$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa File: b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa (raw, json) Hash identifier: u8ngoSsmIUV+cLWPU2AP4xjjUnVSELAC+TxdJ9XzOdg= Subject key identifier: 14:F9:A9:DC:10:79:E5:61:DC:70:0D:7D:4A:E5:84:FC:66:25:8E:AB Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A2EEABAC63037515CC27A3E80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 21947 IP address blocks: 64.25.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:ba:c6:30:37:51:5c:c2:7a:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=97f71aa2-6357-4340-9eaa-a595a45af16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:a9:18:c8:81:65:96:b6:80:71:36:d4:1d: c6:14:4e:7d:c6:75:77:17:ae:70:d5:f9:1c:4b:51: 3b:1a:72:ad:01:69:e7:cd:05:b1:66:8d:67:76:69: 26:0d:b9:64:a7:bf:50:ab:c3:6e:36:78:a0:fd:11: 15:95:ed:e2:43:d4:1c:90:3d:ca:ef:c7:7e:d9:a4: b6:65:3c:4a:db:a5:f9:6f:2c:61:1b:1f:0e:3e:95: 51:41:dd:3f:85:7f:4e:46:8a:87:06:17:74:ad:4f: b8:b1:68:a1:63:40:29:95:ce:9c:74:e9:67:af:d9: 61:68:42:2d:1b:5e:ee:f1:9f:a9:ba:ec:62:a8:71: 86:dc:f5:9d:a4:25:09:ca:56:43:08:f3:45:b8:1c: bf:1c:73:4b:fb:27:4d:a1:dc:3c:66:94:58:89:88: 5b:01:3c:20:9c:56:ea:6a:bb:43:67:b1:39:3e:75: 1e:e2:88:87:f4:4d:21:64:f9:42:dd:4c:11:a6:6a: b0:23:74:92:4b:f2:17:9f:f9:f6:11:8b:ec:fa:db: 1f:be:23:0f:bb:be:d0:28:f7:24:db:4c:51:18:f7: 3b:80:86:00:00:9f:20:e0:7c:82:cb:eb:04:c8:a3: a4:c5:af:6f:89:b0:b3:6d:01:53:e1:ca:1c:4d:d6: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F9:A9:DC:10:79:E5:61:DC:70:0D:7D:4A:E5:84:FC:66:25:8E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 64.25.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1c:3b:8d:c4:8b:82:dc:22:2b:4e:07:fd:ac:ed:b3:45:62: bd:56:88:ef:be:44:24:a7:65:88:70:56:0d:9c:7b:96:80:8d: 3f:38:45:19:f2:b7:7d:58:2b:c1:ea:3c:a6:90:07:94:e4:35: 55:64:32:29:29:60:6a:b9:a5:f1:00:28:77:b5:9f:95:14:d3: ca:3c:4d:b1:2c:93:b6:0a:65:40:36:30:19:c5:96:04:74:85: e8:8a:89:63:50:2b:66:36:33:9c:5e:5c:87:2a:1f:2e:ec:31: 6d:3c:b6:2f:d7:bd:70:dc:6e:5c:a1:af:23:88:9e:74:12:52: c6:32:ce:8b:56:74:4b:4d:13:ae:8d:d4:a6:1b:c1:28:ca:26: ab:58:93:cc:56:17:cd:54:da:66:4a:a6:a3:58:63:77:aa:b0: d3:cd:95:31:5d:ed:07:57:d5:de:36:a4:c5:44:47:2f:51:1f: 86:b7:b4:2e:11:f0:8a:cf:93:fc:ee:ae:8e:4e:3f:11:ef:9a: d1:68:86:db:b7:b4:85:39:50:0a:da:90:26:6a:76:d2:36:a6: eb:73:4b:83:6c:94:cf:9e:42:b8:de:3d:cf:e4:77:0f:12:44: b0:a3:1e:70:8d:54:95:85:a5:7c:ce:a2:25:e1:6a:c2:da:6c: 22:ac:b7:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6rrGMDdRXMJ6PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk OTdmNzFhYTItNjM1Ny00MzQwLTllYWEtYTU5NWE0NWFmMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW2pGMiBZZa2gHE21B3GFE59xnV3F65w1fkc S1E7GnKtAWnnzQWxZo1ndmkmDblkp79Qq8NuNnig/REVle3iQ9QckD3K78d+2aS2 ZTxK26X5byxhGx8OPpVRQd0/hX9ORoqHBhd0rU+4sWihY0Aplc6cdOlnr9lhaEIt G17u8Z+puuxiqHGG3PWdpCUJylZDCPNFuBy/HHNL+ydNodw8ZpRYiYhbATwgnFbq artDZ7E5PnUe4oiH9E0hZPlC3UwRpmqwI3SSS/IXn/n2EYvs+tsfviMPu77QKPck 20xRGPc7gIYAAJ8g4HyCy+sEyKOkxa9vibCzbQFT4cocTdYQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT5qdwQeeVh3HANfUrlhPxmJY6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjUwYTNkMWItY2E1MC0z ZWExLWJkYjktMzc2OGE4NmFhODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMcO43Ei4LcIitOB/2s7bNFYr1WiO++RCSnZYhwVg2ce5aAjT84RRny t31YK8HqPKaQB5TkNVVkMikpYGq5pfEAKHe1n5UU08o8TbEsk7YKZUA2MBnFlgR0 heiKiWNQK2Y2M5xeXIcqHy7sMW08ti/XvXDcblyhryOInnQSUsYyzotWdEtNE66N 1KYbwSjKJqtYk8xWF81U2mZKpqNYY3eqsNPNlTFd7QdX1d42pMVERy9RH4a3tC4R 8IrPk/zuro5OPxHvmtFohtu3tIU5UArakCZqdtI2putzS4NslM+eQrjePc/kdw8S RLCjHnCNVJWFpXzOoiXhasLabCKst7I= -----END CERTIFICATE-----Generated at Mon Jun 16 05:43:31 2025 by rpki-client