$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/420f9063-94a0-3913-b1c4-aedd1acf4d42.roa File: 420f9063-94a0-3913-b1c4-aedd1acf4d42.roa (raw, json) Hash identifier: RXNTYKsCMHJa7dFGHirWiS6t4RpjE4aoUgoZX6cNYA0= Subject key identifier: 93:02:23:57:9C:3E:92:12:9E:44:34:DA:0C:1A:DF:31:75:E7:A4:34 Certificate issuer: /CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003 Certificate serial: 010D0C9F4328584A17CF28437A008413B8FDE080 Authority key identifier: C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/420f9063-94a0-3913-b1c4-aedd1acf4d42.roa Signing time: Thu 05 Jun 2025 18:21:45 +0000 ROA not before: Thu 05 Jun 2025 18:21:45 +0000 ROA not after: Wed 03 Sep 2025 18:21:45 +0000 asID: 0 IP address blocks: 64.254.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:cf:28:43:7a:00:84:13:b8:fd:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b7e2d8-e99c-42a5-a05e-c0e57237f003 Validity Not Before: Jun 5 18:21:45 2025 GMT Not After : Sep 3 18:21:45 2025 GMT Subject: CN=4bacdee8-7780-47ac-99fe-6223f45f96fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:70:3c:d9:9c:8c:62:a1:b8:dd:31:b1:16: f3:a3:59:bb:2c:f2:78:39:b3:2e:05:34:94:c6:8c: 3d:fd:14:10:ec:a4:70:55:94:0f:2e:7c:a9:ad:c5: 27:71:7e:94:6c:db:8c:46:65:d3:40:a9:c1:ed:61: b7:65:75:8e:04:f1:3b:87:8b:b6:68:73:25:6f:f4: cd:f1:51:f2:78:ec:03:4d:ba:f4:b9:bc:1d:cd:2d: c6:1a:ae:82:c4:64:34:29:22:9b:61:03:4c:dc:88: 80:d4:dd:ff:b8:a8:c3:d2:18:c5:ac:2b:5d:5b:26: 9d:6d:3a:34:b3:13:05:31:14:48:02:c9:c2:c7:8c: 52:05:16:b0:57:67:00:00:24:c2:4a:fc:1a:f0:a4: b2:69:74:22:20:3d:7a:8b:d5:08:d5:3b:61:db:e8: 9d:fa:49:bf:17:98:dc:75:5c:eb:65:e8:0e:e0:ed: 01:e0:17:3f:ed:00:51:93:27:3f:db:b8:e2:d1:f9: bb:1e:6c:23:4c:24:e9:61:aa:19:25:8f:9d:d1:41: a9:9c:47:16:24:69:c9:7e:68:ce:36:32:d0:72:fa: 7b:52:a0:76:50:3a:0a:f5:8f:52:13:29:c7:1d:17: 77:fa:c6:d3:55:81:0f:bd:3e:88:35:a8:40:b6:a6: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:23:57:9C:3E:92:12:9E:44:34:DA:0C:1A:DF:31:75:E7:A4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/420f9063-94a0-3913-b1c4-aedd1acf4d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003/09b7e2d8-e99c-42a5-a05e-c0e57237f003.crl X509v3 Authority Key Identifier: keyid:C6:38:45:53:FD:8E:2D:1E:41:66:FB:11:B4:7A:E1:A6:40:59:4B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/09b7e2d8-e99c-42a5-a05e-c0e57237f003.cer sbgp-ipAddrBlock: critical IPv4: 64.254.