$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa File: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (raw, json) Hash identifier: 4aDZmfd6//n0QJnOG/J67XyRygCSONdGg6AjzX86EKc= Subject key identifier: 87:63:01:E8:FB:58:9E:FC:99:BA:D4:C0:AB:29:DC:1E:77:5C:D5:3A Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F43285849D8347B4072ECD56136FC3F00 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa Signing time: Tue 13 May 2025 23:34:10 +0000 ROA not before: Tue 13 May 2025 23:34:10 +0000 ROA not after: Mon 11 Aug 2025 23:34:10 +0000 asID: 23316 IP address blocks: 64.136.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:34:7b:40:72:ec:d5:61:36:fc:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: May 13 23:34:10 2025 GMT Not After : Aug 11 23:34:10 2025 GMT Subject: CN=fb583684-e4c0-496a-8a55-68a3ead9ebd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:16:c9:70:e0:8a:15:0a:ad:90:dd:ca:c6: 49:8e:a0:07:17:6a:c8:31:45:d8:94:17:4c:9c:0e: 31:bf:70:ec:50:3b:ff:8c:ad:ce:b2:e9:c8:04:04: f2:3f:50:01:da:ce:f6:b2:80:4f:0b:07:4e:ac:ae: 0a:9d:6e:7a:0f:5c:be:d3:c7:b8:d0:e0:9a:ce:f8: bd:e6:3b:95:cf:e6:b8:2f:dd:2d:06:f4:0a:33:65: bc:69:99:65:cb:61:96:55:34:13:75:d8:5d:2a:17: 08:68:f2:70:8b:85:56:52:99:84:c9:e9:44:23:8c: d1:6f:47:ef:54:50:9b:e5:17:43:d1:94:ba:f1:7b: 54:4c:ed:df:0e:46:1c:f3:22:6b:da:27:f7:29:35: f7:de:31:a6:80:49:40:2c:b8:cc:90:d5:56:e2:c6: b2:95:41:bf:5f:5b:0d:a7:5a:f8:95:f1:f6:0f:c3: 4a:f4:a9:54:64:4f:d2:15:b5:39:05:bb:df:53:01: ae:b8:bc:c7:e7:00:00:c2:14:f6:30:78:bb:79:98: 9a:38:b5:48:60:b1:bb:29:17:54:dd:32:1a:d8:0c: ca:06:59:f4:ce:50:22:61:0e:13:d3:dc:bb:7a:66: 80:b6:94:3f:24:cf:ca:1a:dd:f0:df:a7:7b:b3:f1: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:63:01:E8:FB:58:9E:FC:99:BA:D4:C0:AB:29:DC:1E:77:5C:D5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 64.136.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:86:a4:b5:10:7e:33:b0:25:7b:63:3d:b1:e2:61:0f:3c:41: b5:ab:aa:eb:5b:ec:c7:e7:8d:5a:22:f2:67:98:5e:06:f4:35: 7d:39:63:a1:4b:14:71:78:60:d5:32:00:af:30:67:0e:e7:4c: 32:f1:b4:bf:32:e2:5c:b7:05:a0:52:ea:89:df:86:06:07:68: 02:09:f2:fe:36:83:6b:f0:74:d1:3e:9b:0a:68:f8:f1:df:d2: 8b:ef:0c:48:a3:0a:ff:ab:1f:c2:54:c3:40:3c:be:cf:e7:9c: 6b:30:f9:f6:eb:a6:f1:fb:50:2d:41:af:99:df:2c:ba:7a:cd: 05:31:dc:34:56:78:8c:eb:fb:ef:13:d6:a9:e9:03:4c:9c:33: fb:d9:20:e2:fb:e3:ba:a1:62:a0:55:d8:2a:13:cd:1c:47:e3: e7:fb:f8:a8:4d:ee:14:03:2d:f0:d1:5d:b1:07:3c:b2:cc:20: 6b:29:fb:a0:bc:36:fc:6a:51:1a:1f:b1:d9:c2:13:c5:be:58: 7d:fa:e9:31:39:e0:23:58:3b:64:17:01:87:49:a9:52:29:65: 6d:d4:eb:07:85:89:15:ae:47:57:92:99:e3:23:16:9c:35:be: d7:67:93:e1:de:54:b5:2a:4b:bd:f8:59:75:aa:0b:17:4c:09: 48:59:4e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYNHtAcuzVYTb8PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI1MDUxMzIzMzQxMFoXDTI1MDgxMTIzMzQxMFowLzEtMCsGA1UEAxMk ZmI1ODM2ODQtZTRjMC00OTZhLThhNTUtNjhhM2VhZDllYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjokWyXDgihUKrZDdysZJjqAHF2rIMUXYlBdM nA4xv3DsUDv/jK3OsunIBATyP1AB2s72soBPCwdOrK4KnW56D1y+08e40OCazvi9 5juVz+a4L90tBvQKM2W8aZlly2GWVTQTddhdKhcIaPJwi4VWUpmEyelEI4zRb0fv VFCb5RdD0ZS68XtUTO3fDkYc8yJr2if3KTX33jGmgElALLjMkNVW4saylUG/X1sN p1r4lfH2D8NK9KlUZE/SFbU5BbvfUwGuuLzH5wAAwhT2MHi7eZiaOLVIYLG7KRdU 3TIa2AzKBln0zlAiYQ4T09y7emaAtpQ/JM/KGt3w36d7s/H+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdjAej7WJ78mbrUwKsp3B53XNU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMzVjNjhkYjEtYjI3Zi0z NDI4LWIzMTItYzAzZDg2ZTRmOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQIiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGGpLUQfjOwJXtjPbHiYQ88QbWrqutb7MfnjVoi8meYXgb0NX05Y6FL FHF4YNUyAK8wZw7nTDLxtL8y4ly3BaBS6onfhgYHaAIJ8v42g2vwdNE+mwpo+PHf 0ovvDEijCv+rH8JUw0A8vs/nnGsw+fbrpvH7UC1Br5nfLLp6zQUx3DRWeIzr++8T 1qnpA0ycM/vZIOL747qhYqBV2CoTzRxH4+f7+KhN7hQDLfDRXbEHPLLMIGsp+6C8 NvxqURofsdnCE8W+WH366TE54CNYO2QXAYdJqVIpZW3U6weFiRWuR1eSmeMjFpw1 vtdnk+HeVLUqS734WXWqCxdMCUhZTuE= -----END CERTIFICATE-----Generated at Sun Jun 15 14:29:05 2025 by rpki-client