$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa File: 00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa (raw, json) Hash identifier: Ib5gW9Z8CDwS0jGcQ7/TibgCQZQVG7zb9aHBkX+uSnQ= Subject key identifier: E1:DC:83:6B:45:A7:64:9D:A3:2C:2F:13:1F:41:E6:CA:A3:0D:16:19 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584AF5212E34B596C1C8C6EC1F80 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 46450 IP address blocks: 64.112.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2e:34:b5:96:c1:c8:c6:ec:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=7ccbad5b-02bc-45a6-b12d-16163ba05cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:ed:e8:18:9f:15:34:74:a0:b8:6e:3d:97: 27:20:88:6c:e4:70:db:11:d5:6c:b1:22:93:a1:a2: 3e:ea:07:be:c3:9d:83:8a:4e:21:f2:e1:52:f7:4e: 0c:57:34:8e:99:2e:43:3e:5b:71:b1:0e:f6:f5:26: b7:24:65:03:a1:82:ac:95:9c:dd:76:fc:35:e3:c2: ad:ad:a6:74:e2:21:32:1f:7e:7b:4b:16:82:c3:34: b9:db:41:bf:1a:3f:8f:e2:96:1a:31:e6:92:92:23: dc:01:f3:33:ed:18:41:99:0a:30:f7:d1:8a:47:1e: d2:cc:ac:11:19:83:2a:d9:65:8d:5e:be:bd:3a:b1: e4:6f:6a:a8:0d:28:d7:39:75:51:61:39:cb:13:d3: 78:4f:c0:02:78:da:c6:a9:cb:eb:0d:4a:94:e7:c5: 03:16:c5:7b:e4:40:e5:4f:7c:b5:ca:71:2f:16:d9: 5e:0d:22:70:ce:5c:04:3b:43:1d:cd:f1:88:9e:88: 93:d2:06:6d:d8:48:66:e4:73:e7:1c:c5:99:d4:3e: bc:a7:11:65:cc:52:89:9c:14:36:42:65:6a:56:ee: 06:96:da:15:3e:de:66:27:24:04:49:db:bf:15:49: 41:58:1d:1e:1d:39:6e:11:52:79:4f:4d:2f:80:26: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DC:83:6B:45:A7:64:9D:A3:2C:2F:13:1F:41:E6:CA:A3:0D:16:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 64.112.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c2:16:5a:b0:64:1f:2e:ac:11:8d:d4:13:10:2b:a7:7b:07: 8d:4c:2f:f8:a7:4b:f5:0b:4e:58:2c:ee:e6:ba:71:8e:02:da: ea:8c:f3:0c:5b:d7:49:44:5f:37:f4:12:13:b1:56:e4:96:30: d9:0f:49:88:07:97:67:cd:9f:78:d9:6c:1b:4e:9d:95:b8:a6: b3:98:06:ac:27:74:14:e2:65:15:0b:14:cd:c9:d6:0f:30:2f: d3:0d:6c:52:a6:91:26:02:7a:3d:56:6b:80:bf:30:ea:78:9f: a5:54:72:d7:42:f8:67:27:8c:b1:76:49:95:6b:0f:f5:fb:42: fb:de:a2:db:09:7a:18:05:99:f2:6b:c4:d1:fd:03:58:d1:89: cc:c6:2f:d6:ab:4a:c5:d9:03:e1:e9:e2:33:aa:c2:c7:f1:e6: 3e:fc:d5:8b:57:2e:8b:54:4b:3b:d1:d5:a8:d0:7b:a6:42:33: 0d:a1:6f:95:de:7d:bd:f8:de:cd:b7:35:c6:bf:4a:d3:0f:af: b1:41:ff:ec:1f:27:12:bc:0f:4c:60:d2:3e:54:1f:f0:7a:bd: fc:5b:be:1b:be:1b:17:5c:38:5a:2a:cb:3b:af:d8:ec:9d:fc: 2f:ad:27:43:8f:42:90:bf:56:98:cb:10:d2:ce:20:00:2a:bf: 4d:8a:59:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IS40tZbByMbsH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2NjYmFkNWItMDJiYy00NWE2LWIxMmQtMTYxNjNiYTA1Y2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYnt6BifFTR0oLhuPZcnIIhs5HDbEdVssSKT oaI+6ge+w52Dik4h8uFS904MVzSOmS5DPltxsQ729Sa3JGUDoYKslZzddvw148Kt raZ04iEyH357SxaCwzS520G/Gj+P4pYaMeaSkiPcAfMz7RhBmQow99GKRx7SzKwR GYMq2WWNXr69OrHkb2qoDSjXOXVRYTnLE9N4T8ACeNrGqcvrDUqU58UDFsV75EDl T3y1ynEvFtleDSJwzlwEO0MdzfGInoiT0gZt2Ehm5HPnHMWZ1D68pxFlzFKJnBQ2 QmVqVu4GltoVPt5mJyQESdu/FUlBWB0eHTluEVJ5T00vgCY+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHcg2tFp2SdoywvEx9B5sqjDRYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDBhYjk5ODgtYjgzYS0z ZTQyLWFhZmYtNzJjNGYwNWY1YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnCFlqwZB8urBGN1BMQK6d7B41ML/inS/ULTlgs7ua6cY4C2uqM8wxb 10lEXzf0EhOxVuSWMNkPSYgHl2fNn3jZbBtOnZW4prOYBqwndBTiZRULFM3J1g8w L9MNbFKmkSYCej1Wa4C/MOp4n6VUctdC+GcnjLF2SZVrD/X7QvveotsJehgFmfJr xNH9A1jRiczGL9arSsXZA+Hp4jOqwsfx5j781YtXLotUSzvR1ajQe6ZCMw2hb5Xe fb343s23Nca/StMPr7FB/+wfJxK8D0xg0j5UH/B6vfxbvhu+GxdcOFoqyzuv2Oyd /C+tJ0OPQpC/VpjLENLOIAAqv02KWcA= -----END CERTIFICATE-----Generated at Sat Sep 6 09:35:24 2025 by rpki-client