$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1144b78d-6ce0-3ff8-803b-3d5b5ad29be0.roa File: 1144b78d-6ce0-3ff8-803b-3d5b5ad29be0.roa (raw, json) Hash identifier: wIxTV9vu3kwYWCud/VWtQAreV3dAR95pJdApwrEvPzQ= Subject key identifier: BF:B8:F8:58:9A:A9:A3:1A:EC:0E:21:66:D2:5C:19:DE:01:F2:CF:EC Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584AA85BB79116F5AB227469AD14 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1144b78d-6ce0-3ff8-803b-3d5b5ad29be0.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 203963 IP address blocks: 64.224.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b7:91:16:f5:ab:22:74:69:ad:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=238a28e3-3d40-4a20-ac37-ddf9b38d536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:ea:54:fc:6e:c5:e0:80:f9:3e:9f:06:0a: f9:fe:46:d4:36:27:49:43:4f:cf:ad:19:b6:ae:fb: b7:05:df:81:6d:ad:04:73:6d:07:a5:3d:7d:e7:ad: ff:b3:38:39:30:79:5d:03:93:76:ae:6f:5d:4e:39: 85:bb:12:b4:ba:e0:df:3a:d3:9d:db:42:b8:ed:a5: 4e:43:64:20:09:62:77:5b:dd:c7:3c:eb:ec:bf:3e: 6d:27:70:e5:3f:15:01:c0:f7:7e:cf:45:9b:6e:c3: eb:72:68:f2:3b:d7:bb:1e:11:ae:37:0c:06:58:97: 39:12:70:41:df:a4:ae:a1:e7:3e:d0:71:1d:38:86: 57:de:29:54:8d:23:b7:d7:e3:ab:6c:9e:dc:22:15: 1d:5d:38:60:42:14:48:bb:5d:27:04:3a:ff:f5:b3: b3:1c:3b:03:00:10:32:b5:dc:8b:87:15:30:12:dd: 2f:02:18:d6:eb:54:7e:b3:c4:92:15:ec:d9:de:df: df:a6:d7:b5:03:35:b0:6f:68:72:f0:e7:00:ca:51: 92:bc:50:d2:9b:01:7c:db:c9:5f:0a:39:17:5b:cb: ba:7e:3d:0d:c1:b2:bf:ed:12:2a:b7:13:5f:ae:89: 7b:54:06:76:50:3c:74:a0:5e:be:d2:d4:09:10:9d: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:F8:58:9A:A9:A3:1A:EC:0E:21:66:D2:5C:19:DE:01:F2:CF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1144b78d-6ce0-3ff8-803b-3d5b5ad29be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ba:88:8f:aa:38:c4:1c:e8:b8:2f:e6:ad:38:c2:68:07:af: 82:40:47:3b:39:85:1d:2d:c2:8b:3a:8a:19:e4:08:a2:17:1b: 03:8f:db:5b:8a:a0:d1:ff:2e:15:a0:e9:a6:4e:f0:8d:68:bb: fe:6f:ab:18:df:0a:53:90:53:be:b0:e5:56:06:64:51:57:48: 0e:57:79:40:02:8f:83:7d:54:da:46:64:4f:fb:32:93:31:ac: 84:a2:e0:1a:85:ac:cb:91:f0:51:81:1c:7b:8c:0a:cc:60:64: d8:16:54:80:25:c6:2c:11:d8:2d:78:24:90:d6:b5:cd:c6:36: 3f:c3:63:d9:d9:52:72:12:1c:b0:d9:2e:3d:45:a1:7e:18:72: 2f:5f:01:df:32:ed:00:e4:c8:50:5c:8d:df:d0:47:92:e6:7e: d7:50:f9:93:7e:a6:ff:0e:2c:77:44:06:9f:ab:9c:9c:43:bc: 44:bb:db:39:0c:92:11:be:fe:6c:7d:b3:fc:fc:5a:be:55:ea: 67:c5:e7:1d:ec:10:21:0e:3d:78:d1:27:6d:a5:36:5b:af:85: 8a:a0:b0:53:8c:0b:e4:62:d4:ab:a7:e4:db:47:50:50:51:ad: 5c:37:a6:c2:fc:35:15:d4:f2:ba:7b:da:06:a2:42:c8:43:c2: 2e:65:f0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7eRFvWrInRprRQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MjM4YTI4ZTMtM2Q0MC00YTIwLWFjMzctZGRmOWIzOGQ1MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8fqVPxuxeCA+T6fBgr5/kbUNidJQ0/PrRm2 rvu3Bd+Bba0Ec20HpT19563/szg5MHldA5N2rm9dTjmFuxK0uuDfOtOd20K47aVO Q2QgCWJ3W93HPOvsvz5tJ3DlPxUBwPd+z0WbbsPrcmjyO9e7HhGuNwwGWJc5EnBB 36Suoec+0HEdOIZX3ilUjSO31+OrbJ7cIhUdXThgQhRIu10nBDr/9bOzHDsDABAy tdyLhxUwEt0vAhjW61R+s8SSFezZ3t/fpte1AzWwb2hy8OcAylGSvFDSmwF828lf CjkXW8u6fj0NwbK/7RIqtxNfrol7VAZ2UDx0oF6+0tQJEJ1mNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+4+FiaqaMa7A4hZtJcGd4B8s/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMTE0NGI3OGQtNmNlMC0z ZmY4LTgwM2ItM2Q1YjVhZDI5YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK6iI+qOMQc6Lgv5q04wmgHr4JARzs5hR0twos6ihnkCKIXGwOP21uK oNH/LhWg6aZO8I1ou/5vqxjfClOQU76w5VYGZFFXSA5XeUACj4N9VNpGZE/7MpMx rISi4BqFrMuR8FGBHHuMCsxgZNgWVIAlxiwR2C14JJDWtc3GNj/DY9nZUnISHLDZ Lj1FoX4Yci9fAd8y7QDkyFBcjd/QR5LmftdQ+ZN+pv8OLHdEBp+rnJxDvES72zkM khG+/mx9s/z8Wr5V6mfF5x3sECEOPXjRJ22lNluvhYqgsFOMC+Ri1Kun5NtHUFBR rVw3psL8NRXU8rp72gaiQshDwi5l8A8= -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:46 2025 by rpki-client