$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8bed3f2-f98d-3b5c-8251-67f22531f102.roa File: d8bed3f2-f98d-3b5c-8251-67f22531f102.roa (raw, json) Hash identifier: lihntTWta9WZYxwyKf786rIiJChtMRZGAEdL3mKtjhw= Subject key identifier: 25:F4:F3:8E:A1:20:60:FF:86:7D:C2:D6:1E:3C:30:C7:E2:C2:9D:53 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A3887024C68C811F6514C9D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8bed3f2-f98d-3b5c-8251-67f22531f102.roa Signing time: Tue 17 Jun 2025 11:38:03 +0000 ROA not before: Tue 17 Jun 2025 11:38:03 +0000 ROA not after: Mon 15 Sep 2025 11:38:03 +0000 asID: 9304 IP address blocks: 64.6.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:87:02:4c:68:c8:11:f6:51:4c:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 17 11:38:03 2025 GMT Not After : Sep 15 11:38:03 2025 GMT Subject: CN=da83e101-65e1-4b21-905f-4929fef11f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a6:e6:ea:4f:49:09:84:09:3b:34:86:94:e1: 95:b4:02:69:21:de:ac:b1:ed:e5:1c:1f:d9:1b:fd: 0e:0c:3b:24:6a:e5:7b:89:4a:e0:43:41:4b:2b:d6: b5:ad:09:3a:ad:84:25:09:90:ad:de:27:3f:fa:6c: e9:1f:86:db:e3:d4:d7:20:8f:4b:46:e7:8a:6c:16: 4f:8b:cf:9e:24:4b:94:7e:56:4a:6b:af:c1:bb:ff: 42:34:ee:1b:58:8e:a1:9c:21:a0:64:f5:d4:dd:6f: 59:8e:6a:36:98:11:28:87:0d:86:a2:c8:ae:c3:29: 4a:f9:b4:70:cb:df:25:3d:ae:92:63:b0:48:25:43: 62:4e:c9:38:6e:76:ee:38:84:8e:4b:8f:50:1e:c7: 83:bd:93:41:7b:a6:d8:eb:4a:06:b3:66:c4:a2:d8: 22:00:17:48:05:aa:31:a7:d9:a6:1b:7e:c8:8c:4a: b9:fd:31:e8:85:5b:5d:37:c9:f3:ee:23:c1:8b:ce: ae:fb:55:a8:f4:7a:70:d9:36:1f:b9:d5:93:f6:1e: dc:0a:31:d5:a9:7d:ae:94:9b:b9:18:24:d1:e3:a0: a6:7d:8e:e0:b0:48:bb:88:7c:1f:e8:1b:df:b6:d7: ea:04:86:72:06:c9:fa:bd:c8:20:be:9f:dc:19:e8: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F4:F3:8E:A1:20:60:FF:86:7D:C2:D6:1E:3C:30:C7:E2:C2:9D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8bed3f2-f98d-3b5c-8251-67f22531f102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.6.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:21:5c:75:93:bb:db:a6:dc:23:d3:15:6a:4a:41:fc:d9:ad: 9e:a8:4b:0d:90:bd:e1:92:83:74:88:97:96:62:a1:ca:c0:ed: ff:9b:48:c0:42:f8:51:01:80:02:4e:b6:f5:c2:41:57:a3:9f: 39:a2:fe:f0:2d:a4:a7:45:69:2d:cd:8d:7f:be:95:4d:c6:98: 89:9b:d4:86:25:23:c2:a0:61:71:90:81:0d:62:4c:68:01:cc: b4:e2:09:78:a2:ed:2c:4e:7c:6c:c9:c2:c0:0c:cb:50:36:81: d2:72:f4:8d:46:23:e9:6d:34:55:73:2d:3f:00:77:7c:c9:f9: 5c:50:b7:5e:fb:7f:4e:52:f1:5d:c5:f6:26:93:4c:a6:9f:1e: 95:50:90:26:c2:bf:bf:a8:7a:10:df:4f:22:4c:4d:0d:42:69: 83:24:0a:6d:41:e1:12:87:8c:0f:25:22:3d:f6:95:c0:6d:75: 9c:3b:81:ce:42:dd:5f:97:c4:09:9e:84:5e:cd:af:ca:47:1c: fd:eb:32:55:3a:c2:72:3e:8e:78:6f:37:ed:a9:e5:bf:28:b2: a7:a3:bf:99:9e:c7:b5:86:58:a9:8b:16:0f:7e:b5:96:02:42: 13:09:f7:70:53:db:c0:d8:9e:46:f4:4f:8f:0f:a3:ec:24:10: e1:88:7a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4hwJMaMgR9lFMnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDYxNzExMzgwM1oXDTI1MDkxNTExMzgwM1owLzEtMCsGA1UEAxMk ZGE4M2UxMDEtNjVlMS00YjIxLTkwNWYtNDkyOWZlZjExZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKbm6k9JCYQJOzSGlOGVtAJpId6sse3lHB/Z G/0ODDskauV7iUrgQ0FLK9a1rQk6rYQlCZCt3ic/+mzpH4bb49TXII9LRueKbBZP i8+eJEuUflZKa6/Bu/9CNO4bWI6hnCGgZPXU3W9Zjmo2mBEohw2GosiuwylK+bRw y98lPa6SY7BIJUNiTsk4bnbuOISOS49QHseDvZNBe6bY60oGs2bEotgiABdIBaox p9mmG37IjEq5/THohVtdN8nz7iPBi86u+1Wo9Hpw2TYfudWT9h7cCjHVqX2ulJu5 GCTR46CmfY7gsEi7iHwf6BvfttfqBIZyBsn6vcggvp/cGegt1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX0846hIGD/hn3C1h48MMfiwp1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDhiZWQzZjItZjk4ZC0z YjVjLTgyNTEtNjdmMjI1MzFmMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8hXHWTu9um3CPTFWpKQfzZrZ6oSw2QveGSg3SIl5ZiocrA7f+bSMBC +FEBgAJOtvXCQVejnzmi/vAtpKdFaS3NjX++lU3GmImb1IYlI8KgYXGQgQ1iTGgB zLTiCXii7SxOfGzJwsAMy1A2gdJy9I1GI+ltNFVzLT8Ad3zJ+VxQt177f05S8V3F 9iaTTKafHpVQkCbCv7+oehDfTyJMTQ1CaYMkCm1B4RKHjA8lIj32lcBtdZw7gc5C 3V+XxAmehF7Nr8pHHP3rMlU6wnI+jnhvN+2p5b8osqejv5mex7WGWKmLFg9+tZYC QhMJ93BT28DYnkb0T48Po+wkEOGIetE= -----END CERTIFICATE-----Generated at Fri Jun 20 07:15:01 2025 by rpki-client