$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/443083bb-d1ac-34aa-a362-31620d03aa9c.roa File: 443083bb-d1ac-34aa-a362-31620d03aa9c.roa (raw, json) Hash identifier: 9KsAv0IjTuQiJ2V6MaH2zuQ4Hn+5lcA6keAMWlebaiU= Subject key identifier: 0A:67:E3:27:4C:09:FB:FC:D4:C3:25:61:72:45:CD:73:3D:C9:32:7B Certificate issuer: /CN=6172d736-c698-4515-a8d5-e8f599b88b89 Certificate serial: 010D0C9F4328584AD274F46C213ACE793DDED5C0 Authority key identifier: 3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/443083bb-d1ac-34aa-a362-31620d03aa9c.roa Signing time: Mon 11 Aug 2025 14:56:10 +0000 ROA not before: Mon 11 Aug 2025 14:56:10 +0000 ROA not after: Sun 09 Nov 2025 15:56:10 +0000 asID: 16509 IP address blocks: 64.65.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:74:f4:6c:21:3a:ce:79:3d:de:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6172d736-c698-4515-a8d5-e8f599b88b89 Validity Not Before: Aug 11 14:56:10 2025 GMT Not After : Nov 9 15:56:10 2025 GMT Subject: CN=b50e3b55-60b4-4b42-a935-cc6d3f4adaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:b0:35:c4:79:3f:d4:91:b6:42:7f:b5:13: 6c:b5:8b:56:07:c4:4b:10:ec:87:40:05:79:ce:e9: 92:e8:86:13:0c:3a:8c:e1:3c:28:97:10:9d:6c:1f: 8a:da:8a:8a:4f:57:a6:24:57:20:18:d6:1d:0d:dc: dd:9b:c8:ff:ba:af:de:df:2a:3c:8d:02:56:65:07: 40:e5:52:54:a0:40:8f:66:b1:ed:83:7c:5c:3e:22: e6:c7:bf:01:57:95:76:f0:72:c8:9e:d1:bc:c3:71: e3:26:e5:24:38:3d:c2:e4:97:21:f3:6a:33:4e:d5: 79:a6:b5:08:8f:a5:01:70:14:a5:01:b0:68:80:f9: c2:07:81:28:58:47:57:c3:c2:24:ea:39:4f:86:7f: 46:45:ec:b8:a2:b3:c0:53:b7:f5:7a:56:58:de:f8: 44:c6:75:b7:97:bc:09:23:b8:73:29:fa:f7:2e:b2: 66:4f:63:8d:ec:cc:89:43:0f:fb:30:e8:f6:51:ca: 3c:09:c5:58:14:27:5b:7c:ff:5b:9a:46:34:8f:59: aa:a7:34:50:34:07:ee:1c:e6:61:e5:33:ab:cc:33: fa:bb:77:a9:48:1e:3d:05:43:4f:cf:da:b8:9f:95: b9:d5:ce:41:68:ec:46:e2:53:fc:ce:fc:70:f1:b9: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:67:E3:27:4C:09:FB:FC:D4:C3:25:61:72:45:CD:73:3D:C9:32:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/443083bb-d1ac-34aa-a362-31620d03aa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl X509v3 Authority Key Identifier: keyid:3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer sbgp-ipAddrBlock: critical IPv4: 64.65.