$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa File: 982f6e65-bd39-36a1-a90d-3b469a869a64.roa (raw, json) Hash identifier: AhET47y0+A5EeIQwsn51DyxyXs8crDa5LLfC1AnzwBw= Subject key identifier: 7D:AF:AE:12:88:23:B7:25:E3:4B:1D:AB:27:03:88:05:D8:3B:0E:31 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285849D9C4F108393C42706E3A7A00 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa Signing time: Wed 14 May 2025 13:01:03 +0000 ROA not before: Wed 14 May 2025 13:01:03 +0000 ROA not after: Tue 12 Aug 2025 13:01:03 +0000 asID: 397873 IP address blocks: 64.20.208.0/24 maxlen: 24 66.248.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:c4:f1:08:39:3c:42:70:6e:3a:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: May 14 13:01:03 2025 GMT Not After : Aug 12 13:01:03 2025 GMT Subject: CN=14ee39e5-2b0f-4265-9c55-e70316581f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:9d:66:72:2e:b0:4b:e8:ec:05:75:ad:15: db:e5:87:c5:d1:af:ae:f1:5c:e7:25:1c:aa:ca:96: d3:ec:12:e3:61:8c:ce:18:c6:d9:d3:cb:1e:b0:ef: 86:33:45:61:5e:ed:18:1a:05:d1:28:1a:c6:08:dc: 10:c6:9c:d5:2a:c7:aa:0b:0b:c5:3e:5c:9c:65:2e: 1a:82:7f:d6:c0:98:e9:e7:88:11:fa:14:94:53:a4: 79:1b:39:d1:c4:a8:6f:f7:27:76:5e:24:ec:df:67: 0b:84:da:a3:b5:4b:58:f2:cd:10:dc:90:df:47:dc: c9:89:9a:fa:03:a3:4d:37:e7:1e:55:03:03:a4:1a: 1b:ce:97:54:b8:06:53:cc:a9:23:37:39:f4:b3:57: 2b:3c:f5:34:ce:21:50:e1:4b:6a:1e:28:37:47:10: 07:ce:c3:12:cd:8e:0b:51:19:5d:62:5c:db:d8:9d: 03:58:ae:1e:3f:76:68:f5:a0:a8:8b:24:89:3f:72: bd:47:b2:cc:d3:79:29:18:2b:e2:95:c9:f5:ba:5f: 6c:b9:2d:80:19:9e:7c:78:cd:13:bc:0e:1a:4f:0b: 4a:a1:49:c9:1b:4b:63:59:e9:dd:95:53:59:ce:4e: 13:3f:08:81:bc:4b:da:65:56:52:b6:94:a6:3e:6e: 7b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:AE:12:88:23:B7:25:E3:4B:1D:AB:27:03:88:05:D8:3B:0E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.208.0/24 66.248.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:60:62:47:2e:f4:9a:d7:04:d1:2c:d1:36:cb:81:c9:f6:ea: 81:3e:c6:ae:cc:d3:bb:c9:71:e5:5d:57:f9:fa:3a:3e:61:9e: d1:c1:36:5f:f1:72:f5:ac:5f:d1:dd:e2:50:22:12:3a:31:39: 5e:3d:43:f1:1b:c3:29:62:fd:ca:4f:92:57:c6:de:e2:c9:ee: 9c:26:40:28:76:d8:6c:4d:61:5f:3f:9b:52:a1:46:c9:3a:c9: 41:88:77:34:69:b7:96:3a:1f:4a:ef:6e:fd:e4:22:63:c3:21: 77:cd:5d:53:d0:14:61:00:7c:82:98:c2:20:3d:50:c8:e8:42: e9:bd:30:57:e2:65:78:c3:14:ae:dd:ca:f2:d3:06:98:3b:43: 5b:53:c4:33:58:b9:0c:72:bc:a2:90:c2:43:a4:36:91:af:b7: 58:cf:c3:b2:26:9a:02:67:d1:53:c0:69:0c:50:75:7b:45:ed: 8f:b1:a9:fe:e8:10:4d:77:fc:2d:57:fa:e7:37:af:a9:a4:9e: e8:3a:cc:42:7b:70:04:38:69:52:b9:64:59:ff:d3:2d:7f:8f: 54:c6:31:74:7f:b6:29:5f:a4:be:46:7b:0a:e4:a3:5f:7c:cb: 68:37:42:f1:0a:a6:4f:00:e1:04:d9:95:61:88:d1:87:a3:3e: 99:a3:6a:b1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnZxPEIOTxCcG46egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk MTRlZTM5ZTUtMmIwZi00MjY1LTljNTUtZTcwMzE2NTgxZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGadZnIusEvo7AV1rRXb5YfF0a+u8VznJRyq ypbT7BLjYYzOGMbZ08sesO+GM0VhXu0YGgXRKBrGCNwQxpzVKseqCwvFPlycZS4a gn/WwJjp54gR+hSUU6R5GznRxKhv9yd2XiTs32cLhNqjtUtY8s0Q3JDfR9zJiZr6 A6NNN+ceVQMDpBobzpdUuAZTzKkjNzn0s1crPPU0ziFQ4UtqHig3RxAHzsMSzY4L URldYlzb2J0DWK4eP3Zo9aCoiySJP3K9R7LM03kpGCvilcn1ul9suS2AGZ58eM0T vA4aTwtKoUnJG0tjWendlVNZzk4TPwiBvEvaZVZStpSmPm57/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH2vrhKII7cl40sdqycDiAXYOw4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOTgyZjZlNjUtYmQzOS0z NmExLWE5MGQtM2I0NjlhODY5YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBTQAwQA QvjwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG9gYkcu9JrXBNEs0TbLgcn26oE+xq7M07vJceVdV/n6Oj5h ntHBNl/xcvWsX9Hd4lAiEjoxOV49Q/Ebwyli/cpPklfG3uLJ7pwmQCh22GxNYV8/ m1KhRsk6yUGIdzRpt5Y6H0rvbv3kImPDIXfNXVPQFGEAfIKYwiA9UMjoQum9MFfi ZXjDFK7dyvLTBpg7Q1tTxDNYuQxyvKKQwkOkNpGvt1jPw7ImmgJn0VPAaQxQdXtF 7Y+xqf7oEE13/C1X+uc3r6mknug6zEJ7cAQ4aVK5ZFn/0y1/j1TGMXR/tilfpL5G ewrko198y2g3QvEKpk8A4QTZlWGI0YejPpmjarE= -----END CERTIFICATE-----Generated at Mon Jun 16 23:04:42 2025 by rpki-client