$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/861d35c9-f490-358c-8ab7-97c764b777b6.roa File: 861d35c9-f490-358c-8ab7-97c764b777b6.roa (raw, json) Hash identifier: YE5kzckQtMI49cq9CFeC1YEf/DJI258AZ4viugcz3ek= Subject key identifier: AB:7E:F2:13:50:3A:25:25:66:67:C8:9C:53:67:22:E6:DF:25:6D:25 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584AC0164325D20D4FA54CBDA900 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/861d35c9-f490-358c-8ab7-97c764b777b6.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 209854 IP address blocks: 64.79.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:43:25:d2:0d:4f:a5:4c:bd:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=977870fd-023c-490d-994a-610f3c18b99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:49:30:72:c4:04:37:4d:06:63:4b:43:0d: f0:05:28:71:8d:5e:8a:f8:64:4d:5d:eb:86:41:13: 03:be:43:cb:09:7e:8a:43:5f:84:08:5e:0e:45:e3: e4:ed:12:02:99:fd:89:06:d6:a3:51:f5:db:3a:b6: 7a:ab:27:9a:d0:2e:d0:f2:7a:2e:f0:9b:1e:f9:22: 8c:9d:9e:4a:fa:0a:14:7f:82:3c:ba:c5:57:b5:b7: 01:5a:8c:d4:c6:f2:eb:76:29:b0:36:18:9c:fd:07: 10:4d:62:2a:72:de:8b:3e:fe:71:34:bd:b7:db:66: f6:1c:2b:8e:47:01:23:b8:13:83:ba:e5:38:a8:fe: 0a:3f:94:13:b0:81:6f:c8:92:c0:af:bb:a2:29:25: 47:9b:40:a1:26:b7:48:f9:a3:b4:29:f5:a0:27:17: 5c:20:28:94:27:56:f5:bf:e3:60:e3:de:73:db:74: 43:87:63:f9:df:e9:9b:c2:89:07:e4:21:2c:60:b0: ab:2f:87:d3:6a:fc:45:3f:27:8a:48:cc:cd:51:bf: 34:01:e4:52:50:86:ae:aa:61:9f:67:22:7e:5e:0e: 4e:91:84:a3:46:af:66:fb:1a:f3:d8:67:12:49:f8: 30:f3:5c:10:ac:42:65:1a:cc:ac:cd:cb:06:dd:65: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7E:F2:13:50:3A:25:25:66:67:C8:9C:53:67:22:E6:DF:25:6D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/861d35c9-f490-358c-8ab7-97c764b777b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 64.79.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:11:99:f7:a9:b2:1b:1c:ee:f8:13:aa:86:9b:ff:6a:f2:bc: 96:5d:0f:9e:48:42:b4:50:78:04:e8:32:94:2b:2b:6f:39:20: 36:e1:c1:87:5a:7e:9b:66:f1:58:77:3e:b4:38:b6:0d:af:bf: 0a:67:a2:ee:c6:4b:1e:35:64:b7:7e:8b:6f:8d:3b:bd:a9:d3: 7e:eb:b1:c7:9c:50:a1:0c:fb:72:5b:58:a6:3f:a8:f5:11:c7: 20:c7:c1:fa:11:05:29:9f:02:23:25:4c:bb:80:aa:b9:fa:75: 41:99:e0:68:91:2a:88:34:f0:ef:f4:8d:a9:73:50:db:a2:ea: a8:64:4c:c0:44:71:38:53:f1:85:c2:67:a5:5e:59:81:62:d2: b9:26:34:41:11:40:6e:f2:8b:45:80:92:85:12:c6:e1:6b:dd: ac:b6:42:bf:b5:59:77:92:f7:46:1d:14:1d:2b:98:a1:77:5e: 74:ce:0f:a7:0c:32:5e:b4:4d:d9:2b:3a:b2:b7:86:fe:73:65: a7:be:cb:55:f4:53:00:84:dd:ef:46:52:c9:e8:61:0a:7c:e8: 08:25:55:35:2a:ad:12:f9:5a:f5:e4:93:6c:4a:a7:22:d7:fb: 10:66:63:81:63:2a:34:65:bb:fb:f3:2d:f6:5f:b4:ad:01:b5: b0:f7:05:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkMl0g1PpUy9qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OTc3ODcwZmQtMDIzYy00OTBkLTk5NGEtNjEwZjNjMThiOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sRJMHLEBDdNBmNLQw3wBShxjV6K+GRNXeuG QRMDvkPLCX6KQ1+ECF4ORePk7RICmf2JBtajUfXbOrZ6qyea0C7Q8nou8Jse+SKM nZ5K+goUf4I8usVXtbcBWozUxvLrdimwNhic/QcQTWIqct6LPv5xNL2322b2HCuO RwEjuBODuuU4qP4KP5QTsIFvyJLAr7uiKSVHm0ChJrdI+aO0KfWgJxdcICiUJ1b1 v+Ng495z23RDh2P53+mbwokH5CEsYLCrL4fTavxFPyeKSMzNUb80AeRSUIauqmGf ZyJ+Xg5OkYSjRq9m+xrz2GcSSfgw81wQrEJlGsyszcsG3WWUVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt+8hNQOiUlZmfInFNnIubfJW0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvODYxZDM1YzktZjQ5MC0z NThjLThhYjctOTdjNzY0Yjc3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQE/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMRmfepshsc7vgTqoab/2ryvJZdD55IQrRQeAToMpQrK285IDbhwYda fptm8Vh3PrQ4tg2vvwpnou7GSx41ZLd+i2+NO72p037rscecUKEM+3JbWKY/qPUR xyDHwfoRBSmfAiMlTLuAqrn6dUGZ4GiRKog08O/0jalzUNui6qhkTMBEcThT8YXC Z6VeWYFi0rkmNEERQG7yi0WAkoUSxuFr3ay2Qr+1WXeS90YdFB0rmKF3XnTOD6cM Ml60TdkrOrK3hv5zZae+y1X0UwCE3e9GUsnoYQp86AglVTUqrRL5WvXkk2xKpyLX +xBmY4FjKjRlu/vzLfZftK0BtbD3BZM= -----END CERTIFICATE-----Generated at Wed Aug 6 06:04:34 2025 by rpki-client