$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a158a2-272e-3b73-a744-6a2495246355.roa File: b4a158a2-272e-3b73-a744-6a2495246355.roa (raw, json) Hash identifier: QGes2+TYmLpDb7NRudBWdN0yVUlQ6Q21fXDx5/MZ40Y= Subject key identifier: A7:4B:8E:85:1D:30:7F:B7:05:8D:8C:94:82:9A:10:42:92:80:F7:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C7AA3081EB02B9CC8100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a158a2-272e-3b73-a744-6a2495246355.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 19905 IP address blocks: 64.6.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c7:aa:30:81:eb:02:b9:cc:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=763a1fa4-ed38-4ce6-b378-e05a045288b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:eb:0c:be:2c:77:80:08:17:b6:04:ee:d7: b9:3b:4b:de:86:46:57:c0:68:36:29:ac:d3:13:78: 82:3d:d0:10:14:e8:87:74:a0:9e:4c:e5:6e:55:50: 54:df:57:32:78:a1:cf:b2:a6:44:d6:c2:e7:52:75: f4:f1:ff:1a:ee:4a:b0:f0:07:59:4b:99:73:b3:cc: 25:6c:94:cd:e6:51:f3:65:b8:9e:a8:83:b8:5f:1c: 61:e0:0a:3a:f5:03:2c:e6:e1:3c:36:48:aa:39:a0: bd:8f:6c:5e:d6:5c:b0:12:1d:6c:50:4c:05:f9:26: 05:09:1d:60:20:be:1b:b5:b1:ac:73:61:dc:f1:57: e9:a0:d9:a7:53:90:75:3e:2d:d4:6a:c7:56:43:d5: 13:e7:41:36:61:a2:df:03:61:94:3e:df:2b:aa:e7: d3:87:4e:ad:76:3e:17:71:49:46:d6:03:4f:a4:c7: d5:89:54:02:a5:50:02:42:7d:8f:b4:85:9f:b0:89: 07:41:ea:dc:2c:e8:3f:8b:15:5c:17:0b:ad:8e:bf: 0b:5b:98:2b:3b:00:97:70:27:1c:60:33:bd:32:60: 15:e1:a8:92:26:3b:74:8c:5b:81:d6:6f:fc:c4:a3: 16:fe:ca:8a:1e:68:ec:03:ae:7f:42:3e:9a:f0:5f: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:8E:85:1D:30:7F:B7:05:8D:8C:94:82:9A:10:42:92:80:F7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a158a2-272e-3b73-a744-6a2495246355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 64.6.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e8:28:35:3a:9f:4a:2a:d5:6d:cd:31:5b:57:95:38:58:65: 19:a9:fc:6d:a6:e6:51:35:52:e4:b8:51:0d:b9:54:f5:3b:0b: d2:49:34:1d:03:64:1d:0d:c3:54:80:c5:40:2b:44:bf:60:2d: 9c:d7:9f:6c:60:15:47:91:02:49:97:8a:b1:db:b5:dd:82:85: 3f:27:68:08:9a:18:d1:b7:ac:44:fb:5f:46:0a:e3:ee:54:0e: 14:d3:29:94:03:87:8e:84:19:91:f7:19:9c:54:f1:52:2a:54: 3f:d7:74:41:37:41:05:67:8e:34:bc:29:d1:04:dd:89:50:9f: 1d:dc:bc:62:87:40:3a:48:c0:6d:53:49:75:7f:48:88:e9:83: 2c:60:ed:04:3c:f5:74:77:cf:e4:f7:8c:8b:47:93:a6:94:b7: b5:57:96:0b:7e:ec:11:0f:70:95:9a:48:8d:2c:91:13:3a:de: 99:e4:5b:ad:86:ec:c1:14:13:b1:e5:28:3a:53:ae:19:2a:cc: 57:d5:dd:28:99:2b:6a:0b:f6:e0:10:86:7d:a6:a3:92:a0:20: f1:8b:25:53:dd:66:dd:16:82:ac:8a:d1:34:16:20:2f:a5:0e: 18:f8:11:e3:8b:31:eb:51:a6:06:48:1e:b9:21:65:eb:ff:cb: fd:37:7f:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdseqMIHrArnMgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzYzYTFmYTQtZWQzOC00Y2U2LWIzNzgtZTA1YTA0NTI4OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVHrDL4sd4AIF7YE7te5O0vehkZXwGg2KazT E3iCPdAQFOiHdKCeTOVuVVBU31cyeKHPsqZE1sLnUnX08f8a7kqw8AdZS5lzs8wl bJTN5lHzZbieqIO4Xxxh4Ao69QMs5uE8NkiqOaC9j2xe1lywEh1sUEwF+SYFCR1g IL4btbGsc2Hc8VfpoNmnU5B1Pi3UasdWQ9UT50E2YaLfA2GUPt8rqufTh06tdj4X cUlG1gNPpMfViVQCpVACQn2PtIWfsIkHQercLOg/ixVcFwutjr8LW5grOwCXcCcc YDO9MmAV4aiSJjt0jFuB1m/8xKMW/sqKHmjsA65/Qj6a8F9MywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdLjoUdMH+3BY2MlIKaEEKSgPcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjRhMTU4YTItMjcyZS0z YjczLWE3NDQtNmEyNDk1MjQ2MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIToKDU6n0oq1W3NMVtXlThYZRmp/G2m5lE1UuS4UQ25VPU7C9JJNB0D ZB0Nw1SAxUArRL9gLZzXn2xgFUeRAkmXirHbtd2ChT8naAiaGNG3rET7X0YK4+5U DhTTKZQDh46EGZH3GZxU8VIqVD/XdEE3QQVnjjS8KdEE3YlQnx3cvGKHQDpIwG1T SXV/SIjpgyxg7QQ89XR3z+T3jItHk6aUt7VXlgt+7BEPcJWaSI0skRM63pnkW62G 7MEUE7HlKDpTrhkqzFfV3SiZK2oL9uAQhn2mo5KgIPGLJVPdZt0WgqyK0TQWIC+l Dhj4EeOLMetRpgZIHrkhZev/y/03f7s= -----END CERTIFICATE-----Generated at Sat Sep 6 07:43:46 2025 by rpki-client