$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/f03671be-0e2c-3c3a-8be5-263749fffc37.roa File: f03671be-0e2c-3c3a-8be5-263749fffc37.roa (raw, json) Hash identifier: Ej91Nz3v6u4CaX/cQkWCq7QC19yQ5lgp/2sQ8GHtnBY= Subject key identifier: 31:C2:C0:91:3F:E1:F1:8B:E2:F4:66:30:A2:D1:8B:C2:09:EE:45:E7 Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1 Certificate serial: 010D0C9F4328584A96369CED98A0C0324B0F4F80 Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/f03671be-0e2c-3c3a-8be5-263749fffc37.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 64.190.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:9c:ed:98:a0:c0:32:4b:0f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f0c18e1b-235a-45f7-bcf5-355531888101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:ec:22:51:85:91:f2:63:3f:36:87:9b:d1: 7c:51:2e:49:fd:62:1c:d8:aa:66:0f:e6:bb:0c:bf: 47:4e:82:3c:5b:bc:a8:5a:92:38:32:04:f6:30:42: cc:2c:5c:63:29:cb:22:2d:ec:44:88:72:f0:4f:6b: 4d:72:0b:52:d2:9d:98:60:89:da:8e:0b:3c:3d:9b: 43:c0:82:c7:8c:76:25:f6:94:76:ea:87:10:6f:ff: 09:bb:46:f8:39:89:48:9b:2f:65:ae:3a:b8:15:72: 49:4b:5d:b9:49:2a:e3:5b:5a:5e:30:01:a3:20:2a: 6e:b2:57:69:8f:66:1a:72:ba:00:8b:4c:2b:41:aa: 29:41:88:77:d7:cf:66:3e:fd:25:78:fc:ec:de:1a: 15:c0:19:9f:ab:f0:d3:58:bd:95:6b:98:ce:3e:ed: a7:da:2a:e4:5c:b0:aa:d8:fb:29:e3:3d:b2:bc:d9: bb:bc:c7:62:fc:42:89:11:83:85:f7:e8:16:c7:03: 82:30:b6:f0:41:08:e8:e3:36:e9:c2:9d:c7:47:b1: 9d:9e:37:12:24:58:96:87:53:29:82:30:58:5d:42: 2b:d0:03:02:28:ae:30:9b:a9:b8:73:ab:68:47:12: 77:83:10:ad:e2:a5:2a:87:de:ac:be:56:03:de:5e: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C2:C0:91:3F:E1:F1:8B:E2:F4:66:30:A2:D1:8B:C2:09:EE:45:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/f03671be-0e2c-3c3a-8be5-263749fffc37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl X509v3 Authority Key Identifier: keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer sbgp-ipAddrBlock: critical IPv4: 64.190.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:46:19:00:27:25:f9:21:2f:b0:e5:e4:cf:8b:b6:d4:cf:5e: 6f:fc:a6:27:68:7c:f1:c5:82:00:b8:cf:63:e1:c2:a7:b6:e1: d6:e8:c9:f1:d2:50:ad:9f:14:1f:b5:cc:e7:45:91:3a:f0:d8: f0:e1:af:fb:68:cd:04:cb:1c:68:9b:4f:c2:9f:c9:7c:b0:cf: 51:8f:de:77:91:53:f3:46:46:c4:6f:f8:02:85:ce:86:4c:e3: d9:ae:95:7b:a0:79:44:dc:95:2a:f4:f6:d1:57:95:61:2a:97: 5d:cc:1e:02:5d:d8:3e:77:0d:c7:a7:94:c4:21:aa:34:aa:18: e2:89:e9:df:c3:16:f9:19:41:f7:31:d7:eb:ce:ff:b7:ed:a8: 3f:0e:82:3e:15:7e:d5:ac:75:3e:5d:14:d9:91:45:c7:ee:4d: ae:87:1a:27:8b:ff:40:16:d4:80:a6:f6:7f:97:fb:e7:30:4c: 2f:c0:91:80:fe:fa:6b:42:b4:90:40:c8:bc:fd:54:31:9b:82: 75:cd:b6:5a:df:45:6b:6b:fa:56:fe:41:2c:0c:dd:ea:f8:b6: 88:17:03:a6:47:aa:c2:54:8a:57:09:32:f2:6a:5b:a2:f0:95: d0:02:00:0e:ab:02:bf:dc:db:cb:f7:a9:c7:1a:ac:27:b3:cc: 1f:fb:f4:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpztmKDAMksPT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3 NmUxMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjBjMThlMWItMjM1YS00NWY3LWJjZjUtMzU1NTMxODg4MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtLsIlGFkfJjPzaHm9F8US5J/WIc2KpmD+a7 DL9HToI8W7yoWpI4MgT2MELMLFxjKcsiLexEiHLwT2tNcgtS0p2YYInajgs8PZtD wILHjHYl9pR26ocQb/8Ju0b4OYlImy9lrjq4FXJJS125SSrjW1peMAGjICpusldp j2YacroAi0wrQaopQYh3189mPv0lePzs3hoVwBmfq/DTWL2Va5jOPu2n2irkXLCq 2Psp4z2yvNm7vMdi/EKJEYOF9+gWxwOCMLbwQQjo4zbpwp3HR7GdnjcSJFiWh1Mp gjBYXUIr0AMCKK4wm6m4c6toRxJ3gxCt4qUqh96svlYD3l6LCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHCwJE/4fGL4vRmMKLRi8IJ7kXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0 ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvZjAzNjcxYmUtMGUyYy0z YzNhLThiZTUtMjYzNzQ5ZmZmYzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0 MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0 YzgxZTc2ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNGGQAnJfkhL7Dl5M+LttTPXm/8pidofPHFggC4z2Phwqe24dboyfHS UK2fFB+1zOdFkTrw2PDhr/tozQTLHGibT8KfyXywz1GP3neRU/NGRsRv+AKFzoZM 49mulXugeUTclSr09tFXlWEql13MHgJd2D53DcenlMQhqjSqGOKJ6d/DFvkZQfcx 1+vO/7ftqD8Ogj4VftWsdT5dFNmRRcfuTa6HGieL/0AW1ICm9n+X++cwTC/AkYD+ +mtCtJBAyLz9VDGbgnXNtlrfRWtr+lb+QSwM3er4togXA6ZHqsJUilcJMvJqW6Lw ldACAA6rAr/c28v3qccarCezzB/79HQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:10 2025 by rpki-client