$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e80a889d-4712-3590-bbb4-799086ed54cc.roa File: e80a889d-4712-3590-bbb4-799086ed54cc.roa (raw, json) Hash identifier: CQmMHDrxyMsXt/Dd+OjpXtPRtBCpWg9pkrJfXSAaW9s= Subject key identifier: 0C:0B:7A:C6:74:1D:C7:A2:E0:38:0C:FF:85:4F:C7:2D:75:54:E4:07 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849DF5A760715D4D1B74C2C6DC0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e80a889d-4712-3590-bbb4-799086ed54cc.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 399439 IP address blocks: 64.33.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:76:07:15:d4:d1:b7:4c:2c:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=e7293b91-7d77-4e32-863d-68102cf9d87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:d2:84:d9:4f:8a:e1:a2:86:b3:17:7d:11: 68:9b:a3:cc:d6:dd:d0:e6:28:60:a7:3d:b1:59:1e: b5:94:f2:20:a9:82:41:c4:9f:82:38:ab:98:6d:fa: 34:18:f6:37:3b:f4:65:43:71:a5:0e:e8:5b:e1:82: 12:33:66:73:f2:fb:35:df:f5:90:98:06:7f:41:c6: 07:46:e2:e7:1e:a8:64:7d:f5:e8:89:a1:f1:0a:19: 0d:de:71:d1:2c:fd:1e:f1:a8:07:ae:50:11:a3:42: 75:3a:fa:11:69:f8:a5:3c:69:3f:2b:91:2c:11:59: 3d:17:f0:9b:01:db:98:e5:f0:69:a3:4e:69:4c:50: 4c:69:e1:47:5d:4c:2b:4a:c4:77:b4:04:b0:b3:71: 7a:b8:c9:98:54:9a:34:f5:10:f0:fc:be:4b:e6:36: 29:e1:8e:05:c4:59:52:20:61:1e:36:4a:59:2c:7b: 24:4c:5a:e9:96:31:aa:e4:e1:b1:16:63:f3:24:39: f3:76:f3:c7:46:ae:c0:db:e2:f3:dc:60:52:74:96: cd:16:4f:68:58:e8:7c:64:9d:bb:93:48:bc:2c:8d: e9:1f:70:b5:94:56:e3:df:f6:d6:7c:03:55:4c:90: 3a:76:cc:6f:3b:c9:3a:5d:72:fd:c9:48:ae:bf:5e: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:7A:C6:74:1D:C7:A2:E0:38:0C:FF:85:4F:C7:2D:75:54:E4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e80a889d-4712-3590-bbb4-799086ed54cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b8:23:06:ec:53:59:e5:cf:2b:74:17:a0:b4:38:39:09:41: 65:50:9d:39:15:76:2f:53:38:38:ec:43:16:92:67:6d:16:5a: 66:f4:a9:79:fe:dd:f8:65:f2:27:14:f0:88:89:b8:c7:94:cf: 58:33:08:9b:16:ed:35:84:30:47:12:4d:49:77:54:92:4a:5a: 81:35:72:c1:7d:de:5e:71:3e:30:19:6f:fb:97:b1:f2:48:a6: 2f:ec:4d:d8:9b:60:f1:47:29:d1:4e:b4:b6:4b:bf:6e:d2:4e: 9a:06:40:b3:a8:81:e1:4b:b7:85:7c:a7:78:ba:0a:e4:67:d6: 19:d3:8e:c1:b1:8b:06:71:72:25:7b:6e:b0:11:90:d8:0f:a7: 90:e0:4b:45:85:ff:88:99:7f:34:51:20:e9:7f:bc:b8:db:1f: 40:ac:b8:83:55:dd:0d:16:21:37:41:5c:c4:1d:b1:21:88:68: aa:ef:1d:cf:15:b3:d6:bd:47:74:b0:e9:df:68:9d:96:fe:04: 49:5c:8e:b7:52:f2:7c:8e:a8:32:4a:d0:0b:6d:89:73:d5:c1: 72:5b:d1:b5:01:e1:19:68:f1:e2:a4:3a:92:44:96:06:6f:af: 80:21:48:74:51:d3:e8:97:15:18:39:c8:ec:21:2e:00:37:ae: 50:02:34:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnYHFdTRt0wsbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTcyOTNiOTEtN2Q3Ny00ZTMyLTg2M2QtNjgxMDJjZjlkODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxDShNlPiuGihrMXfRFom6PM1t3Q5ihgpz2x WR61lPIgqYJBxJ+COKuYbfo0GPY3O/RlQ3GlDuhb4YISM2Zz8vs13/WQmAZ/QcYH RuLnHqhkffXoiaHxChkN3nHRLP0e8agHrlARo0J1OvoRafilPGk/K5EsEVk9F/Cb AduY5fBpo05pTFBMaeFHXUwrSsR3tASws3F6uMmYVJo09RDw/L5L5jYp4Y4FxFlS IGEeNkpZLHskTFrpljGq5OGxFmPzJDnzdvPHRq7A2+Lz3GBSdJbNFk9oWOh8ZJ27 k0i8LI3pH3C1lFbj3/bWfANVTJA6dsxvO8k6XXL9yUiuv17orwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwLesZ0Hcei4DgM/4VPxy11VOQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTgwYTg4OWQtNDcxMi0z NTkwLWJiYjQtNzk5MDg2ZWQ1NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQCHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI64IwbsU1nlzyt0F6C0ODkJQWVQnTkVdi9TODjsQxaSZ20WWmb0qXn+ 3fhl8icU8IiJuMeUz1gzCJsW7TWEMEcSTUl3VJJKWoE1csF93l5xPjAZb/uXsfJI pi/sTdibYPFHKdFOtLZLv27STpoGQLOogeFLt4V8p3i6CuRn1hnTjsGxiwZxciV7 brARkNgPp5DgS0WF/4iZfzRRIOl/vLjbH0CsuINV3Q0WITdBXMQdsSGIaKrvHc8V s9a9R3Sw6d9onZb+BElcjrdS8nyOqDJK0AttiXPVwXJb0bUB4Rlo8eKkOpJElgZv r4AhSHRR0+iXFRg5yOwhLgA3rlACNHM= -----END CERTIFICATE-----Generated at Sun Jun 15 16:04:32 2025 by rpki-client