$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa File: ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa (raw, json) Hash identifier: I5KrOq3ngfCdKMBIVX6fzp9etEFqMzq+wM8AFEwriyw= Subject key identifier: 56:B4:83:F7:B9:FE:27:0C:55:03:6E:68:4E:EE:4B:DD:44:6A:95:C8 Certificate issuer: /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Certificate serial: 010D0C9F4328584A9E9616FF7B002D1B9B340840 Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 27425 IP address blocks: 64.32.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:16:ff:7b:00:2d:1b:9b:34:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=48bdfe60-87c2-425c-b929-4d99791f7e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:f9:65:0d:36:53:c6:f7:6e:45:25:d3:4b: 98:61:64:3e:b2:e8:5f:ed:d2:47:5a:8f:2e:06:29: 57:a6:65:00:90:28:34:c4:24:a6:ba:2e:3e:9c:50: b5:82:b1:32:30:fd:d9:f4:35:de:69:c8:bc:7b:66: 98:f0:e8:f0:01:3c:ef:84:e3:45:16:90:b9:07:13: 81:8a:16:12:9f:62:0c:5b:a7:89:ce:1d:81:49:ab: b8:88:fa:65:66:66:87:27:83:35:13:75:38:58:aa: 47:e1:3a:ac:c8:29:de:2a:55:9a:8b:9e:a5:b2:46: 72:83:4a:75:6b:00:60:44:83:7b:43:96:ba:5a:2d: a2:ce:bd:d9:60:21:70:7d:04:20:bf:ab:60:e7:e1: 38:a0:f3:bf:79:f3:39:3b:c7:29:64:86:54:fc:e8: a7:ec:0c:bb:a4:aa:0f:e0:f6:a8:06:84:75:ab:84: b1:21:3a:03:06:dc:62:4b:6d:e4:8d:85:96:85:44: 1b:b5:cd:a0:8e:67:5d:27:bf:fb:f0:8d:eb:91:7a: 2f:4e:ba:99:b6:37:72:cb:c9:e8:5e:68:34:89:21: 2b:86:e9:8a:ab:68:e0:44:7c:a4:a1:9a:bc:9f:9d: 17:ee:9c:90:51:78:d6:b8:3c:1b:d3:31:42:d6:63: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B4:83:F7:B9:FE:27:0C:55:03:6E:68:4E:EE:4B:DD:44:6A:95:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl X509v3 Authority Key Identifier: keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer sbgp-ipAddrBlock: critical IPv4: 64.32.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f5:39:1a:a3:c7:09:ec:80:ce:71:1a:dc:ed:b1:70:e1:97: 7c:c0:ed:5e:e2:12:f2:31:9d:da:41:33:b1:51:13:ab:c1:79: 2f:38:14:9a:65:aa:d2:d2:9e:8d:d6:17:1b:82:3b:9d:d2:ab: 5a:f2:db:a0:14:4c:78:7b:a9:57:80:8e:13:bb:e1:16:05:f7: 9d:19:60:00:db:0d:7a:40:4c:1c:3d:0e:df:ca:53:e0:13:f8: db:5b:5b:2d:57:c9:63:62:39:a5:35:d4:6f:63:e6:d0:d1:1e: 08:6b:11:1c:bd:3a:d5:13:9b:25:fd:6b:d8:ee:c8:0c:8f:fa: d8:21:be:21:65:a8:fb:ff:3e:92:c5:68:25:37:8b:78:24:16: 16:76:d2:95:f2:55:33:71:fa:2c:f9:0a:51:ce:1d:bb:0c:0e: 53:35:ab:3a:4d:1e:47:f3:3d:24:53:12:1d:cd:85:6d:3b:ed: 81:fe:77:ea:5b:ad:b9:5a:5c:26:6f:e5:47:9f:00:b3:b9:bc: 96:f2:d0:ce:7b:ae:b0:56:13:15:88:d8:48:1f:38:4d:ff:67: 14:2a:20:91:64:f3:fb:9c:67:b9:cc:25:f6:b0:de:2f:81:ff: 26:d0:31:95:85:85:bc:ff:63:09:c0:3a:db:25:d6:bb:36:97: 3d:6f:24:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhb/ewAtG5s0CEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUy YzBjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NDhiZGZlNjAtODdjMi00MjVjLWI5MjktNGQ5OTc5MWY3ZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHf5ZQ02U8b3bkUl00uYYWQ+suhf7dJHWo8u BilXpmUAkCg0xCSmui4+nFC1grEyMP3Z9DXeaci8e2aY8OjwATzvhONFFpC5BxOB ihYSn2IMW6eJzh2BSau4iPplZmaHJ4M1E3U4WKpH4TqsyCneKlWai56lskZyg0p1 awBgRIN7Q5a6Wi2izr3ZYCFwfQQgv6tg5+E4oPO/efM5O8cpZIZU/Oin7Ay7pKoP 4PaoBoR1q4SxIToDBtxiS23kjYWWhUQbtc2gjmddJ7/78I3rkXovTrqZtjdyy8no Xmg0iSErhumKq2jgRHykoZq8n50X7pyQUXjWuDwb0zFC1mMENQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFa0g/e5/icMVQNuaE7uS91EapXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5 ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvYmExZGRjMzUtNjIzOS0z YjJkLWEwMzctNWJkNTNlYmQxZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI3OWRkZjgtM2U2Ni00NWNmLTg5 NTUtNDUyZmJlNjUyYzBjLzQyNzlkZGY4LTNlNjYtNDVjZi04OTU1LTQ1MmZiZTY1 MmMwYy5jcmwwHwYDVR0jBBgwFoAUyqJkG6e3TH6KYINPDkK7eKRQ8IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJm YmU2NTJjMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQCAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX1ORqjxwnsgM5xGtztsXDhl3zA7V7iEvIxndpBM7FRE6vBeS84FJpl qtLSno3WFxuCO53Sq1ry26AUTHh7qVeAjhO74RYF950ZYADbDXpATBw9Dt/KU+AT +NtbWy1XyWNiOaU11G9j5tDRHghrERy9OtUTmyX9a9juyAyP+tghviFlqPv/PpLF aCU3i3gkFhZ20pXyVTNx+iz5ClHOHbsMDlM1qzpNHkfzPSRTEh3NhW077YH+d+pb rblaXCZv5UefALO5vJby0M57rrBWExWI2EgfOE3/ZxQqIJFk8/ucZ7nMJfaw3i+B /ybQMZWFhbz/YwnAOtsl1rs2lz1vJAE= -----END CERTIFICATE-----Generated at Fri Aug 8 00:06:39 2025 by rpki-client