$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa File: 553871bf-6d14-32ab-81d2-f44e861298f5.roa (raw, json) Hash identifier: 1eJ6/KLQtBW69tsaFSULhLkck9mZ48njRk45Aax1w5w= Subject key identifier: 23:17:D7:A8:C0:3B:82:9B:31:87:35:BE:C9:62:ED:8E:D1:42:55:EE Certificate issuer: /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14 Certificate serial: 010D0C9F4328584B1271668FA5AC1D29281BF900 Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 14230 IP address blocks: 97.64.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:66:8f:a5:ac:1d:29:28:1b:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=5c20bc05-bb49-4bcf-b36a-fc38310aff69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:75:06:6f:26:e7:44:2e:d7:2c:f1:d8:0d: df:f1:33:98:9d:97:3f:8d:0e:6d:cd:29:e7:05:e8: 65:c3:9b:8f:01:96:11:85:bd:b1:65:66:72:ad:1f: 91:b6:99:64:e3:f0:4d:2c:82:b8:9e:5a:2a:c9:41: 35:ad:65:4c:7a:b6:e5:91:30:4a:37:0e:b2:e7:3c: 38:aa:8e:24:30:93:e3:62:7c:ac:7b:bf:db:22:ba: fa:3a:dd:70:32:44:ed:56:d2:c1:70:d5:c3:4d:b1: cf:e3:06:8f:5f:df:fd:87:42:b4:19:08:1b:26:c1: e8:67:40:08:7d:b2:af:69:bc:6c:4f:d3:50:b9:04: 25:8b:a1:35:76:9c:dc:a9:97:c7:aa:af:c7:65:0a: 62:48:9a:8f:f3:4f:d0:24:0c:2f:c7:57:f6:c9:f5: 4a:c9:13:f2:b2:d1:96:cb:19:fb:4c:98:d7:cf:0c: 88:df:ff:d2:4e:76:6c:c7:69:0f:37:fd:65:eb:78: c1:18:b4:8e:82:64:2b:b5:f3:9e:77:15:8c:90:ea: e5:24:4a:f1:82:90:b9:e6:55:9e:ae:92:4f:1f:e2: 41:74:7d:d3:be:b3:c1:1d:d3:b6:00:15:75:fe:8f: c7:51:09:c8:32:b2:ac:c1:03:18:30:c9:f7:0d:78: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:17:D7:A8:C0:3B:82:9B:31:87:35:BE:C9:62:ED:8E:D1:42:55:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl X509v3 Authority Key Identifier: keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer sbgp-ipAddrBlock: critical IPv4: 97.64.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:72:0c:28:11:c7:92:b4:b1:a1:50:ff:50:02:af:c7:0a:a1: 0a:80:aa:00:50:b1:9d:b9:3e:3e:8f:0d:33:66:58:dc:ab:52: 45:15:fd:6c:ac:20:de:a6:01:93:c4:71:90:3e:94:27:08:b9: d6:b5:d5:54:26:fc:7a:9f:7d:d5:7b:70:86:e5:75:7f:4a:87: b9:14:d2:80:6d:12:0a:85:7f:fc:36:79:b0:80:40:26:82:7e: 3c:a7:62:d6:0c:aa:d3:44:87:d1:1b:94:32:dd:67:dc:e0:d8: f9:9b:f6:4d:6f:21:2f:8c:cb:94:73:da:91:a8:e8:13:cd:ae: b2:b7:d8:95:cf:90:17:15:fb:49:42:e1:61:58:63:52:a0:09: a5:17:28:9d:62:35:27:c2:6f:f7:42:7f:b7:de:44:ce:a4:c0: 63:17:7e:44:f0:c1:f2:a8:e0:c5:2c:d8:0e:90:7a:69:ab:0c: e1:83:0c:bb:3e:75:b3:27:b0:68:08:79:d3:9d:8f:a6:4f:ce: e1:e3:7c:f5:c3:52:d3:f2:24:b8:5d:90:67:fc:ab:cb:ca:95: f8:04:17:b3:ce:8b:6f:34:0a:df:1b:a1:0e:33:d7:84:70:1b: df:42:84:10:b6:f8:75:30:f5:85:58:4d:b5:33:43:8b:78:11: 9b:97:c8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWaPpawdKSgb+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmYjY5NjYtZTZlNy00Y2IyLWJkZWUtOGQyNmU1OWQ5 YTE0MB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk NWMyMGJjMDUtYmI0OS00YmNmLWIzNmEtZmMzODMxMGFmZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHt1Bm8m50Qu1yzx2A3f8TOYnZc/jQ5tzSnn Behlw5uPAZYRhb2xZWZyrR+Rtplk4/BNLIK4nloqyUE1rWVMerblkTBKNw6y5zw4 qo4kMJPjYnyse7/bIrr6Ot1wMkTtVtLBcNXDTbHP4waPX9/9h0K0GQgbJsHoZ0AI fbKvabxsT9NQuQQli6E1dpzcqZfHqq/HZQpiSJqP80/QJAwvx1f2yfVKyRPystGW yxn7TJjXzwyI3//STnZsx2kPN/1l63jBGLSOgmQrtfOedxWMkOrlJErxgpC55lWe rpJPH+JBdH3TvrPBHdO2ABV1/o/HUQnIMrKswQMYMMn3DXjYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMX16jAO4KbMYc1vsli7Y7RQlXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNmZi Njk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2ZTU5ZDlhMTQvNTUzODcxYmYtNmQxNC0z MmFiLTgxZDItZjQ0ZTg2MTI5OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTZmYjY5NjYtZTZlNy00Y2IyLWJk ZWUtOGQyNmU1OWQ5YTE0L2U2ZmI2OTY2LWU2ZTctNGNiMi1iZGVlLThkMjZlNTlk OWExNC5jcmwwHwYDVR0jBBgwFoAU8Ox+ebW+yLRnWn4ForN4Q38UKGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNmZiNjk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2 ZTU5ZDlhMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9yDCgRx5K0saFQ/1ACr8cKoQqAqgBQsZ25Pj6PDTNmWNyrUkUV/Wys IN6mAZPEcZA+lCcIuda11VQm/HqffdV7cIbldX9Kh7kU0oBtEgqFf/w2ebCAQCaC fjynYtYMqtNEh9EblDLdZ9zg2Pmb9k1vIS+My5Rz2pGo6BPNrrK32JXPkBcV+0lC 4WFYY1KgCaUXKJ1iNSfCb/dCf7feRM6kwGMXfkTwwfKo4MUs2A6QemmrDOGDDLs+ dbMnsGgIedOdj6ZPzuHjfPXDUtPyJLhdkGf8q8vKlfgEF7POi280Ct8boQ4z14Rw G99ChBC2+HUw9YVYTbUzQ4t4EZuXyKk= -----END CERTIFICATE-----Generated at Sat Sep 6 09:35:25 2025 by rpki-client