$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa File: f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa (raw, json) Hash identifier: 7mr8VbigXOdqwiSuxVBKCP7fGxbOOCrtXEv10tJrj6k= Subject key identifier: 28:E0:DE:B8:00:65:3F:E3:B0:E1:AE:91:DE:81:77:FA:FD:D3:A1:B2 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F4328584A5FC5DCCCE0774D208C89A380 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 64.207.222.0/24 maxlen: 24 64.207.223.0/24 maxlen: 24 67.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:dc:cc:e0:77:4d:20:8c:89:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=d35b4e31-4196-4c95-9c4f-153bd87f7016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:74:2f:e6:01:04:ce:d6:56:54:e6:f3:62: 84:e9:78:b3:43:fe:0b:da:9c:2e:d2:8b:86:6f:c0: 48:a6:c0:02:81:b7:4a:ea:2f:2e:7c:2d:c5:9e:db: 37:4c:8b:1e:9a:37:e8:03:b0:15:30:de:a6:3a:c1: 83:86:bf:aa:58:9c:89:bc:41:84:27:61:b5:33:78: c8:1b:c4:b2:4b:f9:95:89:c1:31:52:b3:2f:8c:ce: f0:7b:df:c3:10:ae:0a:80:b2:e7:ed:9f:4b:d5:ae: 5b:8e:38:29:e4:2b:17:ed:2a:2f:4c:58:f5:bc:c5: 60:51:f6:de:18:2a:5c:67:42:6f:5d:ee:44:bf:2a: 1a:d1:78:1d:65:e2:2c:c7:9f:eb:52:58:53:82:41: 6a:6e:cc:ba:2d:8d:b4:00:d0:7b:d3:99:73:83:1c: 7f:56:63:cb:ec:13:2f:13:09:3c:5c:7d:e3:ae:85: c3:a5:5c:32:19:f5:c6:4e:3f:f3:6a:eb:ca:fd:13: ad:db:de:1f:af:70:c7:ee:16:a9:a4:d8:24:e0:89: 6a:40:46:c9:ea:f4:3b:94:f1:8b:27:40:54:01:35: 4d:e8:5b:93:f4:45:16:1b:47:7e:9f:d0:a7:55:71: f6:9d:c4:ae:3e:05:a0:3c:78:27:7e:bb:45:83:ea: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:DE:B8:00:65:3F:E3:B0:E1:AE:91:DE:81:77:FA:FD:D3:A1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:82:1c:b1:5c:f4:36:d8:60:8e:df:76:9e:34:79:6e:2e:f2: 2a:ba:0d:09:2e:f3:ca:cd:92:7f:80:1b:bb:65:aa:24:70:ee: 37:93:cc:7e:70:37:38:77:df:45:a1:d4:31:f3:f3:41:dd:00: aa:62:29:21:31:fb:cb:b2:f6:6c:79:c8:cc:9d:cd:d9:ba:e4: 49:3f:fa:7c:8b:da:f9:ec:64:7b:dd:91:40:8b:19:68:de:9f: 85:15:45:51:b3:12:52:89:e8:fa:eb:a0:8d:bd:17:1f:7e:0f: b8:35:02:d2:98:bd:b0:41:43:7b:b7:43:fe:fa:9a:68:aa:ac: db:7d:39:da:40:24:59:eb:61:b6:4d:24:89:fe:8e:ea:55:6a: 76:a9:cb:58:00:17:83:66:06:ed:ea:b5:b5:33:18:7c:7c:1c: 5f:ca:ea:37:cc:08:88:aa:62:ba:c1:2e:12:c0:da:e6:69:0a: 28:27:3a:66:12:f4:10:72:0d:20:11:e1:91:f6:9e:4d:57:97: be:c4:d8:49:61:34:57:5c:77:bf:06:cc:b7:19:a4:55:86:15: 34:5a:cf:bc:29:60:f9:cb:eb:b6:f6:0f:65:40:a9:8f:b2:1e: f7:84:28:45:19:c7:e7:5e:fe:de:f2:af:c7:a7:7c:12:f8:05: 7a:88:fb:40 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpfxdzM4HdNIIyJo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZDM1YjRlMzEtNDE5Ni00Yzk1LTljNGYtMTUzYmQ4N2Y3MDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfp0L+YBBM7WVlTm82KE6XizQ/4L2pwu0ouG b8BIpsACgbdK6i8ufC3Fnts3TIsemjfoA7AVMN6mOsGDhr+qWJyJvEGEJ2G1M3jI G8SyS/mVicExUrMvjM7we9/DEK4KgLLn7Z9L1a5bjjgp5CsX7SovTFj1vMVgUfbe GCpcZ0JvXe5Evyoa0XgdZeIsx5/rUlhTgkFqbsy6LY20ANB705lzgxx/VmPL7BMv Ewk8XH3jroXDpVwyGfXGTj/zauvK/ROt294fr3DH7happNgk4IlqQEbJ6vQ7lPGL J0BUATVN6FuT9EUWG0d+n9CnVXH2ncSuPgWgPHgnfrtFg+qYoQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCjg3rgAZT/jsOGukd6Bd/r906GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvZjZjNzE4M2EtOWVlYi0z YjE3LWI2MWEtODQ2ZGJiNGM5YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQM/eAwQA Q97+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD6CHLFc9DbYYI7fdp40eW4u8iq6DQku88rNkn+AG7tlqiRw 7jeTzH5wNzh330Wh1DHz80HdAKpiKSEx+8uy9mx5yMydzdm65Ek/+nyL2vnsZHvd kUCLGWjen4UVRVGzElKJ6PrroI29Fx9+D7g1AtKYvbBBQ3u3Q/76mmiqrNt9OdpA JFnrYbZNJIn+jupVanapy1gAF4NmBu3qtbUzGHx8HF/K6jfMCIiqYrrBLhLA2uZp CignOmYS9BByDSAR4ZH2nk1Xl77E2ElhNFdcd78GzLcZpFWGFTRaz7wpYPnL67b2 D2VAqY+yHveEKEUZx+de/t7yr8enfBL4BXqI+0A= -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:26 2025 by rpki-client