$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa File: 928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa (raw, json) Hash identifier: 4MWQqqTypK6P4jVvVyaICKqECxhpvMyaebVqYGAXne8= Subject key identifier: 0C:7D:67:DD:8F:D1:F4:E3:86:41:0B:E8:62:6D:24:A5:B3:58:F2:47 Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584A1B6003F60567A5FBA404B880 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 212238 IP address blocks: 64.113.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:03:f6:05:67:a5:fb:a4:04:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=3a32de31-cca3-4d5b-bd38-a37259c23349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:3d:ff:e4:1d:59:80:74:23:17:ad:7c:7b: 5c:dc:e7:e6:fc:9f:95:fc:1e:8f:e9:60:2c:28:78: 31:9e:13:cf:13:91:f9:1b:d3:8b:76:ee:e1:72:1b: 9d:d0:74:ff:a1:f8:e0:3f:71:7b:27:73:4a:48:d9: 14:9f:04:0c:93:5a:11:ff:72:8d:fe:bc:75:ee:c1: 87:7a:4f:0e:a0:a2:8c:84:8a:f9:f2:fc:d8:e9:a2: a0:88:e9:b5:98:01:b4:87:c0:aa:87:76:32:34:93: 06:be:22:99:73:45:b3:be:a8:b9:96:0c:f5:a4:6c: a4:c0:c5:6e:6a:b4:82:d0:67:52:d3:6f:cc:9e:77: e2:04:3c:ee:0f:9c:c9:f5:34:0a:22:42:e5:f6:e8: 92:7d:e1:6c:b2:14:15:9b:63:32:43:76:5a:67:bf: 96:36:28:6b:b1:63:65:0d:f6:72:a6:b1:eb:fc:e5: fa:1a:dc:f5:d1:80:24:13:bb:f0:02:3d:a8:00:af: d5:5a:6a:83:ef:f1:f4:2a:f7:01:80:04:35:68:a3: 05:b8:ed:6b:ec:8e:86:a8:e9:6d:50:eb:89:43:da: 94:22:36:5d:e6:74:5a:a5:e5:2e:b3:fa:20:fd:95: fa:dc:5b:98:d9:d1:40:34:8a:6e:f5:9a:14:f2:ae: 4b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7D:67:DD:8F:D1:F4:E3:86:41:0B:E8:62:6D:24:A5:B3:58:F2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f1:86:47:48:30:6a:e3:e1:bb:c4:12:1a:f1:c8:01:47:f1: 9c:c7:7d:09:44:06:08:d1:06:42:9b:00:cb:40:c8:7f:ac:dd: e2:59:af:ac:be:86:cc:98:4b:eb:af:01:05:8f:91:2f:51:fe: d9:fb:1e:7b:88:bb:4e:61:38:2f:23:3e:85:13:fa:7f:7d:9b: 6b:82:1c:40:1f:01:d9:a6:ad:9b:1f:a0:d7:b5:6a:61:ba:c0: 62:c8:e9:c6:9f:cc:5c:42:92:c8:19:b0:e2:d7:60:64:fc:29: 4f:4e:f4:37:cc:45:61:19:23:af:a4:a9:e0:52:dd:62:e5:25: 1e:09:17:d4:04:fb:6c:57:8b:44:2e:6f:d2:2c:14:37:95:bc: 88:89:33:35:52:e7:d3:d6:d0:25:3c:0d:5c:5c:2f:1f:bd:09: 6f:f0:76:be:dc:81:c3:57:76:f3:bc:8e:56:6a:96:13:c2:20: 93:a8:64:2b:4d:4f:f2:7b:e6:1f:a9:45:75:52:8c:91:b3:51: 2a:3d:ce:df:47:8f:94:1f:96:8b:08:8a:3e:63:4a:da:54:bf: 47:ce:54:0a:b9:26:5e:de:e9:64:a1:2a:fb:87:05:96:54:33: 87:8a:35:83:84:ee:e8:5a:73:a2:74:ac:d0:3a:0a:2d:9d:a9: 0d:d0:ea:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAP2BWel+6QEuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk M2EzMmRlMzEtY2NhMy00ZDViLWJkMzgtYTM3MjU5YzIzMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwM9/+QdWYB0IxetfHtc3Ofm/J+V/B6P6WAs KHgxnhPPE5H5G9OLdu7hchud0HT/ofjgP3F7J3NKSNkUnwQMk1oR/3KN/rx17sGH ek8OoKKMhIr58vzY6aKgiOm1mAG0h8Cqh3YyNJMGviKZc0Wzvqi5lgz1pGykwMVu arSC0GdS02/MnnfiBDzuD5zJ9TQKIkLl9uiSfeFsshQVm2MyQ3ZaZ7+WNihrsWNl DfZyprHr/OX6Gtz10YAkE7vwAj2oAK/VWmqD7/H0KvcBgAQ1aKMFuO1r7I6GqOlt UOuJQ9qUIjZd5nRapeUus/og/ZX63FuY2dFANIpu9ZoU8q5LEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx9Z92P0fTjhkEL6GJtJKWzWPJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvOTI4ZWJhNTQtMjFhNS0z Yzg1LWJkMjEtY2RmYmMzZTQ4MmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDxhkdIMGrj4bvEEhrxyAFH8ZzHfQlEBgjRBkKbAMtAyH+s3eJZr6y+ hsyYS+uvAQWPkS9R/tn7HnuIu05hOC8jPoUT+n99m2uCHEAfAdmmrZsfoNe1amG6 wGLI6cafzFxCksgZsOLXYGT8KU9O9DfMRWEZI6+kqeBS3WLlJR4JF9QE+2xXi0Qu b9IsFDeVvIiJMzVS59PW0CU8DVxcLx+9CW/wdr7cgcNXdvO8jlZqlhPCIJOoZCtN T/J75h+pRXVSjJGzUSo9zt9Hj5QflosIij5jStpUv0fOVAq5Jl7e6WShKvuHBZZU M4eKNYOE7uhac6J0rNA6Ci2dqQ3Q6ks= -----END CERTIFICATE-----Generated at Sat Jun 14 04:43:38 2025 by rpki-client