$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa File: 65ef4bc4-564a-3e87-a343-8f86a487b13b.roa (raw, json) Hash identifier: vTDojDeo0PvqAKwOHY/W87r5zUK7ZNsmSDWYwEVhiqA= Subject key identifier: 1D:E1:5F:D7:7F:6C:9A:8E:B2:87:22:06:BD:56:86:1C:D2:E2:40:AC Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F43285849EEB500C580B24CC3AA26A480 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 399122 IP address blocks: 64.130.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:00:c5:80:b2:4c:c3:aa:26:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=6b8619c0-109e-4e4d-894e-d268b46ed6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:a9:cf:4a:c6:32:8f:04:d8:b5:fe:44:17: ef:8e:cc:22:8f:f1:4d:5f:98:82:ac:db:aa:62:b7: 18:f9:20:33:67:3d:99:27:d0:a3:19:d3:8f:fa:89: dc:0e:ff:4c:1f:ee:44:9e:45:64:53:7d:cd:bd:4f: ac:f1:6f:80:7e:cf:9e:34:9b:82:78:48:a9:63:b2: e3:81:d1:db:5b:c5:7d:fd:1f:66:46:4b:4a:77:57: 48:6d:98:f1:67:99:90:86:21:48:99:53:20:97:10: bf:1e:a1:8d:c8:e9:5a:9d:16:5b:58:d0:b3:86:7b: 4c:ea:58:20:7c:90:6e:c7:5c:79:ad:02:09:6f:92: 83:5d:05:39:07:2b:46:fa:19:01:94:cf:2d:11:8d: c9:58:81:25:6e:a1:6f:aa:e9:6f:7a:8a:72:19:60: 6e:c8:61:f6:c5:cf:9d:e3:54:f5:bd:26:d6:55:a6: f3:ae:f9:85:2a:5a:53:4f:0e:cd:bb:ea:b5:e9:4a: c0:49:79:80:be:62:d6:52:16:e0:8d:9a:13:d8:a2: 88:0e:d1:6b:18:e8:23:c6:95:c1:1d:ad:b9:ca:0b: 4f:e0:87:08:d7:ce:89:cc:4b:fa:da:f2:d0:b7:19: 26:8b:c5:1e:ea:14:c3:e1:f8:5f:80:f1:98:aa:23: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E1:5F:D7:7F:6C:9A:8E:B2:87:22:06:BD:56:86:1C:D2:E2:40:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 64.130.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a4:cd:ba:c8:78:6f:37:4f:41:6b:97:c7:2a:4f:af:a9:04: 1f:54:fa:e2:78:0e:78:ca:cb:56:27:9b:26:f8:ea:1a:d7:66: 5a:ef:e2:57:aa:b9:6d:e8:45:e7:38:ba:bb:4d:41:47:94:d3: d3:1a:a8:56:7e:60:15:ad:9b:2a:4d:6c:65:02:d0:f1:3e:26: 15:29:b0:cd:39:84:0b:29:3c:e7:7e:11:b5:21:9c:88:fd:dd: ba:df:40:2f:5b:8f:1c:bc:60:8f:cf:ed:72:f4:07:f0:ec:dc: bd:8a:9d:ae:35:9e:18:7c:a6:dd:bf:26:fd:b4:4c:bf:4a:cb: b0:dd:9f:5f:db:4c:99:cc:be:fd:04:4f:2a:2c:0c:43:68:af: 31:53:4d:bb:d1:a0:f9:78:83:48:9d:ea:83:d8:31:cd:29:13: f0:5f:fc:3f:cf:63:08:f5:37:34:58:42:e6:9c:2a:bb:45:31: 40:ed:2b:19:94:91:d0:f6:28:8d:2e:ef:2a:a2:0b:ca:73:c9: b9:ff:34:55:0a:d6:e5:d1:49:ed:1d:8f:9f:a7:dd:f0:e4:d4: 51:b3:8f:4b:13:26:5e:ef:31:2a:90:b8:d0:8c:7e:11:1a:d4: 19:f2:d4:62:14:56:09:8f:b3:f6:7b:be:ce:ca:3a:d6:0c:9c: ea:41:2e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQDFgLJMw6ompIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NmI4NjE5YzAtMTA5ZS00ZTRkLTg5NGUtZDI2OGI0NmVkNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt56pz0rGMo8E2LX+RBfvjswij/FNX5iCrNuq YrcY+SAzZz2ZJ9CjGdOP+oncDv9MH+5EnkVkU33NvU+s8W+Afs+eNJuCeEipY7Lj gdHbW8V9/R9mRktKd1dIbZjxZ5mQhiFImVMglxC/HqGNyOlanRZbWNCzhntM6lgg fJBux1x5rQIJb5KDXQU5BytG+hkBlM8tEY3JWIElbqFvqulveopyGWBuyGH2xc+d 41T1vSbWVabzrvmFKlpTTw7Nu+q16UrASXmAvmLWUhbgjZoT2KKIDtFrGOgjxpXB Ha25ygtP4IcI186JzEv62vLQtxkmi8Ue6hTD4fhfgPGYqiPwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3hX9d/bJqOsociBr1WhhzS4kCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNjVlZjRiYzQtNTY0YS0z ZTg3LWEzNDMtOGY4NmE0ODdiMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2kzbrIeG83T0Frl8cqT6+pBB9U+uJ4DnjKy1Ynmyb46hrXZlrv4leq uW3oRec4urtNQUeU09MaqFZ+YBWtmypNbGUC0PE+JhUpsM05hAspPOd+EbUhnIj9 3brfQC9bjxy8YI/P7XL0B/Ds3L2Kna41nhh8pt2/Jv20TL9Ky7Ddn1/bTJnMvv0E TyosDENorzFTTbvRoPl4g0id6oPYMc0pE/Bf/D/PYwj1NzRYQuacKrtFMUDtKxmU kdD2KI0u7yqiC8pzybn/NFUK1uXRSe0dj5+n3fDk1FGzj0sTJl7vMSqQuNCMfhEa 1Bny1GIUVgmPs/Z7vs7KOtYMnOpBLvU= -----END CERTIFICATE-----Generated at Sun Jun 15 21:46:49 2025 by rpki-client