$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa File: cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa (raw, json) Hash identifier: U9UCjdpPsmrYk5tuXMXPAl+0y3SJC5RSH1XjaXBWvgY= Subject key identifier: 17:82:BD:70:B7:8E:09:04:34:A4:EB:00:8E:5B:F4:62:E2:75:C0:5A Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A268AB52D3BC5745D7F91A9B4 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 13414 IP address blocks: 64.63.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:b5:2d:3b:c5:74:5d:7f:91:a9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=c78d2bea-7d07-455f-9b9e-de95b7230a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:58:38:a9:b8:9a:15:9b:89:cb:62:7c:bc: 09:52:d4:a9:fd:c2:c8:1a:fb:c5:c8:33:4c:68:eb: 10:98:b9:0f:74:ce:3a:db:a6:48:15:c8:91:d9:f7: 36:a1:be:f5:43:b6:f1:bc:ba:c1:e5:fe:07:00:26: aa:ac:35:ea:0a:b3:0c:15:58:81:70:09:1a:85:9e: 57:2d:5c:88:d8:b3:c6:ff:1a:5b:6e:c7:ad:2e:04: 6c:df:35:c1:80:65:ef:ea:1c:b9:05:a7:87:fa:24: 60:b3:42:13:38:47:ba:58:86:b7:88:5c:70:db:5d: db:60:53:27:e2:ac:7f:63:d8:c6:06:07:fa:d7:ce: 03:6a:dd:af:e3:cb:c0:cc:06:14:b2:2a:96:88:84: 63:f7:a7:1f:6e:9c:75:42:df:53:37:d4:0c:31:fe: 59:ee:19:08:d8:c6:3f:90:88:86:01:a5:2f:a4:c4: ac:c8:7e:5e:ea:2b:bc:15:c3:60:e4:66:91:78:6b: 46:b1:7a:c0:65:4e:4c:88:46:2f:3e:7d:55:a4:62: 78:ec:25:5b:c4:96:3e:ad:c1:ca:49:96:6a:4f:62: f3:cd:d7:98:ac:a0:7f:14:b6:47:8c:68:49:39:2d: 26:82:d7:2a:66:1a:4d:20:75:6d:e8:12:ff:07:62: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:BD:70:B7:8E:09:04:34:A4:EB:00:8E:5B:F4:62:E2:75:C0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7a:f7:94:c6:32:d4:f2:90:b0:98:25:d0:bf:03:e2:b0:00: 39:87:70:c1:96:ff:25:7a:81:6f:6d:19:b0:22:b9:4b:81:49: 27:d0:38:7d:f5:b7:b4:21:ba:43:86:ef:02:d4:be:a7:ed:4d: bd:fc:5e:c2:19:2c:ef:13:67:b4:66:f7:61:d8:17:38:a3:d7: fe:7c:55:a5:d2:74:91:73:0a:82:ba:5b:42:87:bf:8a:a9:1c: d2:d0:56:df:c2:94:68:6f:bd:1b:b1:de:df:a4:dc:99:b8:4f: 83:bb:a9:3b:2f:62:fc:9b:8b:4a:4a:25:cb:6e:ee:0a:38:ec: a0:98:7e:a1:89:0a:40:e3:29:98:fb:24:47:03:17:f6:c5:0b: 98:33:f8:01:b3:0a:dc:c1:e0:a2:d8:a9:e6:52:d8:fd:47:2d: fe:cc:bb:c5:23:ee:13:52:25:de:0c:ac:65:5f:d9:75:55:76: 0d:61:57:2d:f3:cc:73:ae:9a:72:19:39:ed:66:58:15:06:7f: 7a:76:bc:2b:05:fe:c4:42:cb:5f:38:fa:a5:a1:fe:87:0f:27: f4:70:32:7c:0d:fd:6d:f2:a3:34:e7:65:28:8f:a2:0b:de:ee: a2:e9:fd:20:72:43:74:19:4a:8f:03:d6:f8:ec:b4:90:bd:49: ee:3e:7d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirUtO8V0XX+RqbQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk Yzc4ZDJiZWEtN2QwNy00NTVmLTliOWUtZGU5NWI3MjMwYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O5YOKm4mhWbictifLwJUtSp/cLIGvvFyDNM aOsQmLkPdM4626ZIFciR2fc2ob71Q7bxvLrB5f4HACaqrDXqCrMMFViBcAkahZ5X LVyI2LPG/xpbbsetLgRs3zXBgGXv6hy5BaeH+iRgs0ITOEe6WIa3iFxw213bYFMn 4qx/Y9jGBgf6184Dat2v48vAzAYUsiqWiIRj96cfbpx1Qt9TN9QMMf5Z7hkI2MY/ kIiGAaUvpMSsyH5e6iu8FcNg5GaReGtGsXrAZU5MiEYvPn1VpGJ47CVbxJY+rcHK SZZqT2LzzdeYrKB/FLZHjGhJOS0mgtcqZhpNIHVt6BL/B2KAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeCvXC3jgkENKTrAI5b9GLidcBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvY2ZmODEyNWEtNTczZC0z MGEzLWIwZTYtNzgwODRjNmQ5YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN695TGMtTykLCYJdC/A+KwADmHcMGW/yV6gW9tGbAiuUuBSSfQOH31 t7QhukOG7wLUvqftTb38XsIZLO8TZ7Rm92HYFzij1/58VaXSdJFzCoK6W0KHv4qp HNLQVt/ClGhvvRux3t+k3Jm4T4O7qTsvYvybi0pKJctu7go47KCYfqGJCkDjKZj7 JEcDF/bFC5gz+AGzCtzB4KLYqeZS2P1HLf7Mu8Uj7hNSJd4MrGVf2XVVdg1hVy3z zHOumnIZOe1mWBUGf3p2vCsF/sRCy184+qWh/ocPJ/RwMnwN/W3yozTnZSiPogve 7qLp/SByQ3QZSo8D1vjstJC9Se4+fQo= -----END CERTIFICATE-----Generated at Tue Jun 17 11:06:25 2025 by rpki-client