$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json) Hash identifier: rWY1dWu81NLlMOK9H/bqCejJinh3eb8zWhlSReQ0pKI= Subject key identifier: 45:0B:32:6C:5C:D7:26:43:69:C2:D7:F9:E2:18:7D:53:77:7C:4A:13 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F43285849E225395DFEF23A379E2C4740 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 396998 IP address blocks: 64.68.193.0/24 maxlen: 24 2620:49:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:39:5d:fe:f2:3a:37:9e:2c:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=d5e1f083-e6f5-44a4-8faf-3754c4629276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:84:42:01:a2:f4:25:25:43:0c:ef:22:23: f5:94:a8:6f:b6:fe:43:fe:e9:a8:4e:5c:3e:50:b5: 71:79:c1:d0:5c:f2:b0:ab:e9:70:20:a5:d7:d9:6b: 75:bb:b9:89:4d:4c:2b:fd:55:6b:f1:6d:42:22:0d: de:9c:fa:19:31:e1:02:22:e4:b4:0e:c2:98:1a:e8: e9:2c:3a:ff:9e:ce:cd:62:db:a2:43:1a:72:4e:8e: 5c:9b:9b:75:3b:14:d2:95:b0:6c:01:08:15:58:2c: 27:04:20:c8:7a:f5:bc:17:42:06:1b:44:64:a5:c2: 21:0b:60:ae:ac:0d:69:d0:bb:40:36:6f:8d:5e:94: 59:db:86:f2:09:80:71:34:40:f8:0c:ab:cc:6c:ac: bf:e5:95:ef:5e:13:6f:d3:f8:4a:2a:de:f8:51:2b: 0b:60:b6:58:bc:27:51:de:91:58:44:79:2c:a7:ef: 8f:f2:18:ab:a0:82:4e:02:17:8b:4a:82:06:8a:78: c0:29:9a:5a:f8:8b:71:87:70:11:44:3e:47:4d:cc: 8e:f9:c9:6d:b5:e0:f9:86:0e:e1:a5:bc:2e:fd:49: d3:68:c3:6f:e6:fc:49:1e:db:ce:a8:49:89:48:26: b5:d9:64:25:38:a4:7b:47:4f:73:c8:60:67:73:94: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0B:32:6C:5C:D7:26:43:69:C2:D7:F9:E2:18:7D:53:77:7C:4A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.193.0/24 IPv6: 2620:49:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0e:31:a5:76:8e:74:f5:25:f3:66:1f:83:f1:4c:6a:15:75: eb:6d:f6:b5:98:19:42:96:9d:81:35:74:9f:20:d5:a2:cc:28: fc:7a:36:d5:32:a5:95:9a:3c:bc:c3:9a:b4:62:9d:f6:65:0c: 4f:cf:52:6f:89:79:64:5c:4d:fe:cc:d8:6b:96:85:1c:98:71: 0e:98:55:6d:26:ea:e2:b9:61:8e:fe:86:66:db:9b:7d:36:de: c1:5a:85:9d:36:c3:e4:e2:eb:a5:80:ca:3c:ff:29:bb:2c:61: 64:82:ec:33:dc:e1:89:65:03:d3:c1:89:df:44:4c:e2:42:dc: 97:30:98:5f:37:9a:de:2c:d5:dc:49:bc:3b:15:37:41:c1:7c: 51:3b:3f:2a:b2:61:cd:8d:63:0d:62:f3:6e:5a:86:a2:12:37: af:6b:85:9b:f5:8e:63:8c:69:c8:96:6a:8f:4b:45:18:41:b5: 11:f6:06:ea:00:83:98:cd:46:d3:2f:8b:b4:a2:28:96:b2:53: 95:b6:91:c2:61:c3:46:d7:2d:a5:7d:55:d3:65:43:09:cf:35: f4:eb:34:99:f9:06:c9:3b:03:77:af:d3:2d:b5:70:35:75:cc: 15:a4:5c:69:54:e3:2c:eb:0a:74:cc:40:e0:c6:26:b8:98:9c: 5c:cb:88:3b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEniJTld/vI6N54sR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZDVlMWYwODMtZTZmNS00NGE0LThmYWYtMzc1NGM0NjI5Mjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymSEQgGi9CUlQwzvIiP1lKhvtv5D/umoTlw+ ULVxecHQXPKwq+lwIKXX2Wt1u7mJTUwr/VVr8W1CIg3enPoZMeECIuS0DsKYGujp LDr/ns7NYtuiQxpyTo5cm5t1OxTSlbBsAQgVWCwnBCDIevW8F0IGG0RkpcIhC2Cu rA1p0LtANm+NXpRZ24byCYBxNED4DKvMbKy/5ZXvXhNv0/hKKt74USsLYLZYvCdR 3pFYRHksp++P8hiroIJOAheLSoIGinjAKZpa+Itxh3ARRD5HTcyO+cltteD5hg7h pbwu/UnTaMNv5vxJHtvOqEmJSCa12WQlOKR7R09zyGBnc5Q9qwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEULMmxc1yZDacLX+eIYfVN3fEoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOA4xpXaOdPUl82Yfg/FMahV16232tZgZ QpadgTV0nyDVoswo/Ho21TKllZo8vMOatGKd9mUMT89Sb4l5ZFxN/szYa5aFHJhx DphVbSbq4rlhjv6GZtubfTbewVqFnTbD5OLrpYDKPP8puyxhZILsM9zhiWUD08GJ 30RM4kLclzCYXzea3izV3Em8OxU3QcF8UTs/KrJhzY1jDWLzblqGohI3r2uFm/WO Y4xpyJZqj0tFGEG1EfYG6gCDmM1G0y+LtKIolrJTlbaRwmHDRtctpX1V02VDCc81 9Os0mfkGyTsDd6/TLbVwNXXMFaRcaVTjLOsKdMxA4MYmuJicXMuIOw== -----END CERTIFICATE-----Generated at Sun Jun 15 17:02:30 2025 by rpki-client