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:08:4d:77:78:28:fa:30:bc:34:09:df:16:55:1b:3f:31:c4: e0:a3:8f:c5:b8:84:f6:06:04:9b:7d:82:81:d2:21:8e:f8:27: 1c:5f:5a:9c:dc:de:e2:98:3a:e7:08:6c:30:bd:76:af:f4:5d: 01:ce:5c:a8:d9:e7:79:59:cb:28:6d:03:ba:be:87:ea:b6:1e: 75:13:76:d8:31:6b:77:f2:ea:bb:77:8c:5d:28:d5:c0:a7:e5: 9d:bd:a9:ef:cc:9f:64:ec:32:6e:b7:3d:14:fc:09:78:df:7a: a6:2c:a6:b1:06:5c:9e:10:97:08:f1:19:1e:ea:32:28:22:c8: c0:b2:15:6a:12:42:11:ea:ae:9a:fc:51:78:10:b7:4d:e0:8a: ed:89:44:3d:ee:50:f4:63:e0:a6:4c:f9:26:cd:66:36:e9:d5: bc:84:d0:58:2a:a2:2c:30:39:cb:44:47:ef:71:91:1f:5b:41: 3d:a2:5f:fb:79:b9:bc:ab:36:fa:87:5a:8f:86:39:4c:5b:e0: fe:da:c3:c6:45:7a:e2:29:a3:43:76:db:17:ef:49:f3:e0:56: 5e:8f:3b:34:d9:8c:62:90:96:d4:1c:7c:0d:ee:21:74:6c:37: 56:cf:46:f0:27:36:9f:a7:9c:89:f6:56:dd:4d:54:0f:73:e7: 2a:2f:98:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXzyhDegCEE7j94IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDliN2UyZDgtZTk5Yy00MmE1LWEwNWUtYzBlNTcyMzdm MDAzMB4XDTI1MDYwNTE4MjE0NVoXDTI1MDkwMzE4MjE0NVowLzEtMCsGA1UEAxMk NGJhY2RlZTgtNzc4MC00N2FjLTk5ZmUtNjIyM2Y0NWY5NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uxwPNmcjGKhuN0xsRbzo1m7LPJ4ObMuBTSU xow9/RQQ7KRwVZQPLnyprcUncX6UbNuMRmXTQKnB7WG3ZXWOBPE7h4u2aHMlb/TN 8VHyeOwDTbr0ubwdzS3GGq6CxGQ0KSKbYQNM3IiA1N3/uKjD0hjFrCtdWyadbTo0 sxMFMRRIAsnCx4xSBRawV2cAACTCSvwa8KSyaXQiID16i9UI1Tth2+id+km/F5jc dVzrZegO4O0B4Bc/7QBRkyc/27ji0fm7HmwjTCTpYaoZJY+d0UGpnEcWJGnJfmjO NjLQcvp7UqB2UDoK9Y9SEynHHRd3+sbTVYEPvT6INahAtqb1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMCI1ecPpISnkQ02gwa3zF156Q0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wOWI3 ZTJkOC1lOTljLTQyYTUtYTA1ZS1jMGU1NzIzN2YwMDMvNDIwZjkwNjMtOTRhMC0z OTEzLWIxYzQtYWVkZDFhY2Y0ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDliN2UyZDgtZTk5Yy00MmE1LWEw NWUtYzBlNTcyMzdmMDAzLzA5YjdlMmQ4LWU5OWMtNDJhNS1hMDVlLWMwZTU3MjM3 ZjAwMy5jcmwwHwYDVR0jBBgwFoAUxjhFU/2OLR5BZvsRtHrhpkBZS94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wOWI3ZTJkOC1lOTljLTQyYTUtYTA1ZS1jMGU1 NzIzN2YwMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQITXd4KPowvDQJ3xZVGz8xxOCjj8W4hPYGBJt9goHSIY74JxxfWpzc 3uKYOucIbDC9dq/0XQHOXKjZ53lZyyhtA7q+h+q2HnUTdtgxa3fy6rt3jF0o1cCn 5Z29qe/Mn2TsMm63PRT8CXjfeqYsprEGXJ4QlwjxGR7qMigiyMCyFWoSQhHqrpr8 UXgQt03giu2JRD3uUPRj4KZM+SbNZjbp1byE0FgqoiwwOctER+9xkR9bQT2iX/t5 ubyrNvqHWo+GOUxb4P7aw8ZFeuIpo0N22xfvSfPgVl6POzTZjGKQltQcfA3uIXRs N1bPRvAnNp+nnIn2Vt1NVA9z5yovmKU= -----END CERTIFICATE-----Generated at Sun Jun 15 11:37:28 2025 by rpki-client