$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa File: d0283847-bee4-35b0-b680-fdfa9b481b80.roa (raw, json) Hash identifier: gOeuczrLTLZbWEZRap0zHqrsEMBZt5PWUffgUhSU5w4= Subject key identifier: 7B:D7:71:EE:CB:42:5F:7E:E2:E1:04:36:F7:38:12:26:FE:6B:9B:24 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584A30502C9B79F82A45F51B4E50 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 14090 IP address blocks: 64.255.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:2c:9b:79:f8:2a:45:f5:1b:4e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=523fdf90-6e4c-42aa-bbd9-e1940a6952e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:5c:d6:6e:31:28:a2:14:1e:3b:55:e9:51: d5:02:13:2b:eb:61:ae:4e:4e:0a:9d:a6:62:ec:89: 77:46:41:43:52:70:1a:98:9c:64:fb:38:07:60:43: a2:21:a7:c0:91:d5:f7:8e:83:c3:31:65:44:e3:0b: 17:59:fa:97:72:c0:61:3b:ec:2c:94:ae:bc:2b:27: 91:51:a3:27:b9:84:ee:87:33:1c:2f:34:ac:93:10: db:a1:86:b7:8f:74:5f:f6:a1:28:00:07:6c:1f:57: 33:c1:5e:79:de:6d:31:70:b3:08:1d:4b:71:2f:ac: 80:57:45:a8:fc:28:07:e1:08:46:d6:fd:d6:d8:49: 4f:2c:6e:8f:f8:de:2f:dd:8b:d6:72:c3:2f:e5:b7: f6:be:f5:e8:2a:26:d3:db:f1:45:0b:8d:4a:9c:15: 7c:05:18:43:8e:2f:84:5d:e3:d3:60:4f:ee:59:97: f2:9a:a5:87:21:d9:98:d3:a4:93:fe:43:41:6b:78: 71:80:af:52:15:3f:c1:5a:57:30:b3:73:88:44:1f: 24:af:8b:5f:b6:74:a2:ba:c7:1e:1b:bc:15:45:7e: 95:59:e5:62:04:30:b5:df:cb:b9:44:13:10:ae:1f: ce:8c:68:da:2a:25:3b:d4:a2:81:99:0e:d8:3d:38: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:71:EE:CB:42:5F:7E:E2:E1:04:36:F7:38:12:26:FE:6B:9B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6c:93:3a:fb:04:6a:74:4a:e1:2b:f7:5a:44:47:7f:59:fd: 35:d9:92:51:0f:06:b6:cf:57:e7:17:7e:ba:81:8b:68:89:7a: 2c:98:09:94:76:f4:7a:28:37:07:e6:5e:23:09:f9:7d:c6:78: db:ab:f1:b2:30:ea:5d:f9:74:84:7f:c5:b4:fd:be:4e:d6:4b: 7b:b2:c9:c3:94:2d:3d:b2:c1:10:c2:bc:73:c3:d9:71:b4:42: ac:f4:ca:77:30:f7:6e:35:e5:a2:35:3c:6f:15:71:4e:eb:d5: f9:51:17:b6:6a:71:ae:a7:ea:2e:7e:a4:3d:6f:f6:87:41:ce: ff:62:d8:80:57:52:7a:e8:37:73:8c:09:08:3d:0b:4e:28:a0: ac:91:ea:6f:13:a3:6e:c4:68:c7:55:ff:b5:a7:f0:32:7e:b0: 8a:57:d8:97:a5:e2:ed:9f:d8:55:f6:96:28:f0:03:d0:a4:86: f8:4b:a6:ec:a8:9d:6e:74:1e:47:e5:5c:d4:6e:15:4a:12:a0: eb:60:cf:8a:9d:91:21:a5:72:6a:3b:9e:3d:eb:a7:6f:0f:c3: 01:9b:6b:ba:49:d9:a5:98:60:03:85:b6:14:f1:5a:f9:be:f5: 86:20:33:e5:3f:56:5e:d0:96:c1:e6:d9:93:3a:ad:0e:63:49: ec:66:35:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUCybefgqRfUbTlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTIzZmRmOTAtNmU0Yy00MmFhLWJiZDktZTE5NDBhNjk1MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Vc1m4xKKIUHjtV6VHVAhMr62GuTk4KnaZi 7Il3RkFDUnAamJxk+zgHYEOiIafAkdX3joPDMWVE4wsXWfqXcsBhO+wslK68KyeR UaMnuYTuhzMcLzSskxDboYa3j3Rf9qEoAAdsH1czwV553m0xcLMIHUtxL6yAV0Wo /CgH4QhG1v3W2ElPLG6P+N4v3YvWcsMv5bf2vvXoKibT2/FFC41KnBV8BRhDji+E XePTYE/uWZfymqWHIdmY06ST/kNBa3hxgK9SFT/BWlcws3OIRB8kr4tftnSiusce G7wVRX6VWeViBDC138u5RBMQrh/OjGjaKiU71KKBmQ7YPTjQIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvXce7LQl9+4uEENvc4Eib+a5skMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDAyODM4NDctYmVlNC0z NWIwLWI2ODAtZmRmYTliNDgxYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQP+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxskzr7BGp0SuEr91pER39Z/TXZklEPBrbPV+cXfrqBi2iJeiyYCZR2 9HooNwfmXiMJ+X3GeNur8bIw6l35dIR/xbT9vk7WS3uyycOULT2ywRDCvHPD2XG0 Qqz0yncw92415aI1PG8VcU7r1flRF7Zqca6n6i5+pD1v9odBzv9i2IBXUnroN3OM CQg9C04ooKyR6m8To27EaMdV/7Wn8DJ+sIpX2Jel4u2f2FX2lijwA9CkhvhLpuyo nW50HkflXNRuFUoSoOtgz4qdkSGlcmo7nj3rp28PwwGba7pJ2aWYYAOFthTxWvm+ 9YYgM+U/Vl7QlsHm2ZM6rQ5jSexmNQ0= -----END CERTIFICATE-----Generated at Sun Jun 15 20:03:05 2025 by rpki-client