$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/8b4e8a34-37e7-3fc8-9d80-68def8757057.roa File: 8b4e8a34-37e7-3fc8-9d80-68def8757057.roa (raw, json) Hash identifier: PKuNMCR9+cqASow5d0BwqdrTGtC76lbUM1oBroX+Zys= Subject key identifier: 65:5A:91:14:60:67:DB:CE:45:78:BD:78:39:04:E8:16:00:30:DD:E2 Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Certificate serial: 010D0C9F4328584A146576E59EC3762D076E4CE0 Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/8b4e8a34-37e7-3fc8-9d80-68def8757057.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 58182 IP address blocks: 64.95.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:76:e5:9e:c3:76:2d:07:6e:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=7c088f84-8b21-465b-a4d1-4c0ab105b1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:b6:54:99:e8:04:a4:54:2d:89:01:d2:23: 16:4b:e3:ac:14:20:93:7c:16:94:7a:2d:bd:ba:db: 8f:22:f9:fe:be:98:b3:8c:95:90:29:40:32:e3:28: 2f:75:40:9f:6a:0e:23:1b:59:c7:64:85:e4:fc:c5: 55:11:08:28:9c:15:08:f8:dc:3b:b9:30:17:af:46: a5:3c:9a:0d:50:38:91:af:6d:f5:c2:11:c1:ae:b1: 2e:f2:b3:d0:27:cc:cf:df:71:c9:6b:05:60:5c:39: b6:6b:cd:d7:f6:2c:58:13:5c:88:95:e5:99:08:dc: bd:ee:b2:ce:74:28:3e:7d:4f:14:45:d0:b5:9e:e0: 19:37:e7:c0:91:d8:f6:0d:6c:88:cb:1f:6a:bc:71: e7:b3:32:5c:e9:51:55:be:51:39:e1:b8:8f:6b:ff: f9:31:05:66:49:53:b2:2b:62:07:ac:0f:e9:15:89: 52:87:e1:51:50:5c:1e:f6:e3:a8:53:4d:8b:20:d1: 05:bb:dc:dc:b3:5d:26:dd:b9:49:77:c1:1e:db:c2: 65:16:95:a2:e9:5a:4a:9d:89:58:e5:fa:ae:03:30: 04:17:05:d6:79:44:7f:13:f7:3b:01:d6:5f:c8:08: ed:43:32:57:27:a4:a0:aa:36:19:cf:c5:99:4d:41: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:91:14:60:67:DB:CE:45:78:BD:78:39:04:E8:16:00:30:DD:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/8b4e8a34-37e7-3fc8-9d80-68def8757057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl X509v3 Authority Key Identifier: keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer sbgp-ipAddrBlock: critical IPv4: 64.95.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fb:44:4b:f3:3a:43:a6:0b:7d:f4:b7:47:b6:61:62:b8:1a: 48:9b:c5:82:54:f0:58:b6:73:31:80:82:cb:8b:a5:d1:6e:8a: f7:17:88:c8:55:91:f9:c2:64:f1:24:f1:2f:3f:9a:ea:fa:e3: c6:a0:09:68:9d:e2:01:6c:24:ac:e2:e3:f5:8a:5a:de:da:32: 7c:29:96:a4:7d:72:7b:1b:0c:65:e2:f0:df:e8:ff:4c:c4:bb: 81:0d:b8:62:11:cb:a6:ea:4f:28:b4:a7:51:8f:d6:03:5f:d5: 9c:2a:21:7e:b1:8f:1f:ef:e1:10:8e:63:b8:4f:9e:ce:88:79: 61:a6:8a:de:42:23:99:da:19:34:1f:cd:5c:f2:6a:6e:9b:e9: 31:ae:61:88:6f:2c:b3:ee:b5:d2:1f:e1:7f:55:52:31:c3:43: 9a:e4:6e:4a:7b:87:d2:89:f5:9b:d4:f9:57:0c:36:e2:22:8d: d5:b5:8b:ea:3b:4e:1b:2f:57:78:d9:08:fd:67:d3:f5:2c:3c: 86:2a:3d:28:c5:dd:cd:7a:6c:07:47:ef:44:ec:d1:3d:02:97: 76:c4:61:d5:8e:ac:ee:2e:e0:32:4b:5b:95:d0:63:73:e6:11: ad:17:dd:bd:84:05:49:c1:27:bf:63:a9:8d:5f:36:f4:d1:c1: 0d:6f:42:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXblnsN2LQduTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl NWVjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk N2MwODhmODQtOGIyMS00NjViLWE0ZDEtNGMwYWIxMDViMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp62VJnoBKRULYkB0iMWS+OsFCCTfBaUei29 utuPIvn+vpizjJWQKUAy4ygvdUCfag4jG1nHZIXk/MVVEQgonBUI+Nw7uTAXr0al PJoNUDiRr231whHBrrEu8rPQJ8zP33HJawVgXDm2a83X9ixYE1yIleWZCNy97rLO dCg+fU8URdC1nuAZN+fAkdj2DWyIyx9qvHHnszJc6VFVvlE54biPa//5MQVmSVOy K2IHrA/pFYlSh+FRUFwe9uOoU02LINEFu9zcs10m3blJd8Ee28JlFpWi6VpKnYlY 5fquAzAEFwXWeUR/E/c7AdZfyAjtQzJXJ6SgqjYZz8WZTUE1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVakRRgZ9vORXi9eDkE6BYAMN3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4 ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvOGI0ZThhMzQtMzdlNy0z ZmM4LTlkODAtNjhkZWY4NzU3MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4 ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF+dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF37REvzOkOmC330t0e2YWK4GkibxYJU8Fi2czGAgsuLpdFuivcXiMhV kfnCZPEk8S8/mur648agCWid4gFsJKzi4/WKWt7aMnwplqR9cnsbDGXi8N/o/0zE u4ENuGIRy6bqTyi0p1GP1gNf1ZwqIX6xjx/v4RCOY7hPns6IeWGmit5CI5naGTQf zVzyam6b6TGuYYhvLLPutdIf4X9VUjHDQ5rkbkp7h9KJ9ZvU+VcMNuIijdW1i+o7 ThsvV3jZCP1n0/UsPIYqPSjF3c16bAdH70Ts0T0Cl3bEYdWOrO4u4DJLW5XQY3Pm Ea0X3b2EBUnBJ79jqY1fNvTRwQ1vQhM= -----END CERTIFICATE-----Generated at Sun Jun 15 17:25:54 2025 by rpki-client