$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa File: 8b9703ea-15af-3104-8c2a-8494561f93c3.roa (raw, json) Hash identifier: uChj9qGHMM7Br1LVXMT4jk+C6FZpZOME7T+HSYh9cBo= Subject key identifier: CC:3F:81:52:D8:E1:8C:A1:5A:77:E4:6A:6D:6C:46:62:06:B0:CE:A1 Certificate issuer: /CN=e085fa70-312c-4786-b587-bdb5fc87c36e Certificate serial: 010D0C9F43285849D42FA8D037DCA4F786D48080 Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 32098 IP address blocks: 68.64.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a8:d0:37:dc:a4:f7:86:d4:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=b31a15cc-286f-497d-b346-fa29ab3262fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f1:b5:8b:f8:7f:8d:e5:e7:e8:c5:e0:4b:48: 98:81:d7:3e:1d:3e:83:f1:ce:2c:ea:ba:98:0f:83: c5:24:44:14:7b:ba:a8:3a:09:c5:fb:48:22:b4:4b: 80:7a:b6:0d:08:27:b7:13:ce:b3:92:63:36:8a:6e: 9e:11:f3:c1:f3:82:f3:1a:68:dc:d0:c3:69:a4:97: 3c:37:f4:73:ed:44:2c:5d:e9:53:d2:f4:6b:c5:ae: 87:ea:47:da:c9:dd:ff:04:63:9f:7e:ca:04:04:ed: 30:02:84:ea:93:52:90:5f:ab:25:3b:33:6a:b4:11: aa:44:36:a0:14:a5:06:97:78:ad:c0:42:f2:f5:7b: 79:02:5e:90:bb:c1:b1:4c:10:38:27:b3:c0:94:ab: fc:a7:a8:a9:6f:3a:9b:47:8a:b6:91:c6:d2:48:6c: 14:02:04:6d:c4:d1:8d:68:0d:55:3f:4c:f5:2f:11: d6:3d:ae:d3:6b:8c:50:a1:92:f1:ad:66:bb:c0:d1: d2:5a:e4:c9:d0:30:ae:77:a1:d9:9e:f7:b2:c8:16: 91:f5:02:9e:fc:c1:8f:69:20:65:32:5c:bb:48:1e: a1:98:9e:fd:0d:3e:72:8a:e8:3c:63:3b:69:40:75: 87:3c:a0:af:93:fc:32:82:6b:52:8d:33:38:11:0a: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3F:81:52:D8:E1:8C:A1:5A:77:E4:6A:6D:6C:46:62:06:B0:CE:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl X509v3 Authority Key Identifier: keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer sbgp-ipAddrBlock: critical IPv4: 68.64.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fc:4f:e5:f2:39:39:0f:85:6e:82:1f:bb:10:92:c7:6e:21: 09:84:0d:b5:6c:eb:29:bc:eb:dd:7c:97:70:54:31:a4:15:4c: 14:9c:84:a0:2f:77:79:83:d9:a0:99:08:7a:3c:ce:80:e8:a3: 4a:5a:eb:00:bb:a8:6f:c3:57:cf:34:8b:39:e2:b9:36:9b:d7: 7c:10:3c:2c:b0:9f:c5:e8:40:43:97:f9:ac:58:92:62:22:89: 41:1e:9b:47:41:00:d1:e6:7e:c9:4c:59:5f:0b:2e:97:58:6e: df:3c:4d:07:be:92:3b:2f:86:aa:24:22:55:a6:8a:19:b9:7d: 89:78:1a:4f:f1:56:84:98:0f:9c:2a:dd:c4:3a:6b:13:d7:13: f4:51:e0:da:aa:56:67:dc:96:85:0a:fe:d3:37:7c:04:55:0e: f0:e3:3c:52:9b:4f:4e:16:20:ee:fb:e4:3b:10:e0:70:8b:cd: 3e:06:4f:97:85:4c:6c:00:9e:a9:db:d5:ee:92:5d:16:c5:f1: aa:8f:9c:b6:41:ad:c5:07:46:af:f5:c2:72:d7:1f:5f:df:7e: 2e:6a:db:c7:88:c2:ca:57:fb:33:de:7d:34:de:36:cb:23:8f: 52:26:20:9f:b4:74:97:77:05:d9:02:99:19:00:67:68:8d:51: 63:e0:b0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6jQN9yk94bUgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdj MzZlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjMxYTE1Y2MtMjg2Zi00OTdkLWIzNDYtZmEyOWFiMzI2MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPG1i/h/jeXn6MXgS0iYgdc+HT6D8c4s6rqY D4PFJEQUe7qoOgnF+0gitEuAerYNCCe3E86zkmM2im6eEfPB84LzGmjc0MNppJc8 N/Rz7UQsXelT0vRrxa6H6kfayd3/BGOffsoEBO0wAoTqk1KQX6slOzNqtBGqRDag FKUGl3itwELy9Xt5Al6Qu8GxTBA4J7PAlKv8p6ipbzqbR4q2kcbSSGwUAgRtxNGN aA1VP0z1LxHWPa7Ta4xQoZLxrWa7wNHSWuTJ0DCud6HZnveyyBaR9QKe/MGPaSBl Mly7SB6hmJ79DT5yiug8YztpQHWHPKCvk/wygmtSjTM4EQo47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw/gVLY4YyhWnfkam1sRmIGsM6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1 ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvOGI5NzAzZWEtMTVhZi0z MTA0LThjMmEtODQ5NDU2MWY5M2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTA4NWZhNzAtMzEyYy00Nzg2LWI1 ODctYmRiNWZjODdjMzZlL2UwODVmYTcwLTMxMmMtNDc4Ni1iNTg3LWJkYjVmYzg3 YzM2ZS5jcmwwHwYDVR0jBBgwFoAU+wFZJiVq4yf4fvzRnFfiezQbWG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1 ZmM4N2MzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn8T+XyOTkPhW6CH7sQksduIQmEDbVs6ym86918l3BUMaQVTBSchKAv d3mD2aCZCHo8zoDoo0pa6wC7qG/DV880izniuTab13wQPCywn8XoQEOX+axYkmIi iUEem0dBANHmfslMWV8LLpdYbt88TQe+kjsvhqokIlWmihm5fYl4Gk/xVoSYD5wq 3cQ6axPXE/RR4NqqVmfcloUK/tM3fARVDvDjPFKbT04WIO775DsQ4HCLzT4GT5eF TGwAnqnb1e6SXRbF8aqPnLZBrcUHRq/1wnLXH1/ffi5q28eIwspX+zPefTTeNssj j1ImIJ+0dJd3BdkCmRkAZ2iNUWPgsCk= -----END CERTIFICATE-----Generated at Tue Jun 17 19:41:33 2025 by rpki-client