$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa File: add0a9ff-c124-381c-9d60-5f74979be3f7.roa (raw, json) Hash identifier: dbck0L1z8eW+P+L3ao12+anXia4GGKCDXfSc40hiNc8= Subject key identifier: EF:74:80:1C:35:27:9B:A1:1D:7E:B1:5E:00:73:1E:86:CA:94:90:01 Certificate issuer: /CN=afc2bf64-2cba-4362-8b12-56844da30e4e Certificate serial: 010D0C9F43285849CFFF85DF73D103ACCE6664C0 Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 14343 IP address blocks: 64.26.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:85:df:73:d1:03:ac:ce:66:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=744ee24d-b831-471e-9f09-bbb58f0a6a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:10:03:a2:47:92:cf:5a:0a:77:56:f0:85: 5a:76:58:fd:07:f9:f6:39:73:eb:96:4d:67:42:14: 6e:5a:01:da:39:b0:e8:b5:f3:1a:94:83:1b:79:aa: d4:8d:1a:94:a1:00:f8:eb:df:18:ef:bb:26:44:5e: 45:e1:f0:1e:c4:4e:2f:c2:86:82:59:c4:0b:4d:03: 0d:3b:70:77:f3:e8:ed:f7:26:7a:2d:54:8f:df:9e: 8f:a7:e1:b1:d8:83:69:26:df:a1:b3:d2:22:f7:c6: 5e:df:fb:ab:86:1a:f2:b0:4a:ff:d3:94:70:f7:af: 7c:87:0d:59:b5:a2:f1:4e:3e:3e:01:3d:d4:53:1b: fa:e9:8e:75:72:cc:a0:41:f7:e8:50:f0:e0:53:bf: 7e:93:4c:68:d6:06:bc:40:25:75:b6:4e:3c:41:f6: 36:fa:43:82:50:8e:2c:30:0c:28:dc:8d:59:36:98: 24:ca:d6:8d:c5:85:28:d2:49:14:1c:ba:96:8b:97: ab:10:ca:d5:b1:ab:f4:8f:5a:5a:7d:7b:91:17:cf: 97:1c:de:5c:91:18:7e:8e:5f:47:8f:66:71:fd:60: 9b:39:01:06:95:c5:01:40:a0:e4:88:1d:f2:0e:50: 2b:d9:3e:db:9f:aa:43:69:8c:1e:36:43:bd:35:7a: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:74:80:1C:35:27:9B:A1:1D:7E:B1:5E:00:73:1E:86:CA:94:90:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl X509v3 Authority Key Identifier: keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer sbgp-ipAddrBlock: critical IPv4: 64.26.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c2:e0:b7:9f:4d:6e:56:b5:31:ea:d1:75:f2:fc:02:20:11: 74:be:ee:48:91:29:9e:69:99:33:92:10:64:36:bd:1f:38:b9: 30:94:6f:45:9d:7d:31:87:b0:32:31:da:31:f9:37:22:0f:93: 9f:81:1b:1c:e9:7b:25:64:8e:1d:78:e7:96:f4:04:ee:8d:30: 89:db:d3:74:5d:b5:da:06:43:ea:0e:30:cc:5a:ed:04:01:a3: 24:a9:b4:e8:71:3f:d4:fe:6e:05:53:a6:37:50:c3:33:7e:1d: b7:70:d2:53:92:b4:97:17:77:21:31:8e:f5:ad:bc:e1:66:55: 07:11:8d:54:3c:86:60:a1:5e:97:db:11:bf:3b:a8:5f:70:5e: 3c:74:68:51:3e:e8:1c:d3:7e:bb:6e:bc:d4:2a:0d:f3:ab:22: a0:8d:97:b1:f3:39:5b:25:a6:2d:80:90:21:40:c3:81:84:82: d6:31:ff:c6:3b:fe:8f:38:63:06:bc:82:16:c0:a3:10:72:4b: 9a:0f:09:2f:df:7a:9a:3a:fa:12:f8:0b:62:35:3d:61:0a:88: 6c:d5:84:4e:de:cd:49:26:5c:0c:7c:65:7a:ef:a6:4b:14:ae: 92:e3:53:02:c2:8e:1f:a9:a2:1a:d7:31:33:36:f8:c0:d8:4e: 82:d9:f8:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/4Xfc9EDrM5mZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMw ZTRlMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk NzQ0ZWUyNGQtYjgzMS00NzFlLTlmMDktYmJiNThmMGE2YTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKEQA6JHks9aCndW8IVadlj9B/n2OXPrlk1n QhRuWgHaObDotfMalIMbearUjRqUoQD4698Y77smRF5F4fAexE4vwoaCWcQLTQMN O3B38+jt9yZ6LVSP356Pp+Gx2INpJt+hs9Ii98Ze3/urhhrysEr/05Rw9698hw1Z taLxTj4+AT3UUxv66Y51csygQffoUPDgU79+k0xo1ga8QCV1tk48QfY2+kOCUI4s MAwo3I1ZNpgkytaNxYUo0kkUHLqWi5erEMrVsav0j1pafXuRF8+XHN5ckRh+jl9H j2Zx/WCbOQEGlcUBQKDkiB3yDlAr2T7bn6pDaYweNkO9NXosLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO90gBw1J5uhHX6xXgBzHobKlJABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmMy YmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvYWRkMGE5ZmYtYzEyNC0z ODFjLTlkNjAtNWY3NDk3OWJlM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjMmJmNjQtMmNiYS00MzYyLThi MTItNTY4NDRkYTMwZTRlL2FmYzJiZjY0LTJjYmEtNDM2Mi04YjEyLTU2ODQ0ZGEz MGU0ZS5jcmwwHwYDVR0jBBgwFoAUQ11azSfNCa/JdmMsKHivc/qfX0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0 NGRhMzBlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfC4LefTW5WtTHq0XXy/AIgEXS+7kiRKZ5pmTOSEGQ2vR84uTCUb0Wd fTGHsDIx2jH5NyIPk5+BGxzpeyVkjh1455b0BO6NMInb03RdtdoGQ+oOMMxa7QQB oySptOhxP9T+bgVTpjdQwzN+Hbdw0lOStJcXdyExjvWtvOFmVQcRjVQ8hmChXpfb Eb87qF9wXjx0aFE+6BzTfrtuvNQqDfOrIqCNl7HzOVslpi2AkCFAw4GEgtYx/8Y7 /o84Ywa8ghbAoxByS5oPCS/fepo6+hL4C2I1PWEKiGzVhE7ezUkmXAx8ZXrvpksU rpLjUwLCjh+pohrXMTM2+MDYToLZ+G0= -----END CERTIFICATE-----Generated at Mon Jun 16 12:04:24 2025 by rpki-client