$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dec3fff7-79a1-33c7-a073-9554e9b91685.roa File: dec3fff7-79a1-33c7-a073-9554e9b91685.roa (raw, json) Hash identifier: iXOLWe++nC70v+Zgn8hckLb4y76njb9o8735RdL3q/I= Subject key identifier: 5A:1C:63:16:25:D2:47:29:3D:19:63:4B:03:17:F2:F8:4B:0F:81:F4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584A7FE08DE366784B90EC6ECBC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dec3fff7-79a1-33c7-a073-9554e9b91685.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 200040 IP address blocks: 64.4.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:8d:e3:66:78:4b:90:ec:6e:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=3dd31266-4a50-4406-b074-6af09e9cb180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:c8:54:7b:57:ab:29:68:a7:d7:e7:f2:33: a5:48:08:1f:b2:0a:5c:ff:79:d0:73:e0:19:c7:06: 4d:8d:2a:39:e0:5a:a1:0c:33:67:59:b6:31:b5:8d: 5b:ed:5d:e9:8b:34:11:92:94:c3:de:1a:e1:e3:e5: 84:b2:90:3b:d8:89:06:ad:8a:b1:f2:ee:e8:cc:d0: 97:20:4f:61:a5:02:d6:3b:bd:31:06:0a:77:72:6d: fd:0d:2d:a2:41:9e:1c:7b:b0:1f:c6:fc:d4:6e:a3: 37:10:eb:b6:67:4f:df:be:55:f4:e5:e5:5f:7c:c8: b0:e8:71:63:9d:b7:1b:ae:2a:bb:57:2e:7e:f9:2d: ce:e1:8d:3e:53:81:e7:9b:92:92:f1:78:da:c4:1c: b6:9e:6f:e7:86:9c:d1:fc:c0:3b:7c:ee:a0:74:3b: c4:5d:11:7f:c7:a6:6d:d3:9b:b8:74:5f:1e:a5:ce: 99:78:33:ee:ec:30:31:37:fd:05:a7:fe:d1:ba:3c: cd:27:f9:8d:e4:c8:49:7d:07:d3:4d:7f:c7:14:84: 49:96:8a:cd:81:2d:b0:53:89:bb:28:c6:24:b4:15: 81:9e:11:70:c8:9b:3c:ac:4a:84:a0:df:d5:c9:2f: b5:6c:92:33:d6:41:60:41:aa:8d:e5:aa:f4:2f:a3: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1C:63:16:25:D2:47:29:3D:19:63:4B:03:17:F2:F8:4B:0F:81:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dec3fff7-79a1-33c7-a073-9554e9b91685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 64.4.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:b4:16:f1:6e:29:ee:d1:2c:ab:d6:14:f6:b1:c8:36:73:e9: a4:90:3d:d8:8c:69:7b:b4:c7:d5:55:bc:1e:8c:9d:58:52:56: 2c:cf:f7:b1:d5:84:7b:73:c1:0f:f9:78:2b:c6:db:68:34:41: 4f:5e:91:30:34:89:36:c7:c5:9e:a6:53:f3:a9:ff:d2:1a:af: 65:d6:7e:fc:a6:14:31:5e:cc:19:b5:da:f5:69:77:b5:ed:a0: bb:39:42:7f:17:d4:fd:6c:f9:69:3a:5f:a6:38:35:94:ec:38: de:56:a2:4b:96:56:fa:70:11:b9:f9:eb:e1:d6:43:76:51:e5: 9b:52:2f:23:e8:6c:83:1c:cb:73:38:1d:a9:42:35:eb:49:9f: bc:85:f7:a1:07:73:08:42:72:6f:74:fd:d6:9e:c7:82:de:16: 63:51:af:0e:e9:27:61:81:f2:62:4d:3f:df:41:d9:2a:e6:90: 1e:ba:4e:c0:94:b7:aa:12:e1:ba:a0:fa:22:11:6c:c3:ba:7d: e0:fe:7d:40:ca:95:e8:c6:e0:ec:09:6a:69:80:68:17:9b:c1: dc:16:49:d6:3d:2c:46:4c:51:9c:a1:78:89:da:be:c5:7d:26: d6:5b:74:95:a3:bc:63:d5:59:25:2f:b4:09:49:85:d4:24:b5: a7:18:b8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4I3jZnhLkOxuy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk M2RkMzEyNjYtNGE1MC00NDA2LWIwNzQtNmFmMDllOWNiMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoXIVHtXqylop9fn8jOlSAgfsgpc/3nQc+AZ xwZNjSo54FqhDDNnWbYxtY1b7V3pizQRkpTD3hrh4+WEspA72IkGrYqx8u7ozNCX IE9hpQLWO70xBgp3cm39DS2iQZ4ce7AfxvzUbqM3EOu2Z0/fvlX05eVffMiw6HFj nbcbriq7Vy5++S3O4Y0+U4Hnm5KS8XjaxBy2nm/nhpzR/MA7fO6gdDvEXRF/x6Zt 05u4dF8epc6ZeDPu7DAxN/0Fp/7RujzNJ/mN5MhJfQfTTX/HFIRJlorNgS2wU4m7 KMYktBWBnhFwyJs8rEqEoN/VyS+1bJIz1kFgQaqN5ar0L6Mn5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFocYxYl0kcpPRljSwMX8vhLD4H0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGVjM2ZmZjctNzlhMS0z M2M3LWEwNzMtOTU1NGU5YjkxNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMW0FvFuKe7RLKvWFPaxyDZz6aSQPdiMaXu0x9VVvB6MnVhSVizP97HV hHtzwQ/5eCvG22g0QU9ekTA0iTbHxZ6mU/Op/9Iar2XWfvymFDFezBm12vVpd7Xt oLs5Qn8X1P1s+Wk6X6Y4NZTsON5WokuWVvpwEbn56+HWQ3ZR5ZtSLyPobIMcy3M4 HalCNetJn7yF96EHcwhCcm90/daex4LeFmNRrw7pJ2GB8mJNP99B2SrmkB66TsCU t6oS4bqg+iIRbMO6feD+fUDKlejG4OwJammAaBebwdwWSdY9LEZMUZyheInavsV9 JtZbdJWjvGPVWSUvtAlJhdQktacYuKk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:05 2025 by rpki-client