$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa File: 3253d608-779d-3d49-9ec9-04e34cf6f872.roa (raw, json) Hash identifier: So//Y4Lyl5cxV8bP4Ee/0R4sic8aPj8aT4w1MaNYgBY= Subject key identifier: C4:71:EC:BB:13:34:5F:04:C0:53:77:C2:E9:07:A5:D9:31:D6:AA:AE Certificate issuer: /CN=0432b247-64bf-4a12-bc99-32dbce58a455 Certificate serial: 010D0C9F4328584AC87633605FB9F6A70DA92600 Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 64.110.138.0/24 maxlen: 24 2620:104:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:33:60:5f:b9:f6:a7:0d:a9:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=25c3971e-97db-45e7-bf9b-5a86af78e0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:18:78:3d:4b:dc:52:cd:c6:a5:26:9b:74: d8:ca:49:0b:d0:3c:0e:71:f7:a3:b3:21:e3:ed:16: ba:4d:f6:bd:49:4c:a2:f1:53:d9:e3:ad:5d:60:72: 1d:2a:bc:8d:78:bc:d1:66:d8:55:fa:56:45:0b:4e: 54:f3:17:0e:d7:1c:4c:e4:54:06:b3:29:48:fd:7a: 58:86:1d:e9:a8:34:ef:94:8a:34:ab:ba:bd:11:33: 5b:97:e2:7b:69:a4:d1:b5:c8:3c:0f:7c:ab:25:e4: 4b:75:24:4f:12:dc:de:24:d1:e1:0f:b5:25:74:f3: ad:1f:70:ef:13:9a:4b:20:a5:01:fa:38:5b:de:05: 3e:54:d3:67:8c:a6:ec:da:15:c0:ab:87:0b:0c:1d: 0b:f9:98:6b:98:a1:13:38:16:22:06:a6:3b:c3:cd: 99:ae:6f:83:e9:2c:13:0d:56:b8:f5:1d:c9:84:c6: 48:f1:02:e5:88:6e:09:a8:6f:c9:41:39:93:36:7c: 2d:4f:47:d4:5d:b1:a0:53:e2:02:e7:76:96:9f:b7: 04:39:4f:7e:72:45:dd:c0:f3:8f:88:1e:5c:33:8e: b1:70:eb:49:1a:c5:ee:9a:2d:ba:c1:12:7a:05:39: 35:ab:c6:8e:f7:4d:43:49:db:f6:6d:4e:2a:d3:d5: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:71:EC:BB:13:34:5F:04:C0:53:77:C2:E9:07:A5:D9:31:D6:AA:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl X509v3 Authority Key Identifier: keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer sbgp-ipAddrBlock: critical IPv4: 64.110.138.0/24 IPv6: 2620:104:2040::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:bd:10:9a:ff:49:d1:17:a2:ba:a4:66:c5:95:61:42:63:0f: f7:6b:e3:35:c4:46:27:f3:26:39:20:34:d5:c0:18:40:67:7b: 1f:86:52:9e:1d:cc:24:84:c6:0a:a9:f4:ba:cb:c2:b5:4f:52: d7:fd:6b:99:32:8d:4c:48:6e:20:73:56:bf:3a:a0:75:64:fb: d6:2d:39:06:a4:de:a7:c2:c8:6f:7b:65:79:74:3b:62:92:4f: c2:93:4b:92:b0:53:68:e4:a9:2b:ff:40:1e:24:bc:c4:4e:61: ab:1a:31:fc:76:92:4c:5e:c4:9d:24:3c:8e:66:f5:e6:eb:ae: 75:4c:42:85:5e:24:d8:4c:55:58:f6:36:6e:34:a2:29:82:e6: 4c:5d:cb:3c:1a:10:ba:62:c0:b7:86:01:dd:89:5a:f0:60:f3: 7b:15:09:ed:3c:58:44:ab:cc:c3:22:ed:1b:99:95:2f:9c:a7: f4:94:46:35:58:ac:cc:bc:1a:91:3f:63:31:20:1d:67:5b:99: 7e:cd:04:72:28:b8:3c:54:0b:35:88:8a:fc:dd:19:a3:d2:26: 56:97:d8:bf:b1:cf:d6:1c:b1:68:19:0e:bb:d8:f9:96:f8:fb: cf:c3:27:23:8f:76:1f:0f:24:0a:40:74:a3:27:7b:bc:5f:65: cf:d1:31:7a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErIdjNgX7n2pw2pJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQzMmIyNDctNjRiZi00YTEyLWJjOTktMzJkYmNlNThh NDU1MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjVjMzk3MWUtOTdkYi00NWU3LWJmOWItNWE4NmFmNzhlMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRQYeD1L3FLNxqUmm3TYykkL0DwOcfejsyHj 7Ra6Tfa9SUyi8VPZ461dYHIdKryNeLzRZthV+lZFC05U8xcO1xxM5FQGsylI/XpY hh3pqDTvlIo0q7q9ETNbl+J7aaTRtcg8D3yrJeRLdSRPEtzeJNHhD7UldPOtH3Dv E5pLIKUB+jhb3gU+VNNnjKbs2hXAq4cLDB0L+ZhrmKETOBYiBqY7w82Zrm+D6SwT DVa49R3JhMZI8QLliG4JqG/JQTmTNnwtT0fUXbGgU+IC53aWn7cEOU9+ckXdwPOP iB5cM46xcOtJGsXumi26wRJ6BTk1q8aO901DSdv2bU4q09UfOwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMRx7LsTNF8EwFN3wukHpdkx1qquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDMy YjI0Ny02NGJmLTRhMTItYmM5OS0zMmRiY2U1OGE0NTUvMzI1M2Q2MDgtNzc5ZC0z ZDQ5LTllYzktMDRlMzRjZjZmODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQzMmIyNDctNjRiZi00YTEyLWJj OTktMzJkYmNlNThhNDU1LzA0MzJiMjQ3LTY0YmYtNGExMi1iYzk5LTMyZGJjZTU4 YTQ1NS5jcmwwHwYDVR0jBBgwFoAUAOUyL6qZsi1MfnzRCPtaN7LjAT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDMyYjI0Ny02NGJmLTRhMTItYmM5OS0zMmRi Y2U1OGE0NTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQG6KMA8E AgACMAkDBwAmIAEEIEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJ70Qmv9J0ReiuqRmxZVhQmMP92vjNcRG J/MmOSA01cAYQGd7H4ZSnh3MJITGCqn0usvCtU9S1/1rmTKNTEhuIHNWvzqgdWT7 1i05BqTep8LIb3tleXQ7YpJPwpNLkrBTaOSpK/9AHiS8xE5hqxox/HaSTF7EnSQ8 jmb15uuudUxChV4k2ExVWPY2bjSiKYLmTF3LPBoQumLAt4YB3Yla8GDzexUJ7TxY RKvMwyLtG5mVL5yn9JRGNViszLwakT9jMSAdZ1uZfs0Ecii4PFQLNYiK/N0Zo9Im VpfYv7HP1hyxaBkOu9j5lvj7z8MnI492Hw8kCkB0oyd7vF9lz9Exeg== -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:54 2025 by rpki-client