$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa File: f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa (raw, json) Hash identifier: aw/s8zeGx3lxcD7RvlpGAjsQJ4oJ3bpAu3emCjgJHRw= Subject key identifier: 59:22:48:C5:4A:51:10:D5:9C:37:19:B5:E2:85:D4:38:5D:13:74:B5 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A268AAF820D9E25084E73D040 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 13414 IP address blocks: 64.63.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:af:82:0d:9e:25:08:4e:73:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=15da6517-4f20-4a2e-9f5d-032e0d273d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:e1:00:2f:32:09:67:68:58:77:9a:13:d5: 83:ad:a2:7d:a3:09:9c:1a:0c:f7:d7:2d:5b:9d:43: 08:4a:c9:6f:9f:8e:e4:4c:fe:47:39:2b:2f:9a:92: a2:ac:f2:ab:52:c4:23:5f:60:21:82:8d:5d:3f:f3: ee:8a:91:35:31:04:5a:b7:ed:d8:f7:df:35:f9:18: f7:f1:1d:26:19:cb:a0:7b:92:2f:38:14:31:00:cc: 77:1d:c6:e9:75:20:dc:aa:eb:21:bb:bd:ee:89:86: af:c9:89:44:21:de:cb:b6:ab:c8:08:32:e3:de:1d: 14:9a:75:98:2f:d5:11:27:ed:78:5f:b7:d5:28:28: af:8b:5b:8e:f5:56:27:cb:47:5a:8a:02:77:c1:e3: 29:3b:c3:01:b6:ef:a2:f5:60:85:15:01:66:02:56: 96:96:58:7e:c8:22:7d:9e:4d:98:b8:75:bc:d2:1d: a9:17:6d:01:d1:24:27:a8:1c:f4:9a:60:50:80:d4: 47:29:e4:c1:56:27:0e:4e:4e:cb:9a:fd:2a:80:62: 3d:e9:ee:69:05:83:e4:94:ee:62:37:28:69:91:27: cf:ca:01:19:07:57:b6:95:c8:9f:d2:f0:66:dc:ab: a4:29:d5:f2:2c:90:ce:82:fa:0d:37:56:7c:ec:41: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:48:C5:4A:51:10:D5:9C:37:19:B5:E2:85:D4:38:5D:13:74:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:bd:e5:c0:fd:f9:f9:d5:b5:36:46:6c:76:bb:72:bd:2f:18: c1:de:8e:18:66:73:2b:6f:e4:9b:93:f9:8a:aa:c6:92:73:2f: 45:df:06:16:06:22:8d:56:04:a2:00:40:d7:fc:93:a2:30:01: 91:1a:cf:12:29:b3:3c:98:07:35:6b:e8:06:76:4b:f1:c9:14: 4a:a0:05:b3:97:1b:bb:21:e4:a2:0e:3c:2c:7f:8d:a7:7e:2b: 78:96:02:a7:dd:32:79:39:6d:e3:cb:f4:81:eb:fe:6a:39:65: eb:d2:de:c8:37:6b:38:31:9e:77:28:ab:43:9a:6e:aa:44:a0: a4:fe:4b:57:c0:57:2e:cd:81:c1:57:00:0b:9b:57:37:e3:e0: 7a:66:2a:1a:f2:c1:d9:5d:af:6c:09:a9:f0:ae:4f:13:49:7c: d2:fa:43:f1:04:c1:57:9b:61:2b:de:42:ae:38:fe:e5:72:73: c8:a2:91:fd:65:ac:50:d7:06:56:be:e8:e8:69:7c:28:34:9f: 18:be:0d:4c:27:54:5a:bf:7a:45:b4:94:9e:a7:0a:ee:2e:06: 89:c4:0f:8f:91:50:7d:3a:39:ea:04:53:59:0c:63:38:d7:89: 23:b7:1f:d9:e7:a2:af:a4:53:4a:0a:dc:f3:4c:b4:3d:c7:d6: 13:ad:7e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiq+CDZ4lCE5z0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MTVkYTY1MTctNGYyMC00YTJlLTlmNWQtMDMyZTBkMjczZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj7hAC8yCWdoWHeaE9WDraJ9owmcGgz31y1b nUMISslvn47kTP5HOSsvmpKirPKrUsQjX2Ahgo1dP/PuipE1MQRat+3Y9981+Rj3 8R0mGcuge5IvOBQxAMx3HcbpdSDcqushu73uiYavyYlEId7LtqvICDLj3h0UmnWY L9URJ+14X7fVKCivi1uO9VYny0daigJ3weMpO8MBtu+i9WCFFQFmAlaWllh+yCJ9 nk2YuHW80h2pF20B0SQnqBz0mmBQgNRHKeTBVicOTk7Lmv0qgGI96e5pBYPklO5i NyhpkSfPygEZB1e2lcif0vBm3KukKdXyLJDOgvoNN1Z87EH2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkiSMVKURDVnDcZteKF1DhdE3S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjk2NDM5NTEtN2NiZi0z MGQ2LWIwYzMtOTI0MDRiOGFiMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALi95cD9+fnVtTZGbHa7cr0vGMHejhhmcytv5JuT+YqqxpJzL0XfBhYG Io1WBKIAQNf8k6IwAZEazxIpszyYBzVr6AZ2S/HJFEqgBbOXG7sh5KIOPCx/jad+ K3iWAqfdMnk5bePL9IHr/mo5ZevS3sg3azgxnncoq0OabqpEoKT+S1fAVy7NgcFX AAubVzfj4HpmKhrywdldr2wJqfCuTxNJfNL6Q/EEwVebYSveQq44/uVyc8iikf1l rFDXBla+6OhpfCg0nxi+DUwnVFq/ekW0lJ6nCu4uBonED4+RUH06OeoEU1kMYzjX iSO3H9nnoq+kU0oK3PNMtD3H1hOtfk0= -----END CERTIFICATE-----Generated at Tue Jun 17 08:59:59 2025 by rpki-client