$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa File: eae38249-949c-338e-a384-9f61ab8838c3.roa (raw, json) Hash identifier: jb5e3FO9hx3wQIAFXdvKmquDWilXICNWZFBetTPi0C8= Subject key identifier: A2:9C:BF:9F:83:5C:69:9D:99:EB:DC:2B:67:06:B3:5D:44:F7:C8:3C Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584A1B5FF7B3CCA991BC09C5F9E0 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 62856 IP address blocks: 64.207.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f7:b3:cc:a9:91:bc:09:c5:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=0bd91375-c066-4772-bbeb-be840aa51ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:52:8a:fe:9f:9d:05:82:34:df:5f:9f:88:19: ca:10:bb:6a:40:9c:bb:da:c5:64:8e:d4:9f:45:ef: 5f:20:5f:76:57:d9:f1:25:28:e3:04:0f:e2:7b:c9: fb:4a:12:24:9e:c8:c5:d6:04:0e:47:04:94:83:88: c4:58:fc:27:36:83:b7:64:ab:28:5d:eb:78:99:7f: 15:3c:1e:3d:1f:10:93:1a:0e:8f:d3:2d:40:97:25: e0:39:79:a0:bf:44:c9:24:f9:04:f8:08:f7:f5:3e: 5d:11:72:46:e2:0e:46:d9:4e:f0:50:47:ad:db:50: f4:5a:32:bf:6c:3d:6a:c4:a4:0f:59:09:40:49:55: 53:5d:55:06:2c:ed:df:95:5c:ea:89:a8:27:23:79: 52:bc:1b:32:39:f1:a4:d9:4f:bb:4f:9b:d8:db:a9: 5a:b6:4b:fc:39:5f:b4:4f:ba:2c:90:7f:b5:ea:7f: 03:33:ea:a3:46:17:3e:23:04:25:52:78:b2:7e:ba: 1b:02:63:5d:24:5c:5f:c8:41:7c:c3:8b:ca:c5:9c: e8:87:ef:02:57:a3:29:b9:2e:af:d3:5e:1c:1f:83: dc:85:57:f0:93:6a:22:ff:fc:e8:a8:e3:ec:30:33: 0f:15:16:38:09:f4:22:09:02:97:9e:81:b9:a8:76: 4f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9C:BF:9F:83:5C:69:9D:99:EB:DC:2B:67:06:B3:5D:44:F7:C8:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 64.207.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b9:23:8b:fd:f4:3f:8a:b7:45:16:e9:ea:3c:92:3b:9d:85: ef:1a:82:ee:23:a8:d1:dc:35:01:ab:7c:30:07:82:11:c4:4d: e9:e3:75:0d:44:6c:9a:1e:1d:3e:8e:fc:da:2f:8a:74:69:bc: f1:ae:17:9e:b1:28:b7:8d:5c:30:3c:6b:93:4e:11:28:d9:7f: 2c:b5:c7:cb:ad:8c:6e:a0:d1:34:0b:b2:e8:da:04:84:e1:6a: 00:2e:e0:42:f2:c8:c8:1b:81:81:a3:db:b3:be:5a:2e:ca:c4: 3b:7a:95:54:ec:e2:b2:a0:dd:b4:76:e1:43:9a:87:11:40:39: 4a:a9:bb:b9:3e:e1:3e:cf:fd:7f:39:19:80:6d:3e:11:02:ff: 62:a6:e9:bf:3e:6c:32:41:0a:6b:57:0e:9c:8a:72:cb:fd:be: 90:81:f8:1e:3e:76:33:e8:b0:31:71:51:a1:b0:56:8f:3b:0e: 45:57:e2:9d:1c:ef:0a:80:8d:62:7c:6d:bd:4d:ec:d8:21:82: 71:8b:42:af:e6:43:50:d7:85:15:03:47:b4:88:88:67:e5:d4: 98:02:ab:85:f0:86:85:69:15:8b:8f:e2:33:40:77:70:ec:77: 97:d2:05:4a:27:2a:1a:b1:91:af:1d:d3:57:10:b1:98:80:68: 33:43:15:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/ezzKmRvAnF+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MGJkOTEzNzUtYzA2Ni00NzcyLWJiZWItYmU4NDBhYTUxY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglKK/p+dBYI031+fiBnKELtqQJy72sVkjtSf Re9fIF92V9nxJSjjBA/ie8n7ShIknsjF1gQORwSUg4jEWPwnNoO3ZKsoXet4mX8V PB49HxCTGg6P0y1AlyXgOXmgv0TJJPkE+Aj39T5dEXJG4g5G2U7wUEet21D0WjK/ bD1qxKQPWQlASVVTXVUGLO3flVzqiagnI3lSvBsyOfGk2U+7T5vY26latkv8OV+0 T7oskH+16n8DM+qjRhc+IwQlUniyfrobAmNdJFxfyEF8w4vKxZzoh+8CV6MpuS6v 014cH4PchVfwk2oi//zoqOPsMDMPFRY4CfQiCQKXnoG5qHZPnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKcv5+DXGmdmevcK2cGs11E98g8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZWFlMzgyNDktOTQ5Yy0z MzhlLWEzODQtOWY2MWFiODgzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA25I4v99D+Kt0UW6eo8kjudhe8agu4jqNHcNQGrfDAHghHETenjdQ1E bJoeHT6O/NovinRpvPGuF56xKLeNXDA8a5NOESjZfyy1x8utjG6g0TQLsujaBITh agAu4ELyyMgbgYGj27O+Wi7KxDt6lVTs4rKg3bR24UOahxFAOUqpu7k+4T7P/X85 GYBtPhEC/2Km6b8+bDJBCmtXDpyKcsv9vpCB+B4+djPosDFxUaGwVo87DkVX4p0c 7wqAjWJ8bb1N7NghgnGLQq/mQ1DXhRUDR7SIiGfl1JgCq4XwhoVpFYuP4jNAd3Ds d5fSBUonKhqxka8d01cQsZiAaDNDFdI= -----END CERTIFICATE-----Generated at Mon Jun 16 02:46:07 2025 by rpki-client