$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa File: 4756446c-96ad-309f-b6b4-5601e968e103.roa (raw, json) Hash identifier: NwPaVShCXWGsapqtkStkv5D4Rcvl1wZoqH3Pjwu8Gas= Subject key identifier: 68:11:D9:F6:6D:D9:D5:A4:BE:3D:B7:CB:12:D9:13:86:5D:6C:CC:08 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F43285849F17FD2DFF4E4BB6385172680 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 27446 IP address blocks: 64.147.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d2:df:f4:e4:bb:63:85:17:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=8a4a894b-5d3d-4e70-a7cf-a9c798efb753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:29:65:40:31:e4:ac:d9:d3:d2:95:75:ce: c5:07:15:3c:01:ed:41:cc:02:ff:d6:dc:8f:55:4a: 39:1d:bf:2c:7a:0e:a1:31:a2:7d:53:96:9c:c6:97: bd:f8:57:de:0f:98:34:40:5e:c3:89:c2:f7:c8:0b: f1:f0:b2:f2:81:7f:2d:78:9f:be:fd:b8:e0:5a:fb: 7d:78:01:b8:74:9e:15:f2:8c:bc:ac:06:fc:31:55: 98:1a:5a:0d:ed:07:fe:f5:b0:2b:b5:07:37:d1:13: 2f:2b:4f:e9:bb:79:f0:1b:f7:43:1c:5f:a8:87:26: 9f:88:a1:50:b1:15:f1:b5:a5:fe:ba:46:81:08:ff: c1:27:d8:72:9e:71:99:42:30:05:7a:3a:d9:17:2b: 2d:4f:c6:2d:45:2d:f8:18:46:9b:80:2a:8d:cb:0f: 87:d2:83:c0:98:ac:57:ce:e9:d9:1f:32:40:b3:d3: 70:04:2a:df:21:77:62:24:58:6d:4c:1b:d0:99:75: 92:06:a8:32:30:1d:68:fb:2b:24:71:60:13:50:98: 9a:f1:dc:c4:cd:35:e9:a2:82:1e:b4:b1:eb:5f:9d: d7:e3:53:7d:16:a1:ed:59:2b:e4:ee:10:d9:ea:80: 69:b0:6e:c3:cb:10:85:80:8f:76:b2:b0:e0:78:5e: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:11:D9:F6:6D:D9:D5:A4:BE:3D:B7:CB:12:D9:13:86:5D:6C:CC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 64.147.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ec:fb:1c:5f:61:fa:3c:3d:23:e6:f7:36:a9:4f:49:d2:47: bf:03:63:b5:f5:65:1f:27:d0:13:b4:bb:63:11:32:4d:e1:d4: 39:0f:f6:53:e3:cf:93:65:91:d1:87:81:0f:0d:88:23:43:4c: ae:f9:e4:46:6e:9e:a1:8a:38:a1:79:4a:2b:32:93:e3:a8:81: 08:87:8a:c7:70:88:1d:17:97:cd:3c:67:44:6b:c8:55:9a:f8: c1:f9:96:88:53:dc:15:f3:13:d2:7c:9f:87:d9:3e:bb:2a:e5: 66:fc:71:f5:e2:34:80:87:ee:c0:18:c3:0d:cd:0d:89:5a:17: 6c:51:6c:44:e0:21:8e:be:6f:63:76:77:b6:73:4c:df:76:76: 8d:30:1d:fc:3b:f3:b0:98:ba:cf:c5:c6:ce:85:43:56:12:40: f2:e7:28:94:08:e0:5b:0d:b1:57:2c:32:2d:30:2a:1f:44:8b: f5:18:27:f9:df:58:68:93:8e:ba:61:00:d1:a5:29:55:9e:97: e0:f7:6d:73:2c:a0:5e:3d:ac:5c:13:ad:65:ee:1b:16:7a:1c: 53:ed:71:4d:bf:54:21:6d:24:94:98:9c:2c:04:10:bf:ea:8b: 91:06:5b:a8:35:7c:0c:ad:89:8c:4b:7d:f2:69:34:80:28:1f: 2d:b3:86:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9Lf9OS7Y4UXJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OGE0YTg5NGItNWQzZC00ZTcwLWE3Y2YtYTljNzk4ZWZiNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBcpZUAx5KzZ09KVdc7FBxU8Ae1BzAL/1tyP VUo5Hb8seg6hMaJ9U5acxpe9+FfeD5g0QF7DicL3yAvx8LLygX8teJ++/bjgWvt9 eAG4dJ4V8oy8rAb8MVWYGloN7Qf+9bArtQc30RMvK0/pu3nwG/dDHF+ohyafiKFQ sRXxtaX+ukaBCP/BJ9hynnGZQjAFejrZFystT8YtRS34GEabgCqNyw+H0oPAmKxX zunZHzJAs9NwBCrfIXdiJFhtTBvQmXWSBqgyMB1o+yskcWATUJia8dzEzTXpooIe tLHrX53X41N9FqHtWSvk7hDZ6oBpsG7DyxCFgI92srDgeF46LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgR2fZt2dWkvj23yxLZE4ZdbMwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNDc1NjQ0NmMtOTZhZC0z MDlmLWI2YjQtNTYwMWU5NjhlMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbs+xxfYfo8PSPm9zapT0nSR78DY7X1ZR8n0BO0u2MRMk3h1DkP9lPj z5NlkdGHgQ8NiCNDTK755EZunqGKOKF5Sisyk+OogQiHisdwiB0Xl808Z0RryFWa +MH5lohT3BXzE9J8n4fZPrsq5Wb8cfXiNICH7sAYww3NDYlaF2xRbETgIY6+b2N2 d7ZzTN92do0wHfw787CYus/Fxs6FQ1YSQPLnKJQI4FsNsVcsMi0wKh9Ei/UYJ/nf WGiTjrphANGlKVWel+D3bXMsoF49rFwTrWXuGxZ6HFPtcU2/VCFtJJSYnCwEEL/q i5EGW6g1fAytiYxLffJpNIAoHy2zhpI= -----END CERTIFICATE-----Generated at Tue Jun 17 09:07:52 2025 by rpki-client