$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa File: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (raw, json) Hash identifier: fMYCiIN876L2SHHLOaHbCdin0vdgc4Jbt2s9KJne/3A= Subject key identifier: DF:F5:93:8D:8B:92:26:3F:90:28:48:F4:9D:EE:A8:42:DE:2B:EC:90 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584A6DBB3B7A8C91CBEDFFDC6B4E Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3b:7a:8c:91:cb:ed:ff:dc:6b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=7553cc97-d520-4e8a-ac7b-8d40e6a99a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:37:7d:f0:c4:51:22:00:78:77:50:fe:b9: 21:e7:03:8a:0a:8a:1e:3e:41:99:5f:22:29:75:ed: fc:8d:fc:38:2a:f4:b3:22:05:98:67:16:3a:93:5e: 87:28:d5:ce:a8:1e:d1:13:b6:24:d3:b3:36:93:dd: 52:61:54:ae:2c:a8:2f:e1:b8:ad:18:ab:05:27:43: dc:9d:21:f2:28:a3:fd:7f:94:21:84:df:aa:86:6c: 07:08:89:9c:34:64:10:a1:20:0e:66:ff:41:81:54: 7b:f2:15:ff:5e:fa:12:f6:27:8c:62:7f:93:e0:8c: df:ef:d7:87:c0:b5:f5:6f:e8:70:25:cd:4d:17:f7: d1:2f:1c:87:c2:ef:96:b3:e9:12:81:5b:35:30:69: 83:44:67:3e:9b:5e:8d:42:50:a2:2b:fe:2b:4a:d6: bf:84:57:d1:9e:ec:aa:be:29:f7:83:a3:0a:46:3d: e2:e9:fc:21:71:61:fb:aa:2b:2e:43:15:87:05:3e: b7:f2:bc:8d:b2:f1:7a:80:f1:f9:98:0b:20:ee:59: 34:49:b1:ff:85:85:0a:70:a1:0f:86:6b:5d:62:eb: c6:44:21:05:e5:18:06:0c:31:30:ca:2b:28:51:2b: 93:c0:59:80:bb:6a:aa:72:2c:58:c6:b6:b1:75:ca: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F5:93:8D:8B:92:26:3F:90:28:48:F4:9D:EE:A8:42:DE:2B:EC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ae:bf:1d:ea:c8:59:e5:29:8c:da:bf:ab:b8:76:3a:cb:4e: ba:24:9d:a4:70:f9:bf:01:1a:1d:d0:bc:b8:3c:3e:31:db:be: 26:22:1b:9c:55:f5:9a:97:d9:ef:8f:07:23:4e:89:06:73:c0: f0:17:30:56:80:78:56:75:bd:6a:ab:b6:63:f7:6b:0d:e4:f7: 54:5f:06:d9:b2:72:ee:46:4a:f5:13:0b:5e:a4:3e:25:d5:bd: d3:b1:ca:d5:6c:04:e2:af:96:15:79:37:a8:56:8c:1c:2e:3d: 26:be:f2:19:d9:57:b3:bd:d3:98:ff:e9:8d:9e:8b:57:9b:46: ac:bd:0a:dc:bc:16:b1:72:9e:d7:0f:4e:75:43:ae:57:b6:c9: 00:36:7b:1c:64:d5:c7:df:71:8b:bf:f1:20:72:ee:bd:73:89: 15:e5:6a:cc:ea:e2:c5:e3:d6:83:59:19:db:73:23:c3:36:32: 6a:c7:81:a5:ef:7a:31:66:8b:13:dc:bc:0e:f3:a8:fd:4b:e3: 27:d1:7c:71:45:2c:44:a0:96:44:53:d2:df:aa:39:c4:e2:6d: 3c:31:db:61:02:d0:0a:f5:b8:6e:85:de:3e:90:81:91:2b:38: 34:a3:0a:b1:6f:30:81:ce:98:10:77:e1:ef:07:59:87:27:71: ca:cc:9a:0b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEptuzt6jJHL7f/ca04wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NzU1M2NjOTctZDUyMC00ZThhLWFjN2ItOGQ0MGU2YTk5YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3c3ffDEUSIAeHdQ/rkh5wOKCooePkGZXyIp de38jfw4KvSzIgWYZxY6k16HKNXOqB7RE7Yk07M2k91SYVSuLKgv4bitGKsFJ0Pc nSHyKKP9f5QhhN+qhmwHCImcNGQQoSAOZv9BgVR78hX/XvoS9ieMYn+T4Izf79eH wLX1b+hwJc1NF/fRLxyHwu+Ws+kSgVs1MGmDRGc+m16NQlCiK/4rSta/hFfRnuyq vin3g6MKRj3i6fwhcWH7qisuQxWHBT638ryNsvF6gPH5mAsg7lk0SbH/hYUKcKEP hmtdYuvGRCEF5RgGDDEwyisoUSuTwFmAu2qqcixYxraxdcqnRwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFN/1k42LkiY/kChI9J3uqELeK+yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvMzc2Nzc2MDItMGE0My0z NGU4LTk2MjItYTRhYzU2ZDdkMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ6uvx3qyFnlKYzav6u4djrLTroknaRw+b8BGh3Q vLg8PjHbviYiG5xV9ZqX2e+PByNOiQZzwPAXMFaAeFZ1vWqrtmP3aw3k91RfBtmy cu5GSvUTC16kPiXVvdOxytVsBOKvlhV5N6hWjBwuPSa+8hnZV7O905j/6Y2ei1eb Rqy9Cty8FrFyntcPTnVDrle2yQA2exxk1cffcYu/8SBy7r1ziRXlaszq4sXj1oNZ GdtzI8M2MmrHgaXvejFmixPcvA7zqP1L4yfRfHFFLESglkRT0t+qOcTibTwx22EC 0Ar1uG6F3j6QgZErODSjCrFvMIHOmBB34e8HWYcnccrMmgs= -----END CERTIFICATE-----Generated at Thu Jul 10 08:54:33 2025 by rpki-client