$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/7adcea05-6e03-3a0c-90b5-6276591bdd71.roa File: 7adcea05-6e03-3a0c-90b5-6276591bdd71.roa (raw, json) Hash identifier: /A/Ew3PzAyLlY1Il1t97Jix0GEC4s/iask9UXGYHyF0= Subject key identifier: 75:C1:42:46:9D:C3:A0:D5:24:04:66:8C:48:24:90:A3:5D:90:14:C8 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584B1806D3E62A106F2FAE416900 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/7adcea05-6e03-3a0c-90b5-6276591bdd71.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 33652 IP address blocks: 64.130.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d3:e6:2a:10:6f:2f:ae:41:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=1d3ffaf5-981b-48e1-9e47-c2dfdaec2958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:42:ba:23:98:01:c8:b0:14:df:d3:5b:f9: 6d:87:a1:2d:26:49:e2:68:eb:b2:c3:c6:b7:e0:7f: be:0f:21:31:f1:eb:ae:d4:a5:8a:d2:41:94:f8:4c: 52:f3:13:e6:c0:3c:e8:a3:2c:00:b0:90:de:70:12: af:e9:e3:cc:e4:6f:d5:d0:62:15:74:c8:b9:3c:b0: c9:c6:52:3a:82:e7:2e:4b:8d:e8:2a:03:59:24:97: 58:fe:b3:a9:73:b1:a0:e7:57:28:94:f0:b1:f7:0d: 97:0f:6b:d6:b9:c3:32:8a:58:72:3b:d3:49:6d:d6: 2c:a0:d5:31:73:82:fb:8c:d9:93:75:27:d5:49:84: cb:5b:3b:d4:62:0a:fd:51:c6:92:87:e0:8c:0a:97: a9:ea:bd:f2:f9:75:77:81:07:2a:26:f3:b3:c8:c9: a8:67:4b:7c:b8:c2:d3:0b:58:5c:a9:6f:86:5d:11: d6:f1:7e:9e:d9:3d:83:eb:61:4f:2e:ed:96:34:cc: f0:af:78:ed:5c:ce:1c:81:b5:01:ea:67:81:0c:0f: 7c:a3:17:c0:af:93:65:24:02:c6:d3:78:fb:b8:b3: 3d:f1:8c:ea:e5:4f:f0:b4:e1:22:19:83:c3:04:e6: d1:31:90:eb:a8:b4:df:95:b4:1f:3a:ce:9e:39:48: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C1:42:46:9D:C3:A0:D5:24:04:66:8C:48:24:90:A3:5D:90:14:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/7adcea05-6e03-3a0c-90b5-6276591bdd71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 64.130.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:99:28:5d:76:5c:52:c1:8a:83:92:99:bd:b9:f0:e4:88:7a: f6:fb:9b:a6:23:b1:b5:36:2d:b8:e1:dd:0f:6c:8e:57:e6:df: da:f1:28:e7:08:18:74:5e:c2:d2:de:6c:de:15:fe:ed:63:73: fb:e6:ff:f7:e5:ee:02:7c:3d:e1:8a:43:0a:65:4c:d0:9b:e3: 1e:b1:2d:17:ae:bb:74:1c:20:b5:a3:a1:d1:17:5e:7e:26:01: 96:9f:3d:ca:7b:2a:c0:8a:8a:48:ba:a6:49:72:7b:c7:de:8e: cf:64:a8:af:2e:8d:c2:71:54:85:b1:96:4b:6f:ce:ef:3c:ae: 2c:67:65:f6:f9:84:e1:32:f0:b6:f3:f1:3f:40:a1:f8:4c:ba: 92:c3:4e:70:79:a6:ef:57:54:a5:60:73:16:cf:3b:e3:41:7a: dd:02:a4:df:b7:c9:6c:e2:97:b5:4e:4a:13:3f:95:40:9c:94: 78:8e:30:f0:74:4a:39:78:c1:2b:38:10:8c:36:77:3a:21:37: ba:26:8f:3d:f0:be:e1:02:0f:2a:d0:e4:75:f8:d7:c9:84:e3: 39:cf:0c:79:19:cb:f8:d8:33:86:24:1a:ec:09:6e:84:80:25: f9:9d:24:96:46:dc:b1:b4:81:34:23:26:23:21:c1:0e:97:01: 64:da:62:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtPmKhBvL65BaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MWQzZmZhZjUtOTgxYi00OGUxLTllNDctYzJkZmRhZWMyOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bhCuiOYAciwFN/TW/lth6EtJkniaOuyw8a3 4H++DyEx8euu1KWK0kGU+ExS8xPmwDzooywAsJDecBKv6ePM5G/V0GIVdMi5PLDJ xlI6gucuS43oKgNZJJdY/rOpc7Gg51colPCx9w2XD2vWucMyilhyO9NJbdYsoNUx c4L7jNmTdSfVSYTLWzvUYgr9UcaSh+CMCpep6r3y+XV3gQcqJvOzyMmoZ0t8uMLT C1hcqW+GXRHW8X6e2T2D62FPLu2WNMzwr3jtXM4cgbUB6meBDA98oxfAr5NlJALG 03j7uLM98Yzq5U/wtOEiGYPDBObRMZDrqLTflbQfOs6eOUhaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXBQkadw6DVJARmjEgkkKNdkBTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvN2FkY2VhMDUtNmUwMy0z YTBjLTkwYjUtNjI3NjU5MWJkZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImZKF12XFLBioOSmb258OSIevb7m6YjsbU2Lbjh3Q9sjlfm39rxKOcI GHRewtLebN4V/u1jc/vm//fl7gJ8PeGKQwplTNCb4x6xLReuu3QcILWjodEXXn4m AZafPcp7KsCKiki6pklye8fejs9kqK8ujcJxVIWxlktvzu88rixnZfb5hOEy8Lbz 8T9AofhMupLDTnB5pu9XVKVgcxbPO+NBet0CpN+3yWzil7VOShM/lUCclHiOMPB0 Sjl4wSs4EIw2dzohN7omjz3wvuECDyrQ5HX418mE4znPDHkZy/jYM4YkGuwJboSA JfmdJJZG3LG0gTQjJiMhwQ6XAWTaYso= -----END CERTIFICATE-----Generated at Sat Sep 6 12:00:04 2025 by rpki-client