$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa File: d651495b-6e08-3d81-a928-b517cd0cd4f0.roa (raw, json) Hash identifier: v/036Dk11sRnSDPP2aOIQcFj/z4BVMFsv5RMNMXuGD0= Subject key identifier: 6D:4E:F5:65:E7:59:66:AC:26:E5:54:B6:2C:B8:03:F2:7A:E5:39:2E Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F4328584AA42B78873B9A9F1F705739C0 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 27229 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:78:87:3b:9a:9f:1f:70:57:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f4cce93f-916c-4e7b-b537-777d659852f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:ff:a7:d1:61:c5:06:43:b8:97:4f:26:f3: 52:d6:5d:cd:7d:e4:07:99:ca:4a:79:ca:52:b7:c6: 5b:8a:9b:1a:31:ae:01:31:96:ae:ad:5e:72:b0:02: 3c:60:89:e9:9a:4e:95:85:bf:a6:b2:4e:ca:f3:5e: ca:0f:ee:94:81:0f:55:91:65:5b:4d:d8:81:aa:05: d0:c0:a2:41:3a:f5:1d:99:85:8b:06:e1:6a:3b:3e: 3d:81:d2:be:51:6a:c7:7d:64:04:f3:1e:95:1d:ea: ee:76:ca:d7:e4:a1:29:e1:28:fb:92:ee:8d:d5:e6: b9:bf:cc:02:b7:7b:1b:16:46:e6:92:a2:9d:8e:aa: f7:a9:04:33:8c:ac:81:19:ec:c8:61:76:b6:38:ad: 6c:05:eb:2a:00:16:73:f1:e3:71:ae:46:75:1b:87: 4f:4f:aa:cc:dd:62:ec:70:5e:7f:01:65:d0:50:cc: 74:a0:94:46:d7:11:db:b8:30:db:40:03:f4:9f:df: 10:93:31:fa:ac:65:a9:c9:59:25:3d:4f:f0:8d:78: 93:02:a2:5a:09:fc:2d:97:3d:f2:32:fa:65:ab:c8: 6b:a5:4e:4e:ee:8a:95:91:61:08:65:0f:20:16:a1: 48:d7:7d:17:ce:a1:af:68:41:de:9e:6e:07:b3:79: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4E:F5:65:E7:59:66:AC:26:E5:54:B6:2C:B8:03:F2:7A:E5:39:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c3:d2:06:04:93:d8:8b:88:86:33:00:6b:bd:86:5d:76:48: 99:4c:7f:9c:f6:2f:49:5f:e3:e5:3d:15:8a:0e:a6:36:15:b5: c0:f7:3c:fe:7b:4c:b1:6e:5e:5e:ea:5b:86:e5:35:ea:e4:a6: 03:ee:16:08:c5:75:8d:0a:83:a8:cd:71:ef:cd:e5:37:3e:1a: c0:2d:43:bf:ed:fd:16:aa:ff:43:39:64:90:45:40:64:b2:65: 30:c8:ba:20:fe:84:26:fb:a6:5b:1e:cf:3b:4e:71:06:43:ac: 18:30:fd:7d:b6:ce:c9:86:92:6d:c0:2f:a3:9e:62:20:40:d6: 37:a8:ed:a1:51:ef:87:70:79:0c:ba:e3:d4:d7:b4:c9:9a:3b: 52:9a:eb:ce:76:02:69:66:4b:59:41:c0:ab:a6:1e:af:11:d4: 00:bc:ca:3f:54:1c:fb:2b:37:79:13:b6:a7:17:db:57:76:4a: 39:d4:96:f3:83:6a:3d:7f:bf:96:dd:7e:66:4f:a8:ba:c4:34: 0e:44:9f:7e:4d:aa:62:25:b5:57:5c:26:83:db:ef:11:75:c1: 06:72:a7:a9:b0:ec:71:ee:9a:10:a6:2e:84:dd:67:8e:63:c7: 91:f8:07:36:11:c2:d8:74:fe:65:80:5c:e1:41:86:01:e2:8b: 9e:95:4c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3iHO5qfH3BXOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjRjY2U5M2YtOTE2Yy00ZTdiLWI1MzctNzc3ZDY1OTg1MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwv/p9FhxQZDuJdPJvNS1l3NfeQHmcpKecpS t8ZbipsaMa4BMZaurV5ysAI8YInpmk6Vhb+msk7K817KD+6UgQ9VkWVbTdiBqgXQ wKJBOvUdmYWLBuFqOz49gdK+UWrHfWQE8x6VHerudsrX5KEp4Sj7ku6N1ea5v8wC t3sbFkbmkqKdjqr3qQQzjKyBGezIYXa2OK1sBesqABZz8eNxrkZ1G4dPT6rM3WLs cF5/AWXQUMx0oJRG1xHbuDDbQAP0n98QkzH6rGWpyVklPU/wjXiTAqJaCfwtlz3y Mvplq8hrpU5O7oqVkWEIZQ8gFqFI130XzqGvaEHenm4Hs3nUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1O9WXnWWasJuVUtiy4A/J65TkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvZDY1MTQ5NWItNmUwOC0z ZDgxLWE5MjgtYjUxN2NkMGNkNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbD0gYEk9iLiIYzAGu9hl12SJlMf5z2L0lf4+U9FYoOpjYVtcD3PP57 TLFuXl7qW4blNerkpgPuFgjFdY0Kg6jNce/N5Tc+GsAtQ7/t/Raq/0M5ZJBFQGSy ZTDIuiD+hCb7plsezztOcQZDrBgw/X22zsmGkm3AL6OeYiBA1jeo7aFR74dweQy6 49TXtMmaO1Ka6852AmlmS1lBwKumHq8R1AC8yj9UHPsrN3kTtqcX21d2SjnUlvOD aj1/v5bdfmZPqLrENA5En35NqmIltVdcJoPb7xF1wQZyp6mw7HHumhCmLoTdZ45j x5H4BzYRwth0/mWAXOFBhgHii56VTGI= -----END CERTIFICATE-----Generated at Thu Aug 7 11:11:46 2025 by rpki-client