$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa File: 2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa (raw, json) Hash identifier: mN3BO1rztam/gipBERPRPA2duPCextASVDb8vVhkAgY= Subject key identifier: 2D:87:1C:F9:84:75:DC:8D:3E:12:B4:85:44:B9:90:8C:A2:6E:26:11 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584A093A9AD2CEF3BD3A16C3DC80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 399629 IP address blocks: 64.95.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9a:d2:ce:f3:bd:3a:16:c3:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=e974e27e-b532-4996-acca-cdc3b50d3f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:9d:bf:3d:13:06:09:8f:53:e8:98:5a:e8: 96:48:fe:45:95:11:0a:3b:2f:f4:ac:30:3c:1a:fb: f8:63:ea:3c:48:40:0e:76:47:52:10:9f:81:ac:95: 99:37:1d:ec:ba:87:e5:b4:37:e8:c0:f0:eb:b7:51: 2a:0f:48:f8:61:28:4e:f0:8c:cc:6f:bf:6d:91:c3: 1a:a4:e2:4e:d7:da:77:bb:29:5b:94:f7:82:25:14: 79:dd:19:0b:93:b8:c8:3f:89:2e:7b:56:c4:66:9c: 9f:5e:48:2e:c2:d3:a5:4f:05:b1:a7:92:93:0e:71: 55:12:22:93:03:f8:d8:5b:b6:ac:75:7f:dd:99:94: 4c:22:55:76:e8:0e:0c:fc:ad:fd:d1:8f:f7:47:90: 73:de:36:97:f8:a9:ee:a8:dc:ab:43:a4:82:8d:bf: 0c:d7:94:37:db:41:d2:23:fa:70:30:85:53:8d:77: be:0b:01:fa:31:13:2d:92:56:7e:aa:92:59:fc:ba: cf:ed:cc:03:bd:5f:96:6a:32:81:73:06:cd:4c:a3: 01:df:82:a8:4e:c3:1a:94:f4:ea:a1:bf:32:5e:b1: e4:2b:ef:66:68:90:06:19:c4:c3:03:92:5e:42:f0: 93:1c:c7:40:ef:4a:8a:6b:bf:44:4b:17:f3:a5:70: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:87:1C:F9:84:75:DC:8D:3E:12:B4:85:44:B9:90:8C:A2:6E:26:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.95.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:de:c3:da:14:35:9e:fc:c0:da:2e:01:3a:9d:60:cc:a7:f7: c2:58:01:ca:61:d3:8b:50:39:f7:69:75:62:e4:79:b7:3f:36: f7:00:77:70:0d:5b:c8:7f:c6:3c:50:a0:3e:c8:97:c1:31:29: 34:e1:e8:17:c8:2d:10:39:51:8b:f5:53:da:9b:a1:c5:83:b1: ba:2a:f7:22:ca:11:c2:51:31:5b:31:3b:b8:46:ef:fd:e9:7f: 9e:d7:ca:70:16:75:2d:03:d0:15:e1:73:a5:fc:49:8c:94:9d: ca:3a:9e:90:c2:91:e9:7b:fe:50:e3:91:3b:a3:19:bc:a3:ce: 10:5e:a3:7b:69:8e:81:a7:d0:25:71:1b:ba:3e:53:1c:b9:aa: fb:96:0b:76:f5:8d:33:af:27:30:1b:ac:6c:1e:59:4e:92:ab: e5:ed:38:93:13:01:8d:eb:2e:3d:03:f7:0a:6c:5b:91:30:a8: 68:10:a9:ea:fb:55:d4:76:43:96:9d:49:57:8f:42:ad:9c:24: 18:ee:11:46:db:eb:88:ca:9f:40:63:47:db:0b:02:64:6a:b6: b1:92:8c:06:f6:47:9d:1f:27:a5:16:7b:f7:fc:4b:b7:df:82: 76:55:9e:ad:cc:3e:48:e6:70:68:05:9a:53:40:b4:12:dd:a1: 33:ea:d1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOprSzvO9OhbD3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZTk3NGUyN2UtYjUzMi00OTk2LWFjY2EtY2RjM2I1MGQzZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/idvz0TBgmPU+iYWuiWSP5FlREKOy/0rDA8 Gvv4Y+o8SEAOdkdSEJ+BrJWZNx3suofltDfowPDrt1EqD0j4YShO8IzMb79tkcMa pOJO19p3uylblPeCJRR53RkLk7jIP4kue1bEZpyfXkguwtOlTwWxp5KTDnFVEiKT A/jYW7asdX/dmZRMIlV26A4M/K390Y/3R5Bz3jaX+KnuqNyrQ6SCjb8M15Q320HS I/pwMIVTjXe+CwH6MRMtklZ+qpJZ/LrP7cwDvV+WajKBcwbNTKMB34KoTsMalPTq ob8yXrHkK+9maJAGGcTDA5JeQvCTHMdA70qKa79ESxfzpXAkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2HHPmEddyNPhK0hUS5kIyibiYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMmY5NjdhOWMtY2ZlMi0z NGIzLThmNWQtMTM2M2IxMDI3NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7ew9oUNZ78wNouATqdYMyn98JYAcph04tQOfdpdWLkebc/NvcAd3AN W8h/xjxQoD7Il8ExKTTh6BfILRA5UYv1U9qbocWDsboq9yLKEcJRMVsxO7hG7/3p f57XynAWdS0D0BXhc6X8SYyUnco6npDCkel7/lDjkTujGbyjzhBeo3tpjoGn0CVx G7o+Uxy5qvuWC3b1jTOvJzAbrGweWU6Sq+XtOJMTAY3rLj0D9wpsW5EwqGgQqer7 VdR2Q5adSVePQq2cJBjuEUbb64jKn0BjR9sLAmRqtrGSjAb2R50fJ6UWe/f8S7ff gnZVnq3MPkjmcGgFmlNAtBLdoTPq0Sw= -----END CERTIFICATE-----Generated at Mon Jun 16 05:57:40 2025 by rpki-client