$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/b437d303-7082-31f7-a5ce-55998958a146.roa File: b437d303-7082-31f7-a5ce-55998958a146.roa (raw, json) Hash identifier: kFW3uPUubJ9FkTOhRskLuPUG7ZnGOanfwemZqKZX2CA= Subject key identifier: 35:C0:DF:DC:7A:39:86:33:E5:1D:31:74:C3:87:2E:DC:B0:7D:C1:4B Certificate issuer: /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Certificate serial: 010D0C9F43285849EAC89D563906E4E09E4F1980 Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/b437d303-7082-31f7-a5ce-55998958a146.roa Signing time: Tue 20 May 2025 15:17:12 +0000 ROA not before: Tue 20 May 2025 15:17:12 +0000 ROA not after: Mon 18 Aug 2025 15:17:12 +0000 asID: 6079 IP address blocks: 64.49.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:c8:9d:56:39:06:e4:e0:9e:4f:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Validity Not Before: May 20 15:17:12 2025 GMT Not After : Aug 18 15:17:12 2025 GMT Subject: CN=6170ce86-6633-4c39-ae6a-21cfd6fff76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:0c:99:4d:e5:e2:56:34:88:ff:ed:26:ba: 72:f8:6c:38:0e:c7:b9:92:79:c7:8d:33:46:e9:34: be:94:ad:38:25:08:ff:3d:e2:eb:d5:27:56:ea:17: 20:48:0f:7b:d2:3c:c7:76:d4:87:22:d7:5b:8d:c8: 4f:05:01:ad:d7:68:a5:30:c0:07:c3:02:ce:fa:04: 53:75:26:22:95:a9:d5:78:52:7c:7c:8e:16:b4:33: a0:35:4d:20:27:92:bb:59:66:72:aa:02:ff:34:9d: 36:d6:9d:81:d7:f1:91:76:1a:46:00:8b:0d:2c:49: e6:5f:b0:8c:28:30:cc:56:3c:04:09:68:48:31:c0: 92:19:92:a6:84:ff:e4:f0:9e:c7:f4:c4:04:89:69: 6b:28:59:aa:b0:5f:0d:c0:f1:23:bc:7c:4b:98:a7: 52:56:96:60:89:5d:5d:ac:04:c3:87:01:a4:16:a2: 1e:74:c5:42:19:d3:53:1c:59:3b:62:ef:3e:3b:4d: f5:16:1d:f9:c5:0f:c1:26:94:7b:44:8a:05:4c:1d: cc:96:af:2a:f4:95:f6:2f:70:63:61:76:6c:be:b8: e8:83:9b:0a:3e:ce:3a:19:d3:42:31:c3:9e:6e:a9: d4:a4:9b:8d:c6:fc:cf:9c:37:6d:c9:6e:40:67:4a: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:DF:DC:7A:39:86:33:E5:1D:31:74:C3:87:2E:DC:B0:7D:C1:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/b437d303-7082-31f7-a5ce-55998958a146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl X509v3 Authority Key Identifier: keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer sbgp-ipAddrBlock: critical IPv4: 64.49.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:24:b4:cd:6d:c2:4b:46:3a:14:8f:7d:03:37:a2:58:2d:e1: 51:96:bc:8d:d5:af:de:5b:4d:99:b2:63:23:d3:5f:1b:69:6c: f7:9a:7c:3e:44:6d:a4:39:45:00:e2:f3:bc:2d:fc:61:f4:1f: 1f:de:a3:03:21:c1:2e:e2:59:12:7e:ae:04:28:40:cd:11:10: 23:4d:c2:63:f0:bf:31:21:2e:e1:9f:e1:08:1a:f0:9d:a1:1b: 92:d3:f4:a7:5c:38:92:86:ea:fd:8a:c4:e4:a1:df:d1:53:88: e6:03:c0:6f:6a:26:68:a3:e6:86:67:4f:b3:25:97:bb:2b:6a: ba:7d:71:a5:61:ea:b8:bb:6a:aa:f1:4a:67:00:d3:3d:28:27: 38:90:21:87:d8:96:25:d7:39:7b:7d:3f:5d:54:25:14:82:37: 74:15:3f:a3:47:f2:51:20:ad:59:18:3c:9d:6e:dc:bb:c3:3d: 6c:0d:f2:40:9e:1d:b7:fb:d7:b8:92:d0:7b:fc:9a:93:64:f6: a5:47:6d:b4:70:d4:a4:34:75:64:eb:f4:47:06:8c:5a:aa:5e: 24:17:d1:1d:31:00:62:c0:1e:92:73:44:f8:39:c4:2e:36:e6: 6b:1f:c5:63:98:41:c3:14:47:93:de:62:ca:a0:d6:27:86:3c: 9a:72:57:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqyJ1WOQbk4J5PGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEzOGIwODktNGJiMS00YzY1LTgzN2ItODUzYTlhMzM5 OGUxMB4XDTI1MDUyMDE1MTcxMloXDTI1MDgxODE1MTcxMlowLzEtMCsGA1UEAxMk NjE3MGNlODYtNjYzMy00YzM5LWFlNmEtMjFjZmQ2ZmZmNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsIMmU3l4lY0iP/tJrpy+Gw4Dse5knnHjTNG 6TS+lK04JQj/PeLr1SdW6hcgSA970jzHdtSHItdbjchPBQGt12ilMMAHwwLO+gRT dSYilanVeFJ8fI4WtDOgNU0gJ5K7WWZyqgL/NJ021p2B1/GRdhpGAIsNLEnmX7CM KDDMVjwECWhIMcCSGZKmhP/k8J7H9MQEiWlrKFmqsF8NwPEjvHxLmKdSVpZgiV1d rATDhwGkFqIedMVCGdNTHFk7Yu8+O031Fh35xQ/BJpR7RIoFTB3Mlq8q9JX2L3Bj YXZsvrjog5sKPs46GdNCMcOebqnUpJuNxvzPnDdtyW5AZ0ph3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXA39x6OYYz5R0xdMOHLtywfcFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YTM4 YjA4OS00YmIxLTRjNjUtODM3Yi04NTNhOWEzMzk4ZTEvYjQzN2QzMDMtNzA4Mi0z MWY3LWE1Y2UtNTU5OTg5NThhMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmEzOGIwODktNGJiMS00YzY1LTgz N2ItODUzYTlhMzM5OGUxLzZhMzhiMDg5LTRiYjEtNGM2NS04MzdiLTg1M2E5YTMz OThlMS5jcmwwHwYDVR0jBBgwFoAUYYui20IL3pzgGVglHqTH5yAF/bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82YTM4YjA4OS00YmIxLTRjNjUtODM3Yi04NTNh OWEzMzk4ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYktM1twktGOhSPfQM3olgt4VGWvI3Vr95bTZmyYyPTXxtpbPeafD5E baQ5RQDi87wt/GH0Hx/eowMhwS7iWRJ+rgQoQM0RECNNwmPwvzEhLuGf4Qga8J2h G5LT9KdcOJKG6v2KxOSh39FTiOYDwG9qJmij5oZnT7Mll7srarp9caVh6ri7aqrx SmcA0z0oJziQIYfYliXXOXt9P11UJRSCN3QVP6NH8lEgrVkYPJ1u3LvDPWwN8kCe Hbf717iS0Hv8mpNk9qVHbbRw1KQ0dWTr9EcGjFqqXiQX0R0xAGLAHpJzRPg5xC42 5msfxWOYQcMUR5PeYsqg1ieGPJpyV/I= -----END CERTIFICATE-----Generated at Sun Jun 15 20:45:02 2025 by rpki-client