$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/64f28448-4f78-3a4a-8d0c-9117ce86404f.roa File: 64f28448-4f78-3a4a-8d0c-9117ce86404f.roa (raw, json) Hash identifier: 3UolsaiIvZFSR8w7wQq/QHjGeqkJDBuYiO00VagHdG4= Subject key identifier: AE:8A:96:7B:39:BE:2F:61:3E:B0:34:A6:EA:6C:5C:D5:16:50:5F:A3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AFBAD0C4C602800A7682383A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/64f28448-4f78-3a4a-8d0c-9117ce86404f.roa Signing time: Tue 26 Aug 2025 09:17:20 +0000 ROA not before: Tue 26 Aug 2025 09:17:20 +0000 ROA not after: Mon 24 Nov 2025 10:17:20 +0000 asID: 9304 IP address blocks: 216.132.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fb:ad:0c:4c:60:28:00:a7:68:23:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 09:17:20 2025 GMT Not After : Nov 24 10:17:20 2025 GMT Subject: CN=af053c6b-bff6-47c0-9dad-3fbb632d42dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:3e:27:67:c9:92:9b:49:ee:65:43:c9:63: c8:dd:a3:74:c2:8f:f3:94:0c:40:c4:b6:eb:1b:bb: 42:37:77:e4:d1:bc:c3:3d:9e:13:8e:de:7c:4c:8f: b7:27:12:52:fc:49:bc:54:69:cc:70:78:b6:79:46: 8a:66:15:53:a6:bf:00:66:14:0a:cb:aa:3f:76:74: e3:9c:df:c2:68:cd:06:21:b4:9f:5d:83:2c:53:35: b0:f2:f7:cd:e4:df:2a:2a:cc:e7:15:e5:1e:65:b2: 69:56:d8:7c:cc:95:28:13:89:bb:63:75:64:89:c0: 19:f1:30:b2:04:2d:36:04:05:09:5b:3d:c7:13:1a: 43:05:46:ce:d0:66:11:86:48:41:36:e3:f8:a2:6e: 6b:66:9c:d7:e9:e2:8d:ec:7b:59:47:ff:37:20:f4: db:47:73:f5:3c:da:4d:d3:01:a8:95:96:05:19:b3: 71:ae:d5:a6:e9:cd:34:37:97:2b:2f:3f:9e:86:b8: 3f:76:7b:fd:98:f6:62:9d:5d:3e:cd:1b:06:74:a8: 1b:a4:50:d0:e3:21:18:f6:fc:5b:f4:a1:b6:e4:e8: 9d:36:c2:8e:13:05:19:37:ee:c7:be:db:d0:70:4d: 77:57:ab:a8:f5:b8:f0:b6:41:17:90:c0:1d:04:77: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8A:96:7B:39:BE:2F:61:3E:B0:34:A6:EA:6C:5C:D5:16:50:5F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/64f28448-4f78-3a4a-8d0c-9117ce86404f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1b:f8:c5:af:c3:12:d2:23:d0:54:e7:22:df:25:78:6e:ce: ca:c5:28:af:b1:a5:bb:a5:e8:55:9e:a8:06:68:ae:f3:38:8e: 9d:5a:a2:bd:cf:62:e8:19:7b:34:4b:79:9b:6d:11:64:cf:3c: 02:40:a3:b7:55:eb:77:9f:29:f6:40:04:50:7c:36:4e:e1:c8: dd:82:69:eb:6d:a7:5a:b2:85:be:fb:d9:d7:94:ee:81:3e:73: 1f:7d:ab:6e:af:a1:ca:76:2f:54:0e:66:b7:bf:3b:82:07:c9: 3e:b7:75:04:17:c6:f6:b7:00:e0:57:8f:cf:04:c6:21:5d:21: 0f:b1:8f:ab:38:3a:54:f0:5b:f9:9f:2f:cb:9e:3a:fc:b1:e8: 8c:95:c0:43:c7:0e:4e:a6:ab:f1:7b:5d:fa:14:da:dc:2c:95: 3d:c8:58:01:9e:1f:a2:8e:6e:1d:74:d5:c7:0f:d2:2e:55:19: 73:06:54:40:c8:17:1d:6c:d5:6e:66:88:5a:8a:ed:4f:cb:84: 60:ac:93:7e:2b:d1:32:bf:fa:80:26:3f:f7:21:9e:1f:88:e5: e2:dc:48:0c:95:6f:0a:07:7a:45:9b:7a:2c:50:aa:0d:27:50: d4:68:73:22:4a:d1:64:9a:7f:69:de:8b:8c:72:e0:1f:34:47: cb:34:e7:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr7rQxMYCgAp2gjg6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyNjA5MTcyMFoXDTI1MTEyNDEwMTcyMFowLzEtMCsGA1UEAxMk YWYwNTNjNmItYmZmNi00N2MwLTlkYWQtM2ZiYjYzMmQ0MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaE+J2fJkptJ7mVDyWPI3aN0wo/zlAxAxLbr G7tCN3fk0bzDPZ4Tjt58TI+3JxJS/Em8VGnMcHi2eUaKZhVTpr8AZhQKy6o/dnTj nN/CaM0GIbSfXYMsUzWw8vfN5N8qKsznFeUeZbJpVth8zJUoE4m7Y3VkicAZ8TCy BC02BAUJWz3HExpDBUbO0GYRhkhBNuP4om5rZpzX6eKN7HtZR/83IPTbR3P1PNpN 0wGolZYFGbNxrtWm6c00N5crLz+ehrg/dnv9mPZinV0+zRsGdKgbpFDQ4yEY9vxb 9KG25OidNsKOEwUZN+7HvtvQcE13V6uo9bjwtkEXkMAdBHcj/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6Klns5vi9hPrA0pupsXNUWUF+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjRmMjg0NDgtNGY3OC0z YTRhLThkMGMtOTExN2NlODY0MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcb+MWvwxLSI9BU5yLfJXhuzsrFKK+xpbul6FWeqAZorvM4jp1aor3P YugZezRLeZttEWTPPAJAo7dV63efKfZABFB8Nk7hyN2Caettp1qyhb772deU7oE+ cx99q26vocp2L1QOZre/O4IHyT63dQQXxva3AOBXj88ExiFdIQ+xj6s4OlTwW/mf L8ueOvyx6IyVwEPHDk6mq/F7XfoU2twslT3IWAGeH6KObh101ccP0i5VGXMGVEDI Fx1s1W5miFqK7U/LhGCsk34r0TK/+oAmP/chnh+I5eLcSAyVbwoHekWbeixQqg0n UNRocyJK0WSaf2nei4xy4B80R8s056E= -----END CERTIFICATE-----Generated at Tue Aug 26 18:32:11 2025 by rpki-client