$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa File: def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa (raw, json) Hash identifier: mmD3wBKl8wI5Czg5BmWXY65bVK9TWFtEHLDVJhhQ3A4= Subject key identifier: C5:FA:41:D5:70:92:45:15:5B:68:83:7F:7B:F6:5A:7C:91:41:1B:FF Certificate issuer: /CN=4df6cec2-94eb-4439-960f-00719026d770 Certificate serial: 010D0C9F4328584A6C55CCA79B42D7FD8BB6EA00 Authority key identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 64.28.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cc:a7:9b:42:d7:fd:8b:b6:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df6cec2-94eb-4439-960f-00719026d770 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=7bbeaa89-aa97-40de-b9a4-eac2f83906b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:3f:10:87:39:a8:15:48:9d:7a:53:31:4a: 3a:a0:ad:e2:c5:3a:03:80:7b:a1:1e:b9:f4:ff:76: e9:4d:2b:90:bc:27:d3:7d:bf:16:b0:c7:98:d8:a7: 41:23:ac:f4:55:d1:9b:a9:ee:ca:45:38:50:d8:2c: e2:7d:b9:25:25:26:e4:49:61:a0:c7:ad:4d:23:04: 95:b4:cc:07:06:b5:21:83:28:0e:58:72:52:a7:e9: 0d:23:d5:31:c7:2e:63:bb:e4:33:9d:84:44:c2:04: 23:b6:3a:4c:13:a7:5d:c2:50:ed:a6:4a:c5:8f:8e: ce:30:65:ea:db:e8:b7:bb:6a:df:4d:e6:cb:a8:ce: cf:70:9a:43:54:a5:58:7a:57:ab:b7:c2:44:ac:c4: fe:6c:67:37:20:68:bf:cb:19:90:18:f6:86:78:39: a2:4c:b2:e7:1b:f8:38:9a:e1:2e:a2:2c:0c:99:7b: 27:a0:91:a4:e0:2d:b3:32:fe:39:7d:69:e3:8d:31: 24:fb:0b:d1:00:9b:27:12:05:3a:c5:2a:44:b2:c9: 25:21:84:35:8a:4b:18:c7:9a:5d:45:36:a5:54:ed: 17:6a:d1:be:7a:fc:93:95:b8:16:7d:9d:53:d0:32: db:93:24:d0:39:15:dd:e8:7f:c0:99:dc:3c:52:96: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FA:41:D5:70:92:45:15:5B:68:83:7F:7B:F6:5A:7C:91:41:1B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/def2f71a-8b15-32c9-9162-61b5c2c3cf7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl X509v3 Authority Key Identifier: keyid:C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer sbgp-ipAddrBlock: critical IPv4: 64.28.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:34:16:73:13:24:44:22:93:c2:6c:31:5f:38:6a:8b:36:2e: c0:c5:7b:ec:42:26:25:9b:98:50:5d:a5:9a:b3:bc:19:7a:a3: d5:61:c9:6d:17:a4:01:7d:2d:1a:c6:6c:05:00:26:18:f2:f1: d1:c7:4e:f5:00:18:89:7d:6d:6f:43:9c:eb:10:93:60:f3:17: b3:a4:2a:2a:8b:b5:42:27:a4:86:96:fc:81:b4:7b:d2:5c:40: e6:8e:83:41:91:b9:4a:50:36:79:ff:50:f6:65:a0:6a:d9:48: f3:dd:91:53:20:f0:79:a8:c9:2a:5c:bf:d4:71:ba:c2:f9:79: d9:89:33:b8:40:a1:54:b3:56:e9:10:dd:ec:dc:a1:f3:94:f0: f4:31:59:23:c6:35:31:74:a2:ab:ed:15:2e:ce:cb:f6:ed:69: 23:5c:1b:00:70:5f:d0:dc:be:12:a8:25:60:a3:ea:f8:e0:7c: e7:09:6f:ee:83:20:f3:d8:5f:e4:6d:23:04:f8:8e:11:9b:ea: 3b:06:33:23:49:4b:bb:1c:de:70:05:9a:20:65:e3:c2:f8:a5: 3c:7a:c5:69:dc:72:a5:a8:01:2f:d6:66:bf:a6:16:c0:79:6e: 28:18:ed:5e:9d:ec:32:1a:6f:bf:6c:a1:c9:dd:8e:37:c0:7b: e7:8a:0b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcynm0LX/Yu26gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmNmNlYzItOTRlYi00NDM5LTk2MGYtMDA3MTkwMjZk NzcwMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk N2JiZWFhODktYWE5Ny00MGRlLWI5YTQtZWFjMmY4MzkwNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHo/EIc5qBVInXpTMUo6oK3ixToDgHuhHrn0 /3bpTSuQvCfTfb8WsMeY2KdBI6z0VdGbqe7KRThQ2CzifbklJSbkSWGgx61NIwSV tMwHBrUhgygOWHJSp+kNI9Uxxy5ju+QznYREwgQjtjpME6ddwlDtpkrFj47OMGXq 2+i3u2rfTebLqM7PcJpDVKVYelert8JErMT+bGc3IGi/yxmQGPaGeDmiTLLnG/g4 muEuoiwMmXsnoJGk4C2zMv45fWnjjTEk+wvRAJsnEgU6xSpEssklIYQ1iksYx5pd RTalVO0XatG+evyTlbgWfZ1T0DLbkyTQORXd6H/Amdw8UpYMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX6QdVwkkUVW2iDf3v2WnyRQRv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2 Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcxOTAyNmQ3NzAvZGVmMmY3MWEtOGIxNS0z MmM5LTkxNjItNjFiNWMyYzNjZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRmNmNlYzItOTRlYi00NDM5LTk2 MGYtMDA3MTkwMjZkNzcwLzRkZjZjZWMyLTk0ZWItNDQzOS05NjBmLTAwNzE5MDI2 ZDc3MC5jcmwwHwYDVR0jBBgwFoAUx50sIXa5BQ5ZNRcvyHH6yeoBtDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcx OTAyNmQ3NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBwrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC80FnMTJEQik8JsMV84aos2LsDFe+xCJiWbmFBdpZqzvBl6o9VhyW0X pAF9LRrGbAUAJhjy8dHHTvUAGIl9bW9DnOsQk2DzF7OkKiqLtUInpIaW/IG0e9Jc QOaOg0GRuUpQNnn/UPZloGrZSPPdkVMg8HmoySpcv9RxusL5edmJM7hAoVSzVukQ 3ezcofOU8PQxWSPGNTF0oqvtFS7Oy/btaSNcGwBwX9DcvhKoJWCj6vjgfOcJb+6D IPPYX+RtIwT4jhGb6jsGMyNJS7sc3nAFmiBl48L4pTx6xWnccqWoAS/WZr+mFsB5 bigY7V6d7DIab79socndjjfAe+eKC9o= -----END CERTIFICATE-----Generated at Wed Aug 6 13:18:15 2025 by rpki-client