3U9D0hVJUX9pkBbEJQXAIIVejeTDA9uIoLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE56mk47dzSZcsrDbqhK2MjbCmW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODViZmMxM2ItNWNhNi0z NTgyLTg0ZWYtMDliZGI5YmZjNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIySuMVlbPZLLwwcZHYHLg8IfBNL/nOeZXMOXE8R/lL2fJOGAHiPQjx GyxSTbEuvg8UilcEEpNhTxb1ckxXEItfMW2gvEJ50zteUg3SDUquCLqN845iikgN Zo2pzoIBJKlVBE7BQjdvq43f4rlF2RqbzpTrWg8vbbZaJsdIgK3xUPgjE5J1e43d g0/ApgM1Y6NBlsj7qxz96zbOziuA96DU+u3P1JWm6e2aLEFDGKylTib5JafEsjUF aBR38ZIMhEBtBW5REWb/gJbNBzthQXAKupLL46/jrzMbaJJBZ5gfhGr873PTjzC2 IoP9DooBs5KolO8LR0MUgk2mbkLc+lk= -----END CERTIFICATE-----Generated at Sun Jul 20 15:01:59 2025 by rpki-client