$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa File: 8d813e67-3495-37a5-b5ea-6531a041ee5c.roa (raw, json) Hash identifier: X/b3CfuCZK1QCHCOfcuUGe0mmkWH+vpTz/zU+mAMib0= Subject key identifier: A3:D5:A1:FB:84:4A:08:37:C1:94:C4:8E:99:0D:71:91:DA:A5:12:B3 Certificate issuer: /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15 Certificate serial: 010D0C9F4328584A26F3C9500770A9B949483760 Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa Signing time: Wed 11 Jun 2025 04:32:41 +0000 ROA not before: Wed 11 Jun 2025 04:32:41 +0000 ROA not after: Tue 09 Sep 2025 04:32:41 +0000 asID: 1097 IP address blocks: 216.146.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:f3:c9:50:07:70:a9:b9:49:48:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15 Validity Not Before: Jun 11 04:32:41 2025 GMT Not After : Sep 9 04:32:41 2025 GMT Subject: CN=b09ea40e-c2a7-4026-8463-ba65e1235602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5d:5c:2b:e0:ce:8e:78:89:5b:01:ea:83:a9: 6b:16:a2:99:bc:e7:76:cd:b6:67:ee:45:ef:25:c7: 69:62:af:dc:33:09:6f:21:7a:f5:33:33:89:61:9a: e3:86:7e:dc:e0:ec:74:27:aa:34:a1:88:70:97:d9: 08:77:9d:e4:0c:74:82:37:65:e1:5d:1c:14:ef:a1: 8b:1a:25:cc:33:c5:e1:d8:49:64:21:93:d3:07:48: f6:d5:0d:09:2e:3e:8e:a8:16:79:c1:aa:ea:9a:2f: a0:57:14:ff:3d:4c:fc:26:63:3e:18:32:07:c6:80: ee:55:ab:42:2a:94:c1:fe:3a:4c:55:f0:71:36:26: 78:16:dc:bf:fa:b1:b1:6b:31:78:f1:83:26:ad:b6: e2:8a:b9:0d:78:4d:82:bb:a7:63:12:7c:0c:82:00: 1e:70:dc:a4:83:8b:ab:62:a2:1f:4b:cd:d5:71:26: 15:c3:27:2d:72:c0:4a:d9:b5:5b:70:6d:c0:12:a8: ca:d3:8a:6a:98:61:24:1e:46:6f:e6:9a:c8:e8:ed: 49:c3:d4:52:76:fa:ab:10:27:d5:0d:ec:59:1e:e1: 0d:ea:d9:a5:96:e4:22:19:b4:94:90:15:0b:a6:60: d1:83:24:da:45:93:16:a7:97:a9:c1:36:eb:21:5d: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:A1:FB:84:4A:08:37:C1:94:C4:8E:99:0D:71:91:DA:A5:12:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl X509v3 Authority Key Identifier: keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer sbgp-ipAddrBlock: critical IPv4: 216.146.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:20:13:91:44:d6:22:97:a5:ae:87:29:7d:7c:fd:82:ce:f2: 5b:d8:04:30:0d:d3:fd:f8:b2:92:c5:5d:e5:97:82:0d:a9:17: f6:fa:a6:5d:00:71:29:fd:5b:2e:a3:9a:d8:d4:87:82:74:c3: 65:f8:99:0c:60:2f:01:7d:9d:28:23:87:6d:21:7c:89:34:47: d8:8c:33:06:a0:23:18:5b:cb:03:e8:65:9e:3e:7e:91:c6:e5: 9e:30:83:48:ea:fb:ef:8e:47:59:45:ea:24:50:04:9b:5a:07: d1:f1:81:21:f4:f8:15:44:68:12:d4:ff:52:aa:f7:79:9a:14: 5c:a2:3c:c6:5f:29:49:db:35:1d:43:a5:c7:bd:7f:15:b4:99: b9:62:5f:35:a9:4c:4e:0c:32:00:0e:d7:94:9d:1a:87:0e:05: 55:09:0d:ff:d6:6e:37:39:ea:92:9a:c3:ea:85:48:9e:04:6b: ab:cf:99:4c:8c:a2:2b:45:74:99:32:7a:e5:cd:e8:c6:1d:7e: 0e:0b:56:68:ad:b9:78:e0:5b:3e:70:08:63:c2:47:18:ec:8f: e0:d2:52:27:b8:7a:43:11:78:62:fe:6d:d9:0d:93:08:9b:49: 3f:1a:1d:d7:35:61:9a:67:ab:18:7c:26:0d:8e:7a:e4:e6:0b: fb:ce:de:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEom88lQB3CpuUlIN2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRlYzUyNTgtMDJkMy00YmQzLWFmNzYtNzQ5NmVjMDlj YjE1MB4XDTI1MDYxMTA0MzI0MVoXDTI1MDkwOTA0MzI0MVowLzEtMCsGA1UEAxMk YjA5ZWE0MGUtYzJhNy00MDI2LTg0NjMtYmE2NWUxMjM1NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl1cK+DOjniJWwHqg6lrFqKZvOd2zbZn7kXv JcdpYq/cMwlvIXr1MzOJYZrjhn7c4Ox0J6o0oYhwl9kId53kDHSCN2XhXRwU76GL GiXMM8Xh2ElkIZPTB0j21Q0JLj6OqBZ5warqmi+gVxT/PUz8JmM+GDIHxoDuVatC KpTB/jpMVfBxNiZ4Fty/+rGxazF48YMmrbbiirkNeE2Cu6djEnwMggAecNykg4ur YqIfS83VcSYVwyctcsBK2bVbcG3AEqjK04pqmGEkHkZv5prI6O1Jw9RSdvqrECfV DexZHuEN6tmlluQiGbSUkBULpmDRgyTaRZMWp5epwTbrIV2VQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPVofuESgg3wZTEjpkNcZHapRKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGVj NTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2ZWMwOWNiMTUvOGQ4MTNlNjctMzQ5NS0z N2E1LWI1ZWEtNjUzMWEwNDFlZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRlYzUyNTgtMDJkMy00YmQzLWFm NzYtNzQ5NmVjMDljYjE1LzY0ZWM1MjU4LTAyZDMtNGJkMy1hZjc2LTc0OTZlYzA5 Y2IxNS5jcmwwHwYDVR0jBBgwFoAUPybhTuBUS/bD4PIURUTqCyT71ScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGVjNTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2 ZWMwOWNiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JIRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMgE5FE1iKXpa6HKX18/YLO8lvYBDAN0/34spLFXeWXgg2pF/b6pl0A cSn9Wy6jmtjUh4J0w2X4mQxgLwF9nSgjh20hfIk0R9iMMwagIxhbywPoZZ4+fpHG 5Z4wg0jq+++OR1lF6iRQBJtaB9HxgSH0+BVEaBLU/1Kq93maFFyiPMZfKUnbNR1D pce9fxW0mbliXzWpTE4MMgAO15SdGocOBVUJDf/Wbjc56pKaw+qFSJ4Ea6vPmUyM oitFdJkyeuXN6MYdfg4LVmituXjgWz5wCGPCRxjsj+DSUie4ekMReGL+bdkNkwib ST8aHdc1YZpnqxh8Jg2OeuTmC/vO3jU= -----END CERTIFICATE-----Generated at Mon Jun 16 15:46:50 2025 by rpki-client