$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa File: 5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa (raw, json) Hash identifier: azv57x/yTHO/UGBKg7YVNuZI5nPW15ZEmCPhu3sK/+M= Subject key identifier: 61:2B:3A:18:5E:2A:0B:9E:DD:BD:CC:32:D6:32:B5:85:63:4A:9B:22 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A2ABAE74DF2DE377B48394480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 13576 IP address blocks: 64.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e7:4d:f2:de:37:7b:48:39:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=dd5ce08b-1c17-4140-a99e-326c4865f601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:40:81:29:85:34:04:79:df:02:2a:b3:17: 47:72:7d:ae:ed:1c:40:9a:c4:72:81:ee:fb:57:0a: 51:ac:34:87:0d:44:fe:e9:47:3e:d7:fd:ed:85:2d: 69:73:b2:39:bb:13:4e:21:9e:f6:1f:6f:d2:37:b1: 25:c0:f9:ad:08:18:e6:63:60:f2:1a:40:67:74:83: c5:e4:ba:ed:f7:41:2d:18:96:9d:7a:11:65:d4:9b: 5a:45:c1:fa:50:6b:65:10:57:d4:57:67:8d:99:cc: 87:c7:15:cb:46:34:3d:4b:9d:8d:b2:f0:a2:d8:c2: 17:c1:a7:10:f2:0b:ce:d2:5d:12:a6:d6:41:07:c0: 5b:54:db:01:2b:5d:4a:11:ce:7e:d2:42:c1:2a:1a: 4a:bc:65:2e:82:6e:9a:b8:18:5b:54:85:9b:11:3b: 46:e8:1c:50:80:52:c6:15:57:e3:2e:93:a2:83:bd: 37:66:ed:df:9c:50:a9:e6:32:7d:79:ab:ba:e5:59: 6b:cc:75:15:9d:2b:c1:22:0a:76:ec:a4:44:dd:64: 29:17:e7:92:64:16:44:bf:0f:b5:42:8b:75:b0:35: eb:98:33:da:9d:ef:a7:94:1f:3b:74:10:a5:d9:e1: 21:83:2e:86:32:1a:07:60:08:d8:9a:24:42:5b:d9: 3b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2B:3A:18:5E:2A:0B:9E:DD:BD:CC:32:D6:32:B5:85:63:4A:9B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5d8dc46a-831d-390b-adcc-3f19a2fc60d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:11:02:00:6d:ca:13:58:21:d7:ba:1a:c5:f6:d8:fd:22:76: d7:ff:6a:a8:17:be:e4:87:a6:28:60:b1:44:90:cb:e9:49:9f: 7c:5e:ac:8c:47:00:1f:29:e8:a9:db:53:7d:44:ba:e5:26:f1: f0:9b:a7:ec:ca:c5:49:9f:27:f9:cc:4f:8a:9e:5f:28:a6:72: 3e:69:b2:04:16:5b:8a:ff:96:bd:c1:f2:07:ee:53:15:d5:f6: 21:20:3c:cb:89:70:80:71:4e:09:48:97:77:a0:58:f8:4f:15: b2:a9:e1:c8:96:3d:56:52:82:17:b0:8d:ee:ad:61:6c:40:c3: 65:6c:a0:5d:dc:d0:49:40:42:4c:97:84:55:ff:eb:cd:8b:b1: 48:10:de:bc:3f:a5:e9:4d:e3:21:2d:a2:49:d5:96:96:b2:ed: ef:9d:6e:38:5c:2d:fb:19:0c:86:7f:6a:fb:fe:2c:c1:b8:7d: b3:30:6c:52:b0:ed:8c:22:af:7c:15:8b:f8:fa:56:8b:a8:57: b8:e8:4d:c3:a7:8f:14:e0:68:41:78:c1:34:23:6e:af:fa:01: 6d:64:cf:13:cb:4e:1e:29:0e:02:51:11:5e:ef:0c:4b:dc:83: 90:8b:79:c9:f0:c8:f7:f3:aa:f4:af:1b:b5:d1:79:84:b6:c2: 48:53:c9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquudN8t43e0g5RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZGQ1Y2UwOGItMWMxNy00MTQwLWE5OWUtMzI2YzQ4NjVmNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWpAgSmFNAR53wIqsxdHcn2u7RxAmsRyge77 VwpRrDSHDUT+6Uc+1/3thS1pc7I5uxNOIZ72H2/SN7ElwPmtCBjmY2DyGkBndIPF 5Lrt90EtGJadehFl1JtaRcH6UGtlEFfUV2eNmcyHxxXLRjQ9S52NsvCi2MIXwacQ 8gvO0l0SptZBB8BbVNsBK11KEc5+0kLBKhpKvGUugm6auBhbVIWbETtG6BxQgFLG FVfjLpOig703Zu3fnFCp5jJ9eau65VlrzHUVnSvBIgp27KRE3WQpF+eSZBZEvw+1 Qot1sDXrmDPane+nlB87dBCl2eEhgy6GMhoHYAjYmiRCW9k7ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGErOhheKgue3b3MMtYytYVjSpsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNWQ4ZGM0NmEtODMxZC0z OTBiLWFkY2MtM2YxOWEyZmM2MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsRAgBtyhNYIde6GsX22P0idtf/aqgXvuSHpihgsUSQy+lJn3xerIxH AB8p6KnbU31EuuUm8fCbp+zKxUmfJ/nMT4qeXyimcj5psgQWW4r/lr3B8gfuUxXV 9iEgPMuJcIBxTglIl3egWPhPFbKp4ciWPVZSghewje6tYWxAw2VsoF3c0ElAQkyX hFX/682LsUgQ3rw/pelN4yEtoknVlpay7e+dbjhcLfsZDIZ/avv+LMG4fbMwbFKw 7Ywir3wVi/j6VouoV7joTcOnjxTgaEF4wTQjbq/6AW1kzxPLTh4pDgJREV7vDEvc g5CLecnwyPfzqvSvG7XReYS2wkhTyVw= -----END CERTIFICATE-----Generated at Sun Jun 15 21:00:16 2025 by rpki-client