$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa File: 54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa (raw, json) Hash identifier: Tk0hiosF3o7o25OIWXlSexEADgT/M3+hE3173LBBfvA= Subject key identifier: 8D:83:44:85:70:3A:D4:1C:0E:64:B2:44:D1:29:28:19:44:B6:8B:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FD5C517A31B52357A5A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 394330 IP address blocks: 64.71.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d5:c5:17:a3:1b:52:35:7a:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=e946b73c-49bd-46ff-9f29-3344e36356b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:7f:8e:a7:2a:2c:ec:63:ff:3e:3c:72:6b: 1c:9c:47:49:64:e7:98:2c:df:a9:56:e4:db:92:fe: d6:ae:8f:fd:23:99:c2:9d:40:a1:94:f2:4c:80:be: 16:63:09:3d:95:6e:13:af:bf:d6:d0:17:df:04:cf: ba:58:2b:a8:f5:f0:3b:03:c3:63:f4:64:dd:6c:ee: b6:d2:c8:fd:02:75:85:d5:d6:dc:90:75:0c:7a:78: f0:54:b2:cd:83:c2:fb:45:55:4f:42:13:24:93:cc: 19:1f:25:da:3d:d0:9d:f3:92:80:1d:2b:02:30:c2: 1e:16:3d:47:21:86:d1:ae:43:11:ce:62:63:23:24: 4c:ed:b4:34:a4:c6:5e:bb:e6:f4:bd:8f:b2:eb:26: 6a:91:4a:4c:a4:7e:57:49:94:4a:8d:2a:58:7f:19: 92:ee:fb:4c:bf:61:5a:1f:bb:aa:03:50:74:12:e0: 5e:57:25:bf:dd:21:39:70:0c:a3:a4:5d:00:f4:96: a5:79:45:ba:62:70:bc:2a:b2:5b:d9:41:20:d4:88: 6f:a0:ec:25:51:f5:86:c0:6f:61:96:09:df:86:04: 2d:46:f4:16:76:35:31:b9:2b:75:8e:9d:db:f9:e3: 2c:2d:d1:f3:b5:3b:2a:8b:28:1c:89:9e:87:fd:40: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:44:85:70:3A:D4:1C:0E:64:B2:44:D1:29:28:19:44:B6:8B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ba:cf:df:c9:de:20:b5:c6:76:83:14:83:24:29:05:d2:5b: df:cd:44:f4:aa:b5:55:32:67:6a:cb:06:22:37:e3:50:e4:45: 5f:fc:a5:02:90:a0:f5:93:66:bf:36:86:3e:bb:46:56:25:b8: 58:94:f6:98:17:44:d2:05:7f:8e:67:0c:c1:8b:6f:d3:19:ad: 49:2c:e4:b1:3b:f1:c4:52:65:1e:f6:5a:0a:a4:38:04:30:66: 02:89:e7:58:35:c4:a8:e2:5b:b6:80:be:2c:38:a7:9d:cb:8c: fb:86:13:01:50:ce:ad:e8:ef:b2:b1:9e:6f:bb:80:2e:a4:47: 2d:92:ab:72:52:49:27:89:af:fe:8c:bb:a4:bd:48:08:5e:a4: bf:2e:db:dc:11:36:64:5f:57:fd:94:4d:bf:37:e9:d6:b1:b2: f0:32:44:fa:f4:87:af:76:cd:b9:72:39:88:de:6a:23:c3:eb: da:74:2f:b3:1b:b3:87:0a:4c:2b:f4:0a:3d:c0:95:dc:35:02: df:77:22:c8:06:6b:5f:b2:99:b4:0c:43:13:ef:f0:5c:5e:45: 05:af:78:79:90:3c:32:6f:75:93:d4:de:f9:cb:1b:81:c1:71: 4d:4b:b3:55:21:a9:9d:d3:33:50:b3:41:e3:7a:89:0b:63:a0: 15:c5:13:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX9XFF6MbUjV6WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZTk0NmI3M2MtNDliZC00NmZmLTlmMjktMzM0NGUzNjM1NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApap/jqcqLOxj/z48cmscnEdJZOeYLN+pVuTb kv7Wro/9I5nCnUChlPJMgL4WYwk9lW4Tr7/W0BffBM+6WCuo9fA7A8Nj9GTdbO62 0sj9AnWF1dbckHUMenjwVLLNg8L7RVVPQhMkk8wZHyXaPdCd85KAHSsCMMIeFj1H IYbRrkMRzmJjIyRM7bQ0pMZeu+b0vY+y6yZqkUpMpH5XSZRKjSpYfxmS7vtMv2Fa H7uqA1B0EuBeVyW/3SE5cAyjpF0A9JaleUW6YnC8KrJb2UEg1IhvoOwlUfWGwG9h lgnfhgQtRvQWdjUxuSt1jp3b+eMsLdHztTsqiygciZ6H/UD+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2DRIVwOtQcDmSyRNEpKBlEtovQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTRlMGE0NDAtY2UyOC0z ZWM3LTkzMzctYjhiMzkwZWZjOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe6z9/J3iC1xnaDFIMkKQXSW9/NRPSqtVUyZ2rLBiI341DkRV/8pQKQ oPWTZr82hj67RlYluFiU9pgXRNIFf45nDMGLb9MZrUks5LE78cRSZR72WgqkOAQw ZgKJ51g1xKjiW7aAviw4p53LjPuGEwFQzq3o77Kxnm+7gC6kRy2Sq3JSSSeJr/6M u6S9SAhepL8u29wRNmRfV/2UTb836daxsvAyRPr0h692zblyOYjeaiPD69p0L7Mb s4cKTCv0Cj3Aldw1At93IsgGa1+ymbQMQxPv8FxeRQWveHmQPDJvdZPU3vnLG4HB cU1Ls1UhqZ3TM1CzQeN6iQtjoBXFE50= -----END CERTIFICATE-----Generated at Sun Jun 15 19:19:21 2025 by rpki-client