$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0da0e958-3420-3c17-8c36-32cc8a73d573.roa File: 0da0e958-3420-3c17-8c36-32cc8a73d573.roa (raw, json) Hash identifier: mjJ9wUtodRioajtgqIq45P/WBw3GXbEJ+lJaeJ8TzP0= Subject key identifier: 00:57:1C:4B:E2:52:8B:CB:33:A3:F3:6C:EC:50:63:9F:24:CD:10:C3 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B1806EAB6C1634ADBAA0F6E00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0da0e958-3420-3c17-8c36-32cc8a73d573.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11232 IP address blocks: 64.33.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ea:b6:c1:63:4a:db:aa:0f:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=3580409d-d07f-4be7-82cc-bb4fda8749e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:2e:b4:10:f0:b8:a0:b2:e6:b7:b2:f9:a6: 13:5f:f0:e7:e0:9a:aa:a0:9e:12:c3:17:91:1b:1b: 29:57:dd:66:62:b6:97:b7:7e:44:e8:53:ed:cf:5e: ab:35:72:47:9f:48:a8:b0:85:d1:a0:50:dc:9b:2d: 46:92:59:2a:44:71:d1:f4:92:73:32:92:4c:94:6a: 1b:48:92:a6:db:1c:01:35:d6:ab:65:2c:5d:75:f7: bc:19:88:db:59:c7:89:24:5c:51:8d:74:c4:c4:40: c2:b7:56:1f:34:ae:9e:8c:64:3a:93:1f:09:22:ad: 22:8e:9e:3b:a4:15:27:ad:29:56:00:7b:ca:dc:d3: a0:93:06:b8:60:29:0d:54:3b:e5:3c:31:07:ba:c6: 50:48:40:e1:1f:a9:55:27:8a:0b:d5:db:49:e5:c1: 10:cb:4f:4b:83:ff:20:92:5c:0c:9a:5c:64:f8:72: 4e:e6:e9:19:f8:43:02:18:77:d2:1d:8c:9b:0a:1f: 9a:f3:a8:5e:0b:7a:57:ff:27:91:57:ec:12:3d:2c: 7d:bf:23:9f:e7:97:e5:89:02:89:3a:74:2c:d5:2c: 5c:b7:d6:01:89:4a:26:03:e3:09:37:12:fa:e0:72: 82:9d:44:dd:82:9b:d9:e6:e5:7a:56:73:0b:77:ec: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:57:1C:4B:E2:52:8B:CB:33:A3:F3:6C:EC:50:63:9F:24:CD:10:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0da0e958-3420-3c17-8c36-32cc8a73d573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 64.33.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:da:4c:43:cb:7b:54:24:b5:54:2b:75:38:ae:8d:3c:0b:c2: 9a:8c:79:f6:2f:dc:c0:f9:0d:fd:09:07:47:4c:11:0a:c4:1b: 84:ea:bd:40:d2:57:96:d3:45:13:d2:bb:cd:1e:8b:93:20:5e: a2:40:f8:fc:62:f0:40:40:05:56:f5:26:42:15:29:a7:26:02: c5:92:df:30:41:3c:c2:fd:b6:37:39:0c:b0:b4:ff:c0:bc:9a: 49:b6:0a:d7:26:af:3f:cd:d0:eb:84:fa:04:f2:2f:5f:e4:a9: b6:00:c8:69:cc:75:f9:50:d7:fe:de:4a:ed:58:13:e0:8f:0c: ec:e0:18:27:50:df:3b:ab:68:05:51:14:2e:a1:22:f1:45:8e: bb:5f:34:2e:dc:30:02:42:e1:03:66:c3:6a:5c:58:16:47:af: 9a:24:49:4e:9c:d7:ac:6b:a1:3e:a1:4a:d4:55:e3:a5:cd:78: 98:75:88:aa:dd:55:4b:f6:57:04:a1:94:c3:4b:e7:67:73:b1: 04:42:8e:c3:24:40:2d:3f:6a:f6:1d:78:a3:3f:11:bb:3d:1c: 85:90:f3:a4:1f:af:fd:d5:f9:4f:3a:1f:d9:8c:80:b6:45:ad: 0a:57:91:c5:bc:fb:f3:5f:ae:d5:f8:59:f2:75:b2:c6:b7:13: c3:15:2d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuq2wWNK26oPbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzU4MDQwOWQtZDA3Zi00YmU3LTgyY2MtYmI0ZmRhODc0OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovQutBDwuKCy5rey+aYTX/Dn4JqqoJ4SwxeR GxspV91mYraXt35E6FPtz16rNXJHn0iosIXRoFDcmy1GklkqRHHR9JJzMpJMlGob SJKm2xwBNdarZSxddfe8GYjbWceJJFxRjXTExEDCt1YfNK6ejGQ6kx8JIq0ijp47 pBUnrSlWAHvK3NOgkwa4YCkNVDvlPDEHusZQSEDhH6lVJ4oL1dtJ5cEQy09Lg/8g klwMmlxk+HJO5ukZ+EMCGHfSHYybCh+a86heC3pX/yeRV+wSPSx9vyOf55fliQKJ OnQs1Sxct9YBiUomA+MJNxL64HKCnUTdgpvZ5uV6VnMLd+ziEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABXHEviUovLM6PzbOxQY58kzRDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMGRhMGU5NTgtMzQyMC0z YzE3LThjMzYtMzJjYzhhNzNkNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQCFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXaTEPLe1QktVQrdTiujTwLwpqMefYv3MD5Df0JB0dMEQrEG4TqvUDS V5bTRRPSu80ei5MgXqJA+Pxi8EBABVb1JkIVKacmAsWS3zBBPML9tjc5DLC0/8C8 mkm2Ctcmrz/N0OuE+gTyL1/kqbYAyGnMdflQ1/7eSu1YE+CPDOzgGCdQ3zuraAVR FC6hIvFFjrtfNC7cMAJC4QNmw2pcWBZHr5okSU6c16xroT6hStRV46XNeJh1iKrd VUv2VwShlMNL52dzsQRCjsMkQC0/avYdeKM/Ebs9HIWQ86Qfr/3V+U86H9mMgLZF rQpXkcW8+/NfrtX4WfJ1ssa3E8MVLR8= -----END CERTIFICATE-----Generated at Sat Sep 20 00:42:12 2025 by rpki-client