$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: 9dG4vv2e0X0SVa6rBIpbhx+jfc0tqEy8JCgCPTPz7rU= Subject key identifier: 03:CE:81:01:F2:D5:24:70:35:9B:AF:4F:77:75:1E:8C:6D:60:9D:E7 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F43285849E22524872B070BB7F9B91A00 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:24:87:2b:07:0b:b7:f9:b9:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=61f1185f-7b96-4ce7-8458-933bbe13737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:69:06:79:73:c7:17:f6:df:5d:b8:53:53: 6f:a3:4d:89:12:8b:c2:1a:e8:92:2f:3a:8c:c7:ab: fb:9b:b0:a3:3d:05:0e:be:7f:12:47:98:e9:a7:82: f6:6a:a5:55:da:3a:fc:10:7f:3a:da:e7:27:ea:cc: 8b:83:70:8f:52:e8:a0:77:8f:d2:77:43:84:8d:b0: 40:3f:7f:53:2f:a3:e6:fd:cd:96:c2:8b:8d:1b:bf: bc:35:8f:58:13:5b:2c:23:31:a2:6b:8c:64:01:5b: af:91:b2:88:44:9f:ca:da:0f:ac:c2:c4:a1:c2:84: e7:d2:a2:bb:c6:22:f8:73:4c:0f:47:06:b2:4e:a2: 06:61:76:35:d1:a6:25:f2:da:5a:67:20:ee:72:70: 87:65:18:42:8a:63:32:98:de:59:21:5f:28:e2:3a: f4:9f:01:56:76:11:7e:35:af:22:ef:b2:22:bb:e3: 34:09:d6:01:7b:79:3b:41:cd:2f:ca:26:f1:45:92: 19:2a:10:fc:a6:a0:4c:c7:1c:72:da:a2:e9:37:89: 7c:c3:ba:3f:50:e3:f7:7b:07:07:54:4d:a2:da:76: 07:a9:6b:8c:fb:15:81:9f:62:c0:b6:c1:ab:6a:ff: 13:00:90:5e:3a:16:56:17:c1:27:1b:05:db:b5:51: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CE:81:01:F2:D5:24:70:35:9B:AF:4F:77:75:1E:8C:6D:60:9D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:19:88:66:02:6d:93:fd:c0:9d:4c:51:cf:b4:7d:b7:d9:da: 97:f9:d7:20:24:6a:8c:0b:14:37:ea:d2:16:cb:2e:9b:78:dc: 49:d2:01:c6:73:32:1c:b3:ac:37:ed:88:87:d9:d8:61:56:d6: ff:f4:de:2e:24:7b:01:fc:50:7e:2a:3e:62:7b:32:1f:75:ce: 3e:07:2c:9f:25:70:e1:66:75:8d:fc:3e:4e:08:eb:45:d6:e7: 09:ae:4e:10:67:16:21:8a:69:f4:53:cb:0d:7a:ea:fc:8a:35: fe:1c:15:2a:f5:c9:74:29:4a:30:da:6d:91:4d:66:4b:b3:a1: 9a:34:ea:e8:e1:da:2c:a2:64:f9:8d:50:37:1a:48:8c:93:4f: d7:02:42:77:a5:95:e6:01:67:91:d2:9b:b1:5f:1c:ee:0a:16: c2:da:82:84:43:0b:b5:16:d8:a5:88:3f:d2:18:bb:35:b9:b0: a5:fb:56:e1:19:ce:f7:38:1e:56:c7:5e:df:4c:0f:6a:b2:fd: 80:1e:5a:e0:d5:e2:b0:17:78:40:db:9e:03:b0:5f:4d:43:6f: fc:c8:c9:ee:cf:97:18:3d:a8:6d:ce:9f:2d:ae:1c:a3:ef:cc: 8a:74:28:97:a0:3c:fe:9c:05:91:cf:02:4c:94:58:e5:b7:8f: 52:fe:09:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSSHKwcLt/m5GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NjFmMTE4NWYtN2I5Ni00Y2U3LTg0NTgtOTMzYmJlMTM3MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm9pBnlzxxf23124U1Nvo02JEovCGuiSLzqM x6v7m7CjPQUOvn8SR5jpp4L2aqVV2jr8EH862ucn6syLg3CPUuigd4/Sd0OEjbBA P39TL6Pm/c2WwouNG7+8NY9YE1ssIzGia4xkAVuvkbKIRJ/K2g+swsShwoTn0qK7 xiL4c0wPRwayTqIGYXY10aYl8tpaZyDucnCHZRhCimMymN5ZIV8o4jr0nwFWdhF+ Na8i77Iiu+M0CdYBe3k7Qc0vyibxRZIZKhD8pqBMxxxy2qLpN4l8w7o/UOP3ewcH VE2i2nYHqWuM+xWBn2LAtsGrav8TAJBeOhZWF8EnGwXbtVFxqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPOgQHy1SRwNZuvT3d1HoxtYJ3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoZiGYCbZP9wJ1MUc+0fbfZ2pf51yAkaowLFDfq0hbLLpt43EnSAcZz MhyzrDftiIfZ2GFW1v/03i4kewH8UH4qPmJ7Mh91zj4HLJ8lcOFmdY38Pk4I60XW 5wmuThBnFiGKafRTyw166vyKNf4cFSr1yXQpSjDabZFNZkuzoZo06ujh2iyiZPmN UDcaSIyTT9cCQnelleYBZ5HSm7FfHO4KFsLagoRDC7UW2KWIP9IYuzW5sKX7VuEZ zvc4HlbHXt9MD2qy/YAeWuDV4rAXeEDbngOwX01Db/zIye7Plxg9qG3Ony2uHKPv zIp0KJegPP6cBZHPAkyUWOW3j1L+CY8= -----END CERTIFICATE-----Generated at Sat Jun 14 23:47:36 2025 by rpki-client