$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa File: a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa (raw, json) Hash identifier: z95Vw4dcQS/VZuP5EoT161lRyy+yqpbshqQ/k6uZSMY= Subject key identifier: 47:FC:34:22:5E:E7:B5:C8:0F:04:5D:6B:61:C8:6C:71:73:04:46:3F Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F43285849D594D8A6EAA2B46B86A6B400 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 20278 IP address blocks: 64.44.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d8:a6:ea:a2:b4:6b:86:a6:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=d29af186-d0dc-42dd-9c5b-510e7e6ab750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:41:64:76:c1:d1:f9:ef:0f:16:2d:87:c4: 62:d7:31:16:27:bf:00:86:d5:19:dc:cd:1b:9d:ef: 7a:03:b0:76:83:c3:e7:86:9b:72:df:01:36:3e:b7: 73:55:34:c7:83:b1:97:21:e5:38:5e:a8:60:62:27: e8:6a:d1:0a:72:a3:e2:ae:77:70:87:80:87:fc:34: 76:c7:48:9e:e5:6a:94:45:7d:57:61:dc:0a:51:68: ff:6d:64:7c:d6:29:28:ac:cc:56:82:af:c2:34:c1: bc:cf:fb:24:1f:ad:c5:5e:db:51:6e:f9:0a:3e:e5: aa:4c:ca:a1:a4:ee:19:49:09:bc:09:90:3b:13:db: 30:59:f8:88:ce:8a:fa:30:a1:6e:ff:10:86:9f:7e: 78:ab:d9:53:98:84:cc:c4:c7:8c:e6:d4:88:2c:2b: 9a:08:fc:e0:26:96:f4:17:6c:57:17:13:9c:2a:64: f1:31:b4:dc:73:4b:ef:bb:05:c6:3c:c2:8a:c0:45: 78:48:73:b1:1c:be:bb:85:ca:3a:f5:ca:9a:60:99: ec:7f:0c:fa:b0:dc:d6:9a:d2:69:d6:e2:c2:81:ee: 71:21:73:37:33:05:a8:81:6c:f3:8c:29:2c:7e:b6: 7d:94:65:f4:3c:03:6f:d8:48:50:91:1b:03:d7:05: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FC:34:22:5E:E7:B5:C8:0F:04:5D:6B:61:C8:6C:71:73:04:46:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:38:02:b3:74:af:59:78:b3:51:04:df:ea:62:61:60:fa:55: d4:30:11:18:f7:e1:ad:45:cf:d5:2e:d6:db:94:e5:b0:f9:85: 85:30:ee:dc:c8:6a:0e:43:8d:78:0c:72:f3:ad:4e:85:00:c9: 41:c8:05:09:e3:e4:f5:4c:43:85:be:c2:0c:2d:10:6d:ee:b5: cc:e0:c9:ba:6b:66:ac:b0:c4:15:3d:63:18:36:af:ab:9a:18: 31:cb:02:76:b0:0a:bb:bd:0c:9f:c9:45:6c:c2:99:e8:c1:bb: 27:8c:db:a5:f3:56:03:a7:07:25:50:8c:0b:b9:36:f9:8a:74: c0:02:08:32:33:ca:9a:26:c5:e2:a2:5e:51:bc:c3:26:9d:2b: 0c:99:fd:b2:62:88:ea:e4:f6:91:55:34:cb:ee:b2:96:b3:1d: 25:38:eb:ab:45:5a:c6:5a:fc:e2:2d:b2:7d:d9:ae:61:68:da: 97:21:1d:88:fb:de:40:63:65:95:06:4f:c6:e5:c6:26:7c:f6: 94:f6:4d:0b:37:b3:a6:40:2b:f7:06:c9:05:ed:e0:80:12:38: b6:8e:e6:61:20:64:fb:ce:f5:87:b1:66:33:56:c5:07:4a:46: 14:a1:80:32:c2:ec:bf:94:3a:2b:71:f4:95:d4:8d:f7:1e:10: 4e:f9:2d:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnVlNim6qK0a4amtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDI5YWYxODYtZDBkYy00MmRkLTljNWItNTEwZTdlNmFiNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA115BZHbB0fnvDxYth8Ri1zEWJ78AhtUZ3M0b ne96A7B2g8Pnhpty3wE2PrdzVTTHg7GXIeU4XqhgYifoatEKcqPirndwh4CH/DR2 x0ie5WqURX1XYdwKUWj/bWR81ikorMxWgq/CNMG8z/skH63FXttRbvkKPuWqTMqh pO4ZSQm8CZA7E9swWfiIzor6MKFu/xCGn354q9lTmITMxMeM5tSILCuaCPzgJpb0 F2xXFxOcKmTxMbTcc0vvuwXGPMKKwEV4SHOxHL67hco69cqaYJnsfwz6sNzWmtJp 1uLCge5xIXM3MwWogWzzjCksfrZ9lGX0PANv2EhQkRsD1wXoPQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEf8NCJe57XIDwRda2HIbHFzBEY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYTJmYTYzZGQtZjc1Yy0z MzAyLWE0MzMtMWI0NTc0YTFhMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQCwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQDgCs3SvWXizUQTf6mJhYPpV1DARGPfhrUXP1S7W25TlsPmFhTDu3Mhq DkONeAxy861OhQDJQcgFCePk9UxDhb7CDC0Qbe61zODJumtmrLDEFT1jGDavq5oY McsCdrAKu70Mn8lFbMKZ6MG7J4zbpfNWA6cHJVCMC7k2+Yp0wAIIMjPKmibF4qJe UbzDJp0rDJn9smKI6uT2kVU0y+6ylrMdJTjrq0Vaxlr84i2yfdmuYWjalyEdiPve QGNllQZPxuXGJnz2lPZNCzezpkAr9wbJBe3ggBI4to7mYSBk+871h7FmM1bFB0pG FKGAMsLsv5Q6K3H0ldSN9x4QTvktJg== -----END CERTIFICATE-----Generated at Sun Jun 15 06:24:54 2025 by rpki-client