$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa File: 43efa9da-f2bc-3983-a912-86d2468191e3.roa (raw, json) Hash identifier: klnsWXdgmrQrYRJbwvO/KIQWaety+FGlPDGmxnOZwV4= Subject key identifier: A9:CC:7D:11:46:8C:40:D4:4D:7C:E8:8C:73:73:DA:5B:8F:57:04:56 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584AD3A0FC4E1150C64595512100 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 1239 IP address blocks: 65.181.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fc:4e:11:50:c6:45:95:51:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=ea48e1c6-9169-4677-a0a3-35dfaf970134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:3b:16:7e:3b:75:1e:d3:66:09:73:a1:5e: a1:df:4e:0e:77:db:53:d6:22:5b:ff:59:a4:eb:fd: 51:db:11:20:3c:da:f4:c9:94:87:39:b2:54:7c:20: b6:4f:63:1d:67:49:44:fd:0c:96:94:b3:b4:80:2f: 8c:e0:27:ab:48:35:74:2f:c3:25:70:28:b8:8c:48: 0d:be:3f:e9:9c:0e:a9:a2:eb:3c:d0:aa:90:64:32: 48:c0:44:62:e7:95:1d:3d:55:e1:8b:37:e0:44:37: a0:05:2f:c2:b9:49:7d:0f:4e:6f:2d:9b:a4:1b:9a: 14:38:18:84:6a:e1:5b:d3:0f:32:0d:6e:3a:88:bd: 06:f0:1e:f5:f4:58:4e:1b:af:29:57:6d:be:0b:e7: d6:29:f6:1b:c3:af:68:67:d1:7c:84:e9:4c:c2:93: ae:f5:96:85:46:04:9f:64:c8:13:9a:91:b4:aa:9f: 88:41:8c:16:65:84:90:9c:45:ce:db:98:89:f4:2d: 40:7d:7d:1d:ac:ad:d6:6e:14:d1:fa:8b:28:82:d2: aa:01:42:9e:76:55:d8:98:41:e2:b6:1d:17:1e:e9: f8:f5:61:0b:e1:d7:4f:6c:4c:2c:c1:a4:79:a7:b3: 86:03:2e:ec:1a:73:76:b0:b8:7c:13:2a:30:7f:a6: b0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CC:7D:11:46:8C:40:D4:4D:7C:E8:8C:73:73:DA:5B:8F:57:04:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1f:5c:1b:e6:58:53:80:d3:4e:53:a9:e3:c7:32:1c:a7:ec: 85:d2:a5:2c:86:9e:d5:50:44:be:a1:62:53:32:40:43:b2:1e: ad:4a:ac:8e:3d:ee:b7:7d:63:9f:8a:e4:41:a6:40:fd:cd:20: d2:34:96:16:9e:76:27:3d:82:8f:4a:92:e9:4c:88:6b:4d:84: 9b:7e:e9:c6:04:c8:ac:99:1c:0c:22:bd:c2:73:bf:2d:6c:dd: e4:86:4d:a0:44:5c:92:d9:c4:cf:87:d8:57:85:f1:bf:0e:4e: c7:54:9d:8e:bb:5b:2c:18:2e:bd:29:c0:54:3a:cf:30:77:39: c3:a7:0c:9d:a3:79:7a:ec:9a:d9:fb:d2:a3:36:d9:62:2c:10: ff:29:24:d9:4b:d5:cd:c5:fc:06:65:2c:29:ef:0d:4a:b8:6a: 30:00:51:8d:ad:f0:c0:7f:c5:8b:b5:23:ce:57:b2:a6:74:73: f5:cc:72:0c:48:96:20:be:77:f8:42:9a:26:73:1a:aa:00:bc: 24:91:c7:76:d4:50:db:c4:3e:30:52:ee:9a:5a:e5:e9:19:b0: 17:ed:5e:95:cf:31:0a:67:4b:6e:61:3b:44:18:07:60:f5:c4: b2:ac:86:50:6a:67:ee:38:8d:90:9a:d1:ae:a7:2d:86:72:6a: a6:b3:68:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPxOEVDGRZVRIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWE0OGUxYzYtOTE2OS00Njc3LWEwYTMtMzVkZmFmOTcwMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGc7Fn47dR7TZglzoV6h304Od9tT1iJb/1mk 6/1R2xEgPNr0yZSHObJUfCC2T2MdZ0lE/QyWlLO0gC+M4CerSDV0L8MlcCi4jEgN vj/pnA6pous80KqQZDJIwERi55UdPVXhizfgRDegBS/CuUl9D05vLZukG5oUOBiE auFb0w8yDW46iL0G8B719FhOG68pV22+C+fWKfYbw69oZ9F8hOlMwpOu9ZaFRgSf ZMgTmpG0qp+IQYwWZYSQnEXO25iJ9C1AfX0drK3WbhTR+osogtKqAUKedlXYmEHi th0XHun49WEL4ddPbEwswaR5p7OGAy7sGnN2sLh8Eyowf6awuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnMfRFGjEDUTXzojHNz2luPVwRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNDNlZmE5ZGEtZjJiYy0z OTgzLWE5MTItODZkMjQ2ODE5MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQbWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIfXBvmWFOA005TqePHMhyn7IXSpSyGntVQRL6hYlMyQEOyHq1KrI49 7rd9Y5+K5EGmQP3NINI0lhaedic9go9KkulMiGtNhJt+6cYEyKyZHAwivcJzvy1s 3eSGTaBEXJLZxM+H2FeF8b8OTsdUnY67WywYLr0pwFQ6zzB3OcOnDJ2jeXrsmtn7 0qM22WIsEP8pJNlL1c3F/AZlLCnvDUq4ajAAUY2t8MB/xYu1I85XsqZ0c/XMcgxI liC+d/hCmiZzGqoAvCSRx3bUUNvEPjBS7ppa5ekZsBftXpXPMQpnS25hO0QYB2D1 xLKshlBqZ+44jZCa0a6nLYZyaqazaEQ= -----END CERTIFICATE-----Generated at Thu Aug 21 07:54:42 2025 by rpki-client