$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/356d4676-5529-3295-81bd-2ba35c7ca0f7.roa File: 356d4676-5529-3295-81bd-2ba35c7ca0f7.roa (raw, json) Hash identifier: 9uzsFzuf2KdZuAOM1vxl0Ok1ZaNbfPQbtk0PHkPp1+0= Subject key identifier: 2F:23:7C:C3:E5:3C:86:F7:F1:38:9E:7E:82:75:9C:0D:1B:CC:BD:07 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849F44A57B85C63B18728EFD980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/356d4676-5529-3295-81bd-2ba35c7ca0f7.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 53735 IP address blocks: 64.114.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:57:b8:5c:63:b1:87:28:ef:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=cd1f0e07-8e8b-401e-a53a-fa9e7cce6c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:02:da:45:d8:e2:c9:1f:cc:53:3e:a5:b6: 2a:58:ce:51:06:82:07:bc:f2:97:94:2e:04:95:7e: 24:d2:44:67:8f:56:2f:2f:78:46:58:39:3e:3c:24: c1:5a:97:25:6c:71:a8:39:87:66:9e:33:38:3d:fe: 4c:bb:7f:80:14:b6:39:5a:c8:c0:64:62:86:e8:f5: e2:ed:37:3f:11:e0:ea:3f:b9:f0:91:5c:25:b8:7a: 24:97:ae:e8:8e:95:36:3a:90:16:9e:11:1f:b1:f8: ab:e4:03:fd:84:b5:8f:cc:c0:7b:06:0a:20:90:d2: c0:e6:d3:97:f2:ad:bb:5f:35:e8:76:c0:7a:45:1e: ac:bc:01:a6:29:8f:a3:e8:a8:c4:95:45:d6:45:09: 9f:2c:af:49:c2:ff:87:c7:d4:e2:2d:91:c0:1d:b6: c9:2a:18:26:24:39:27:dd:8f:b8:56:08:9c:f7:a9: 60:47:56:20:9a:b2:f4:63:b4:e6:45:8c:20:98:e6: c8:6d:29:7e:0c:48:30:61:38:ef:d8:89:dd:ad:a9: 8c:e2:6c:88:1b:c6:9d:72:39:82:00:77:fd:cf:24: 22:6c:77:5b:5c:9b:6c:c1:f6:7b:cd:eb:2b:f8:0b: 27:d7:b3:3c:4b:5d:75:2f:25:bb:1b:d5:ed:3d:ff: ce:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:23:7C:C3:E5:3C:86:F7:F1:38:9E:7E:82:75:9C:0D:1B:CC:BD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/356d4676-5529-3295-81bd-2ba35c7ca0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c7:3b:fc:00:90:e3:05:b9:ad:77:20:eb:8b:ab:f1:7d:b7: 67:c3:27:6d:46:93:18:a5:fe:e4:82:36:8b:80:75:8e:e3:55: 88:2c:6e:70:6e:46:94:75:c6:16:0d:1d:29:5b:02:fd:38:b2: 41:00:50:08:8b:7d:c4:67:bc:8d:c7:aa:73:d7:9a:0f:1d:36: 37:ae:5a:fe:15:d9:0e:0a:98:9a:4e:62:cd:a1:1e:7e:0e:0d: 56:68:96:7a:6e:6f:3a:87:5a:b1:b3:e5:a4:bb:db:f4:21:31: 59:84:c4:b1:83:e6:8e:3c:21:54:c3:c2:18:45:a9:1a:c9:94: 1a:f9:85:2e:d9:92:91:77:21:07:48:ed:f8:93:d1:5a:44:1f: c3:29:19:5f:10:b0:f2:78:f4:22:48:71:44:e4:a3:69:5c:fc: d3:e1:25:a9:1f:a5:9b:2c:76:a4:f2:41:9e:a9:70:d2:2a:4b: 7c:18:48:ea:47:80:9f:67:8f:c2:6b:71:85:f1:a4:3a:8c:e2: d6:0e:f8:80:5b:53:ef:5a:c8:a5:3a:c2:68:42:d7:19:43:19: 41:d2:f3:67:f1:f4:f4:96:2c:a3:5b:03:92:1b:08:ab:1f:50: ff:af:27:3d:d6:a2:55:f3:1e:8c:24:7b:e0:95:10:23:d2:d5: 35:43:50:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Sle4XGOxhyjv2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk Y2QxZjBlMDctOGU4Yi00MDFlLWE1M2EtZmE5ZTdjY2U2Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qYC2kXY4skfzFM+pbYqWM5RBoIHvPKXlC4E lX4k0kRnj1YvL3hGWDk+PCTBWpclbHGoOYdmnjM4Pf5Mu3+AFLY5WsjAZGKG6PXi 7Tc/EeDqP7nwkVwluHokl67ojpU2OpAWnhEfsfir5AP9hLWPzMB7BgogkNLA5tOX 8q27XzXodsB6RR6svAGmKY+j6KjElUXWRQmfLK9Jwv+Hx9TiLZHAHbbJKhgmJDkn 3Y+4Vgic96lgR1YgmrL0Y7TmRYwgmObIbSl+DEgwYTjv2IndramM4myIG8adcjmC AHf9zyQibHdbXJtswfZ7zesr+Asn17M8S111LyW7G9XtPf/OhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8jfMPlPIb38TiefoJ1nA0bzL0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzU2ZDQ2NzYtNTUyOS0z Mjk1LTgxYmQtMmJhMzVjN2NhMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPHO/wAkOMFua13IOuLq/F9t2fDJ21Gkxil/uSCNouAdY7jVYgsbnBu RpR1xhYNHSlbAv04skEAUAiLfcRnvI3HqnPXmg8dNjeuWv4V2Q4KmJpOYs2hHn4O DVZolnpubzqHWrGz5aS72/QhMVmExLGD5o48IVTDwhhFqRrJlBr5hS7ZkpF3IQdI 7fiT0VpEH8MpGV8QsPJ49CJIcUTko2lc/NPhJakfpZssdqTyQZ6pcNIqS3wYSOpH gJ9nj8JrcYXxpDqM4tYO+IBbU+9ayKU6wmhC1xlDGUHS82fx9PSWLKNbA5IbCKsf UP+vJz3WolXzHowke+CVECPS1TVDUIM= -----END CERTIFICATE-----Generated at Tue Jun 17 01:22:40 2025 by rpki-client