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d8:db:80:17:d2:4f:8e:77:aa:f2:e5:7c:9b:d2:81:a9:23: f2:da:6f:db:c3:b8:3b:f5:f2:5e:37:4f:6a:c0:db:c7:2a:7d: 12:e8:2b:c7:d1:b0:08:24:77:72:2d:f2:c3:a4:17:7e:ac:81: 26:47:b4:d0:89:7b:d1:00:21:e8:d0:d8:80:8e:ab:e2:a8:7d: 9f:2b:0d:56:e9:4c:b1:fb:c9:1d:88:f4:be:b0:07:f7:a2:3f: 71:17:be:c6:e7:41:51:98:24:22:e8:54:11:f6:46:76:0b:e7: 1f:5b:4a:0d:01:ee:89:e5:0f:42:29:85:be:32:75:46:69:dd: d4:de:bf:74:93:f9:00:53:02:62:4c:b8:3a:56:38:67:32:ba: cc:dd:38:fb:8b:10:71:18:a7:35:18:bc:d9:4d:69:c4:72:68: ed:88:48:a3:85:e8:69:54:b1:d1:63:1a:65:4f:85:52:c1:7e: e5:9c:b3:04:77:1e:72:65:b0:d6:17:4e:f4:44:55:f3:38:dc: 70:55:d8:fb:99:a6:ef:46:62:00:86:6b:16:c7:59:cb:6b:72: c7:62:df:fc:ad:d7:53:d6:0c:99:5d:fe:31:18:e1:d1:46:02: 7f:66:69:f9:d7:fe:d1:3b:c5:f1:57:b7:52:5b:f0:c3:d7:1e: c8:23:0b:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSdPRsITrOeT3e1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE3MmQ3MzYtYzY5OC00NTE1LWE4ZDUtZThmNTk5Yjg4 Yjg5MB4XDTI1MDgxMTE0NTYxMFoXDTI1MTEwOTE1NTYxMFowLzEtMCsGA1UEAxMk YjUwZTNiNTUtNjBiNC00YjQyLWE5MzUtY2M2ZDNmNGFkYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc2wNcR5P9SRtkJ/tRNstYtWB8RLEOyHQAV5 zumS6IYTDDqM4TwolxCdbB+K2oqKT1emJFcgGNYdDdzdm8j/uq/e3yo8jQJWZQdA 5VJUoECPZrHtg3xcPiLmx78BV5V28HLIntG8w3HjJuUkOD3C5Jch82ozTtV5prUI j6UBcBSlAbBogPnCB4EoWEdXw8Ik6jlPhn9GRey4orPAU7f1elZY3vhExnW3l7wJ I7hzKfr3LrJmT2ON7MyJQw/7MOj2Uco8CcVYFCdbfP9bmkY0j1mqpzRQNAfuHOZh 5TOrzDP6u3epSB49BUNPz9q4n5W51c5BaOxG4lP8zvxw8blLjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApn4ydMCfv81MMlYXJFzXM9yTJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MTcy ZDczNi1jNjk4LTQ1MTUtYThkNS1lOGY1OTliODhiODkvNDQzMDgzYmItZDFhYy0z NGFhLWEzNjItMzE2MjBkMDNhYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjE3MmQ3MzYtYzY5OC00NTE1LWE4 ZDUtZThmNTk5Yjg4Yjg5LzYxNzJkNzM2LWM2OTgtNDUxNS1hOGQ1LWU4ZjU5OWI4 OGI4OS5jcmwwHwYDVR0jBBgwFoAUPDhGyhlVkbOYX3BUrptLlX98WUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MTcyZDczNi1jNjk4LTQ1MTUtYThkNS1lOGY1 OTliODhiODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Y24AX0k+Od6ry5Xyb0oGpI/Lab9vDuDv18l43T2rA28cqfRLoK8fR sAgkd3It8sOkF36sgSZHtNCJe9EAIejQ2ICOq+KofZ8rDVbpTLH7yR2I9L6wB/ei P3EXvsbnQVGYJCLoVBH2RnYL5x9bSg0B7onlD0Iphb4ydUZp3dTev3ST+QBTAmJM uDpWOGcyuszdOPuLEHEYpzUYvNlNacRyaO2ISKOF6GlUsdFjGmVPhVLBfuWcswR3 HnJlsNYXTvREVfM43HBV2PuZpu9GYgCGaxbHWctrcsdi3/yt11PWDJld/jEY4dFG An9mafnX/tE7xfFXt1Jb8MPXHsgjC3Y= -----END CERTIFICATE-----Generated at Wed Aug 20 13:19:32 2025 by rpki-client