$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa File: 6656f8b9-6a2a-3721-b635-8ceda21f6394.roa (raw, json) Hash identifier: jhP1TEuRnkvIF3IaDSUUo71b5gK/ElUJoZRPOiO3iQ8= Subject key identifier: 33:2D:13:10:33:7D:FD:0E:8A:D1:0C:B8:18:41:65:B4:E4:C5:71:BF Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584B110C0C8BE2032CD0B3822380 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 22612 IP address blocks: 192.64.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0c:8b:e2:03:2c:d0:b3:82:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=9b714672-858f-4853-bedd-e553e3e14b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:9c:dd:23:05:5b:f2:69:10:11:04:6a:36: 10:72:e3:d2:4a:f6:c0:06:18:d3:e1:03:65:02:05: 56:3c:3e:e8:06:6d:86:fd:e9:cd:d0:02:76:fa:bf: 07:0c:b3:9a:cf:d4:e4:22:0d:15:7f:dd:65:22:c0: 2f:0d:a4:a7:e0:57:21:1f:56:9f:0c:e1:aa:7e:78: d3:72:c6:91:7e:79:f6:ce:31:e2:58:b1:b6:76:22: c8:cc:31:76:a8:6a:0e:0a:2c:70:38:96:ab:60:5f: 09:92:4f:ef:61:4b:81:0f:93:b7:78:a1:69:ad:5e: 70:71:bd:6e:d2:e5:36:10:2b:fc:e8:18:40:fc:54: 52:61:85:21:7b:4f:fa:d1:ed:95:4e:5a:51:7e:e5: 59:af:29:10:37:c7:68:44:61:09:66:82:4d:59:2a: fd:9e:23:d7:3e:ae:a5:ff:d0:f7:12:45:e0:68:c3: 85:3f:40:ac:db:f5:89:26:11:58:c1:1e:40:79:a1: 5b:10:30:16:96:d1:70:9c:92:ea:c1:01:fa:a0:7c: d2:5a:66:c8:1a:f7:57:ef:88:36:ac:46:36:2c:7b: a8:98:13:77:06:ea:12:82:b1:4a:9c:c9:64:53:b1: e4:6e:be:a6:31:5f:99:13:fc:2e:b0:f5:c3:f7:7e: 51:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:13:10:33:7D:FD:0E:8A:D1:0C:B8:18:41:65:B4:E4:C5:71:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 192.64.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bb:19:f5:d9:60:09:77:c2:b9:29:80:ca:43:27:f2:ed:56: a8:ff:25:a0:15:ee:b9:62:f9:3a:8b:04:a9:92:cd:ed:3e:ed: 65:22:51:f3:35:b7:7a:87:2e:0a:c6:7d:cb:ae:91:27:6e:b1: 76:1e:78:f4:ee:dd:59:f2:b2:04:8e:9b:f4:6c:8d:01:2d:b9: e3:70:ef:a3:e3:bb:6f:89:f7:a1:ee:92:24:36:de:65:bf:a2: e9:63:95:94:9a:de:bc:53:8f:84:c9:a5:09:da:51:02:87:1e: 98:07:3e:c4:f0:71:d6:2a:01:42:35:5e:c7:76:f4:b8:01:40: c2:90:ea:70:8d:7d:a1:ee:c7:f2:99:1a:30:b8:fb:ca:6a:07: c7:6f:54:5d:94:5d:8d:03:20:2c:13:73:ab:2b:ea:0e:83:90: 46:7f:a7:64:2d:7f:77:b4:b6:89:e9:57:08:7e:d7:f8:86:33: ea:13:d5:8e:14:34:39:7f:4e:b1:d4:2b:5a:84:45:75:1f:2f: 00:84:bc:21:ea:65:4f:e2:c7:09:5d:90:6e:a6:82:f3:b8:0a: 4c:2f:07:90:08:ff:af:01:75:12:ab:e3:6e:a2:d2:7a:91:10: 43:81:d2:7b:59:30:93:2f:b7:d3:0d:fa:d6:b5:72:80:95:08: 78:08:5f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAyL4gMs0LOCI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWI3MTQ2NzItODU4Zi00ODUzLWJlZGQtZTU1M2UzZTE0YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Oc3SMFW/JpEBEEajYQcuPSSvbABhjT4QNl AgVWPD7oBm2G/enN0AJ2+r8HDLOaz9TkIg0Vf91lIsAvDaSn4FchH1afDOGqfnjT csaRfnn2zjHiWLG2diLIzDF2qGoOCixwOJarYF8Jkk/vYUuBD5O3eKFprV5wcb1u 0uU2ECv86BhA/FRSYYUhe0/60e2VTlpRfuVZrykQN8doRGEJZoJNWSr9niPXPq6l /9D3EkXgaMOFP0Cs2/WJJhFYwR5AeaFbEDAWltFwnJLqwQH6oHzSWmbIGvdX74g2 rEY2LHuomBN3BuoSgrFKnMlkU7Hkbr6mMV+ZE/wusPXD935REQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMtExAzff0OitEMuBhBZbTkxXG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvNjY1NmY4YjktNmEyYS0z NzIxLWI2MzUtOGNlZGEyMWY2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwEBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu7GfXZYAl3wrkpgMpDJ/LtVqj/JaAV7rli+TqLBKmSze0+7WUiUfM1 t3qHLgrGfcuukSdusXYeePTu3VnysgSOm/RsjQEtueNw76Pju2+J96HukiQ23mW/ ouljlZSa3rxTj4TJpQnaUQKHHpgHPsTwcdYqAUI1Xsd29LgBQMKQ6nCNfaHux/KZ GjC4+8pqB8dvVF2UXY0DICwTc6sr6g6DkEZ/p2Qtf3e0tonpVwh+1/iGM+oT1Y4U NDl/TrHUK1qERXUfLwCEvCHqZU/ixwldkG6mgvO4CkwvB5AI/68BdRKr426i0nqR EEOB0ntZMJMvt9MN+ta1coCVCHgIX9U= -----END CERTIFICATE-----Generated at Mon Sep 8 13:42:35 2025 by rpki-client