$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f7d86c8a-c685-375e-a169-42ffc62c2508.roa File: f7d86c8a-c685-375e-a169-42ffc62c2508.roa (raw, json) Hash identifier: 9qh1dAIvvdAxmV1rPm4WiDUsYuVlupjOTI0Ghvl44rQ= Subject key identifier: 0B:C9:41:FC:70:2E:EE:54:3F:49:73:FD:ED:15:8D:16:F4:A7:FA:21 Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F43285849F7151086DE20BD8B91F2B9C0 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f7d86c8a-c685-375e-a169-42ffc62c2508.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 64.234.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:10:86:de:20:bd:8b:91:f2:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=a3b64f14-27a5-4a0a-9e4b-64cb30420fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:d1:94:14:e6:93:d2:18:7a:07:73:a6:31: a7:b3:ff:0c:0a:a5:29:4d:9f:8f:bd:09:5c:55:fb: 3b:2d:13:a9:9d:ed:5d:7b:25:a9:27:ce:ac:dc:3e: c1:67:3f:f0:0c:f4:8a:38:15:9a:83:55:17:74:07: ab:68:2e:bd:d7:da:ce:d0:34:31:15:5c:8a:30:c2: 53:f6:7a:35:96:b0:05:00:b9:25:1d:1c:05:c9:a0: 4e:bd:51:4a:70:98:84:d8:a8:6a:eb:82:5a:30:4f: dc:99:10:5b:30:66:62:0c:1b:81:49:37:e4:96:50: a8:72:0f:85:95:02:eb:26:26:4b:73:4c:6d:db:ba: f7:18:d4:54:fe:fd:2c:88:93:7a:b4:68:77:ad:fc: 64:aa:16:33:c8:3f:b3:3a:4e:71:60:88:e3:62:13: 32:70:f2:0a:7b:17:0f:7f:bd:8e:39:93:c2:9a:e2: 47:bf:72:57:8e:b2:88:9d:7d:4d:ad:f7:47:11:f7: 14:24:d5:47:a7:aa:df:42:ea:69:6a:b5:72:8f:25: ae:66:8b:2c:70:b0:bb:60:fd:82:54:fc:f6:f1:59: 8a:1b:bc:7a:7c:4d:b6:05:6c:9e:d0:59:62:df:8e: 7b:b7:4a:6f:f1:dc:c0:5e:16:b1:82:38:38:a6:9e: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C9:41:FC:70:2E:EE:54:3F:49:73:FD:ED:15:8D:16:F4:A7:FA:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f7d86c8a-c685-375e-a169-42ffc62c2508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv4: 64.234.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1d:51:72:9a:b1:28:59:a6:b0:cc:3b:a1:d7:bf:1c:ae:83: ef:87:85:6f:18:06:85:62:a6:61:66:44:6e:3c:7e:43:b3:d4: fe:6e:6c:ec:7d:c8:22:84:7e:24:46:50:a6:0f:b0:93:7e:f0: a5:3d:47:82:85:a4:d6:ae:7e:62:a9:f9:f6:ed:e4:5e:39:15: 72:ae:dd:06:d6:ea:80:8c:09:65:ef:08:6f:73:15:30:ab:62: ea:90:d7:47:01:b6:38:db:27:a5:b1:78:da:ed:54:0d:1b:47: b2:e7:24:6c:a6:40:c5:7e:98:72:74:f9:98:90:16:86:ef:d0: e5:14:d1:1c:45:51:e9:43:d2:de:f9:b7:ce:37:40:45:d9:88: 61:5e:de:82:1b:72:29:fc:87:fd:de:3e:24:f3:8b:74:96:86: 35:64:31:ca:1c:bc:46:7e:21:c9:de:ea:d5:5d:a7:61:4c:94: 36:ee:a3:66:3d:ef:54:f5:47:7d:41:62:65:0f:d6:15:11:10: 30:cf:6b:3f:7c:04:fe:18:e0:ac:8e:18:0f:07:54:ee:d9:66: 78:5b:4b:4d:5f:ce:28:4b:1e:10:f2:90:9f:76:1e:46:d5:fa: 44:df:75:26:2b:27:e8:3e:fc:30:27:6c:60:05:9d:92:0b:64: 68:fa:42:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRCG3iC9i5HyucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YTNiNjRmMTQtMjdhNS00YTBhLTllNGItNjRjYjMwNDIwZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JXRlBTmk9IYegdzpjGns/8MCqUpTZ+PvQlc Vfs7LROpne1deyWpJ86s3D7BZz/wDPSKOBWag1UXdAeraC6919rO0DQxFVyKMMJT 9no1lrAFALklHRwFyaBOvVFKcJiE2Khq64JaME/cmRBbMGZiDBuBSTfkllCocg+F lQLrJiZLc0xt27r3GNRU/v0siJN6tGh3rfxkqhYzyD+zOk5xYIjjYhMycPIKexcP f72OOZPCmuJHv3JXjrKInX1NrfdHEfcUJNVHp6rfQupparVyjyWuZosscLC7YP2C VPz28VmKG7x6fE22BWye0Fli3457t0pv8dzAXhaxgjg4pp4u7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvJQfxwLu5UP0lz/e0VjRb0p/ohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvZjdkODZjOGEtYzY4NS0z NzVlLWExNjktNDJmZmM2MmMyNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOpzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMdUXKasShZprDMO6HXvxyug++HhW8YBoVipmFmRG48fkOz1P5ubOx9 yCKEfiRGUKYPsJN+8KU9R4KFpNaufmKp+fbt5F45FXKu3QbW6oCMCWXvCG9zFTCr YuqQ10cBtjjbJ6WxeNrtVA0bR7LnJGymQMV+mHJ0+ZiQFobv0OUU0RxFUelD0t75 t843QEXZiGFe3oIbcin8h/3ePiTzi3SWhjVkMcocvEZ+Icne6tVdp2FMlDbuo2Y9 71T1R31BYmUP1hUREDDPaz98BP4Y4KyOGA8HVO7ZZnhbS01fzihLHhDykJ92HkbV +kTfdSYrJ+g+/DAnbGAFnZILZGj6QgU= -----END CERTIFICATE-----Generated at Sun Jun 15 01:05:17 2025 by rpki-client