$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b9354ea7-d35c-3fc1-82ce-eab33b17ddf5.roa File: b9354ea7-d35c-3fc1-82ce-eab33b17ddf5.roa (raw, json) Hash identifier: Nw/PKDSAX/j4yWCNxS8nGHnAL3a+GV5+wCATAwPQo+s= Subject key identifier: 68:B7:99:12:C3:14:63:7E:7F:9D:69:F2:95:74:D4:0F:53:F4:CA:DF Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285849DA7E9EA2643FD3A1CC9D27C0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b9354ea7-d35c-3fc1-82ce-eab33b17ddf5.roa Signing time: Wed 14 May 2025 19:15:10 +0000 ROA not before: Wed 14 May 2025 19:15:10 +0000 ROA not after: Tue 12 Aug 2025 19:15:10 +0000 asID: 396356 IP address blocks: 64.145.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:7e:9e:a2:64:3f:d3:a1:cc:9d:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: May 14 19:15:10 2025 GMT Not After : Aug 12 19:15:10 2025 GMT Subject: CN=c225bdd9-c3f9-42db-933c-e881635da84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:36:4f:98:ef:94:cf:84:af:05:9d:56:b9: 9d:95:55:d5:4f:2d:3e:fd:34:53:db:08:92:56:a1: 01:b6:a7:c2:8a:0d:fe:8d:b6:f8:45:57:54:b3:18: f6:3c:bc:a4:24:b8:91:d2:b9:ad:e1:4a:78:31:50: df:5c:66:35:81:6f:7e:b7:bf:17:86:cb:67:ed:cd: 22:06:c3:cd:d4:b4:8a:4c:72:71:cc:96:6d:7b:df: c6:9e:12:8c:64:da:bb:c1:d6:99:b7:f7:03:66:9b: 0a:a4:57:17:e4:a6:8c:5e:06:2d:14:ed:2e:27:14: 5d:ad:63:e4:6a:90:90:3d:07:8b:ad:b3:4d:80:90: 62:b6:9a:6e:50:bc:8c:bf:08:fc:bd:33:98:65:cd: 84:d0:0a:4b:e8:3b:f1:65:82:b1:b6:d4:a7:93:94: 7e:57:86:6a:ec:d2:2a:27:cf:23:33:9f:3b:d4:fa: 33:ea:c7:33:2e:0d:d9:97:92:21:c8:13:fd:45:49: 3f:fd:42:3c:90:22:92:c1:25:3d:48:c6:2f:ab:3a: e1:14:3e:04:69:28:41:a8:eb:dd:b4:aa:58:b9:56: 01:ed:0c:17:d4:b9:fd:fb:2f:80:8b:f2:08:d6:1b: e4:ee:1d:8d:6b:99:26:28:27:2a:2b:1b:59:2b:33: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B7:99:12:C3:14:63:7E:7F:9D:69:F2:95:74:D4:0F:53:F4:CA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b9354ea7-d35c-3fc1-82ce-eab33b17ddf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8a:2f:2e:e0:25:c2:f1:2a:be:71:62:12:88:25:66:79:34: e9:a9:e8:fd:ef:12:9b:4e:97:eb:a5:a5:27:b4:c9:40:64:4a: 31:8b:3a:7f:d4:1c:0a:12:9e:1b:4d:8b:fc:a0:2a:ae:00:32: e0:36:7b:f6:2a:b6:b2:17:82:ac:2e:03:1d:ad:9d:81:6e:08: f7:8e:e5:7e:bc:68:be:ca:7a:13:6f:24:49:c2:30:78:8d:7a: d4:e3:43:60:34:82:13:e0:94:23:9f:f2:03:36:00:b7:01:89: 57:f0:63:dc:b1:7a:1e:4e:35:98:f6:86:a6:e8:e6:06:dd:60: c7:d1:7f:8a:9a:63:98:84:45:7a:3b:ea:e4:b2:8c:ad:e3:64: ee:d3:78:8c:73:e9:e4:0f:f2:0c:c7:34:6e:4b:f0:9f:c7:4e: 08:39:2a:b5:eb:ea:c7:84:75:37:96:b1:71:f9:ee:81:cc:4f: b6:96:9c:be:75:97:bf:e7:aa:d2:96:5d:a5:35:d2:8b:f8:f5: fe:f7:78:be:df:12:29:ce:36:55:a2:81:d7:dd:e3:8c:a7:20: e1:14:89:37:73:94:92:c4:f7:b3:c0:91:c6:10:e5:ea:e7:f5: 25:76:04:8e:72:3e:20:79:4a:51:96:e4:b6:af:2b:26:ff:80: f2:1d:60:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnafp6iZD/TocydJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDUxNDE5MTUxMFoXDTI1MDgxMjE5MTUxMFowLzEtMCsGA1UEAxMk YzIyNWJkZDktYzNmOS00MmRiLTkzM2MtZTg4MTYzNWRhODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6c2T5jvlM+ErwWdVrmdlVXVTy0+/TRT2wiS VqEBtqfCig3+jbb4RVdUsxj2PLykJLiR0rmt4Up4MVDfXGY1gW9+t78Xhstn7c0i BsPN1LSKTHJxzJZte9/GnhKMZNq7wdaZt/cDZpsKpFcX5KaMXgYtFO0uJxRdrWPk apCQPQeLrbNNgJBitppuULyMvwj8vTOYZc2E0ApL6DvxZYKxttSnk5R+V4Zq7NIq J88jM5871Poz6sczLg3Zl5IhyBP9RUk//UI8kCKSwSU9SMYvqzrhFD4EaShBqOvd tKpYuVYB7QwX1Ln9+y+Ai/II1hvk7h2Na5kmKCcqKxtZKzMR5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi3mRLDFGN+f51p8pV01A9T9MrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYjkzNTRlYTctZDM1Yy0z ZmMxLTgyY2UtZWFiMzNiMTdkZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+KLy7gJcLxKr5xYhKIJWZ5NOmp6P3vEptOl+ulpSe0yUBkSjGLOn/U HAoSnhtNi/ygKq4AMuA2e/YqtrIXgqwuAx2tnYFuCPeO5X68aL7KehNvJEnCMHiN etTjQ2A0ghPglCOf8gM2ALcBiVfwY9yxeh5ONZj2hqbo5gbdYMfRf4qaY5iERXo7 6uSyjK3jZO7TeIxz6eQP8gzHNG5L8J/HTgg5KrXr6seEdTeWsXH57oHMT7aWnL51 l7/nqtKWXaU10ov49f73eL7fEinONlWigdfd44ynIOEUiTdzlJLE97PAkcYQ5ern 9SV2BI5yPiB5SlGW5LavKyb/gPIdYLo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:01 2025 by rpki-client