$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/71eec608-20a0-317a-8556-1a49b70badbb.roa File: 71eec608-20a0-317a-8556-1a49b70badbb.roa (raw, json) Hash identifier: KIZTsALX7pHhqpWbYih+l0QluuV4RM+ZTDDTlmxxpnY= Subject key identifier: 0B:F6:12:0A:C7:30:44:BC:92:23:98:E3:04:89:50:CB:62:33:09:AD Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584A9E961FA3C82B09A5976A4180 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/71eec608-20a0-317a-8556-1a49b70badbb.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 64.239.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1f:a3:c8:2b:09:a5:97:6a:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=10041cea-040f-42ae-909d-e127da792935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:73:ee:f0:33:2b:6c:06:d0:33:84:eb:e9: 66:b9:cc:57:9c:45:54:5a:c3:3d:1a:8a:72:89:a7: b2:76:40:c2:29:fd:4a:c6:8c:94:ac:d8:45:d5:40: 64:b8:0a:b9:9d:b4:d1:13:34:20:cc:d3:6b:09:05: 82:f8:70:60:08:84:3b:8f:0d:5b:ec:4a:8b:60:03: 96:79:91:dc:ac:79:c9:a8:91:9f:b6:97:88:77:21: 32:ad:f1:7f:33:43:6d:61:a6:22:cf:98:8c:2f:cd: 97:50:5d:d3:57:b2:49:bb:28:62:6a:c6:68:6e:2a: 68:94:99:a9:fb:92:fe:1c:b4:d4:39:a0:d2:f1:97: cf:39:04:14:83:80:e5:15:22:74:0b:ca:38:15:2f: e6:a5:58:16:c5:7d:90:07:1f:08:c9:bb:d1:7b:be: a8:71:82:58:16:2a:80:31:1b:2c:7c:36:7b:de:16: e9:28:8c:99:30:ff:85:31:30:3b:3d:6d:cc:4c:d9: 6f:72:9e:b9:93:a5:42:fe:c1:2e:8d:e0:88:59:36: 28:54:fd:5e:0a:4e:73:d8:58:b0:4e:ba:18:6f:e9: 55:80:5c:4b:bc:34:f7:e6:be:e3:c0:14:32:03:d1: 13:17:52:6b:d2:5c:3e:46:b0:7e:5e:24:a1:f5:49: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F6:12:0A:C7:30:44:BC:92:23:98:E3:04:89:50:CB:62:33:09:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/71eec608-20a0-317a-8556-1a49b70badbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.239.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:5e:89:99:7f:dc:28:e1:e4:4c:d2:f4:82:e1:a1:f6:24:a4: 6e:cf:aa:19:92:69:11:73:cd:f1:0e:d4:34:f8:1f:65:a7:e5: c8:57:2f:b2:99:f8:5d:a9:73:0f:07:bc:55:11:51:ff:24:ef: e3:12:4f:58:11:3b:93:03:86:7c:30:f5:fb:23:f8:1f:28:f6: ae:f3:43:e6:13:8a:29:a9:fd:49:1f:55:df:b9:4d:ef:ea:ce: 3c:77:f6:d3:10:ba:b4:b8:6c:1e:f4:fe:52:91:9d:c4:cc:f4: a7:ff:fe:7d:33:d2:8c:6f:2f:32:82:62:07:80:d7:b5:26:c9: f4:d4:f3:b8:a3:78:90:f5:15:9b:8f:c4:ff:5d:85:e2:10:98: d9:06:7b:0f:31:00:5c:59:b9:98:e2:0c:49:0b:64:df:57:6c: 32:ac:e9:a4:57:89:96:ab:90:44:cb:b1:a9:2f:ce:0b:00:c9: be:45:bd:0b:bb:d4:19:33:de:0d:2e:42:8d:96:fa:97:08:5c: 2e:d9:4a:87:99:85:8f:b5:c7:28:03:40:1f:e3:ff:32:15:84: 70:75:53:3f:ab:da:68:38:c9:98:7b:80:4c:51:37:fa:0e:03: 0c:0a:f5:31:5e:c4:0d:5e:96:48:a4:a5:c1:34:5a:cb:fa:e0: 11:28:c1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelh+jyCsJpZdqQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTAwNDFjZWEtMDQwZi00MmFlLTkwOWQtZTEyN2RhNzkyOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucVz7vAzK2wG0DOE6+lmucxXnEVUWsM9Gopy iaeydkDCKf1KxoyUrNhF1UBkuAq5nbTREzQgzNNrCQWC+HBgCIQ7jw1b7EqLYAOW eZHcrHnJqJGftpeIdyEyrfF/M0NtYaYiz5iML82XUF3TV7JJuyhiasZobipolJmp +5L+HLTUOaDS8ZfPOQQUg4DlFSJ0C8o4FS/mpVgWxX2QBx8IybvRe76ocYJYFiqA MRssfDZ73hbpKIyZMP+FMTA7PW3MTNlvcp65k6VC/sEujeCIWTYoVP1eCk5z2Fiw TroYb+lVgFxLvDT35r7jwBQyA9ETF1Jr0lw+RrB+XiSh9UmK+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAv2EgrHMES8kiOY4wSJUMtiMwmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvNzFlZWM2MDgtMjBhMC0z MTdhLTg1NTYtMWE0OWI3MGJhZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNeiZl/3Cjh5EzS9ILhofYkpG7PqhmSaRFzzfEO1DT4H2Wn5chXL7KZ +F2pcw8HvFURUf8k7+MST1gRO5MDhnww9fsj+B8o9q7zQ+YTiimp/UkfVd+5Te/q zjx39tMQurS4bB70/lKRncTM9Kf//n0z0oxvLzKCYgeA17UmyfTU87ijeJD1FZuP xP9dheIQmNkGew8xAFxZuZjiDEkLZN9XbDKs6aRXiZarkETLsakvzgsAyb5FvQu7 1Bkz3g0uQo2W+pcIXC7ZSoeZhY+1xygDQB/j/zIVhHB1Uz+r2mg4yZh7gExRN/oO AwwK9TFexA1elkikpcE0Wsv64BEowZs= -----END CERTIFICATE-----Generated at Wed Aug 6 14:17:35 2025 by rpki-client