$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json) Hash identifier: tm2Jy0PN4LXjz2o4gl3WB4fndkcIefUPVFP7gKwddFU= Subject key identifier: 36:FD:87:C9:F9:8D:F2:CA:D8:42:9B:D1:08:A2:4A:49:2B:6D:D8:43 Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Certificate serial: 010D0C9F43285849D165033EAAFC2C592289C0C0 Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18863 IP address blocks: 64.28.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:03:3e:aa:fc:2c:59:22:89:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=71323b05-d927-43a5-8b63-0fef34ad87d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:7f:62:85:1a:0f:43:89:67:72:53:c0:92: 17:f8:aa:4d:c5:c8:cf:09:b1:dd:0d:c3:0d:03:6d: db:78:ab:7f:cf:45:0d:e5:df:62:a2:65:54:22:54: 8b:48:90:a4:49:a2:af:20:98:04:97:51:40:fa:d5: 8d:2e:0a:8e:c5:a0:eb:e6:e5:bb:06:b8:26:77:f7: 2d:2c:84:b8:8c:b9:ba:62:a4:c6:37:fa:16:98:19: 7f:1d:1f:b6:17:61:ec:ae:16:d3:0e:7f:36:31:ec: c0:a3:83:b8:e8:07:12:a8:7b:98:c1:d7:03:41:3d: b1:c1:3a:da:d6:74:ba:10:eb:02:2d:a4:2b:8d:d5: 28:b1:84:0e:e6:28:66:b1:39:b2:08:12:28:6b:ee: ac:d5:a3:5c:62:aa:5c:30:82:46:70:10:c4:24:a8: 7a:c2:a6:f3:51:ac:5a:f6:3b:c9:72:f3:4b:ce:7f: a0:7a:35:9a:70:7a:02:21:d2:08:37:1d:60:d7:3a: 7b:ed:f4:8c:71:06:8e:90:c2:92:f5:b4:3f:c9:53: 2a:ec:39:63:38:91:f9:c1:81:ba:e5:2b:8d:5d:39: 7b:e6:e1:0a:bb:89:b5:ca:7d:56:50:ad:91:01:8b: 90:d4:2b:48:95:e6:18:52:af:f9:45:32:df:78:0c: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FD:87:C9:F9:8D:F2:CA:D8:42:9B:D1:08:A2:4A:49:2B:6D:D8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl X509v3 Authority Key Identifier: keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer sbgp-ipAddrBlock: critical IPv4: 64.28.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c3:0f:39:f9:2b:6c:4c:53:d6:ce:62:4b:7d:76:e7:f7:bc: 4c:26:e9:4b:fb:f0:b8:e3:fe:23:dd:0c:c0:33:6b:cd:bc:f9: 44:5d:09:6d:83:5c:05:c5:32:2b:c8:1c:6e:02:1f:63:dd:0b: 0f:bb:1f:ea:c7:d6:b7:85:a9:51:85:b4:d6:19:9d:a6:1f:1a: 9c:99:82:77:68:07:2c:c7:2e:ab:a5:59:53:9e:02:1f:13:f2: 1b:1f:58:ac:e4:9a:b9:81:03:46:94:64:13:f5:cf:e6:e1:9a: 30:76:1a:f2:7f:32:33:fb:9f:f2:ec:64:ec:4e:cc:e4:5f:37: 39:ef:8a:5e:da:e5:68:e8:08:15:25:15:3f:c3:2f:42:15:d1: 3a:2e:54:96:00:01:c9:0e:b3:b1:52:c2:99:2d:fb:08:55:2d: a6:4f:4b:6f:63:b4:5b:66:1e:f8:dc:f7:46:03:52:85:97:c0: b8:e9:4e:d5:2a:a2:d0:b2:b9:28:86:68:63:88:72:a1:57:73: 7b:cc:97:26:79:81:5f:70:2a:24:33:9f:fd:3a:45:49:a3:aa: ef:ea:2a:09:58:d5:99:cf:51:ee:c1:51:9d:29:a1:5e:b3:a9: e0:f9:bb:c1:70:c3:fb:87:45:39:04:14:41:d2:69:cf:17:fd: df:e4:77:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQM+qvwsWSKJwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2ODNhMTYtZTljNC00ODlhLWE1ZTktM2JiMWI0MDFm MTkwMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzEzMjNiMDUtZDkyNy00M2E1LThiNjMtMGZlZjM0YWQ4N2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwh/YoUaD0OJZ3JTwJIX+KpNxcjPCbHdDcMN A23beKt/z0UN5d9iomVUIlSLSJCkSaKvIJgEl1FA+tWNLgqOxaDr5uW7Brgmd/ct LIS4jLm6YqTGN/oWmBl/HR+2F2HsrhbTDn82MezAo4O46AcSqHuYwdcDQT2xwTra 1nS6EOsCLaQrjdUosYQO5ihmsTmyCBIoa+6s1aNcYqpcMIJGcBDEJKh6wqbzUaxa 9jvJcvNLzn+gejWacHoCIdIINx1g1zp77fSMcQaOkMKS9bQ/yVMq7DljOJH5wYG6 5SuNXTl75uEKu4m1yn1WUK2RAYuQ1CtIleYYUq/5RTLfeAy6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb9h8n5jfLK2EKb0QiiSkkrbdhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4 M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIxYjQwMWYxOTAvZDg1NjFjYzAtNDJkZS0z OThjLTgyYTYtMmNhZTQ4N2VjNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI2ODNhMTYtZTljNC00ODlhLWE1 ZTktM2JiMWI0MDFmMTkwLzFiNjgzYTE2LWU5YzQtNDg5YS1hNWU5LTNiYjFiNDAx ZjE5MC5jcmwwHwYDVR0jBBgwFoAUupsdKD3J+C8QFwwOpRR5BRY1TZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIx YjQwMWYxOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDDDzn5K2xMU9bOYkt9duf3vEwm6Uv78Ljj/iPdDMAza828+URdCW2D XAXFMivIHG4CH2PdCw+7H+rH1reFqVGFtNYZnaYfGpyZgndoByzHLqulWVOeAh8T 8hsfWKzkmrmBA0aUZBP1z+bhmjB2GvJ/MjP7n/LsZOxOzORfNznvil7a5WjoCBUl FT/DL0IV0TouVJYAAckOs7FSwpkt+whVLaZPS29jtFtmHvjc90YDUoWXwLjpTtUq otCyuSiGaGOIcqFXc3vMlyZ5gV9wKiQzn/06RUmjqu/qKglY1ZnPUe7BUZ0poV6z qeD5u8Fww/uHRTkEFEHSac8X/d/kd7U= -----END CERTIFICATE-----Generated at Sun Jun 15 16:02:58 2025 by rpki-client