$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa File: 5f214b9f-b571-3e5e-862b-39c37c23157a.roa (raw, json) Hash identifier: /wR11zho3v0grgxTwNLbH9FzhmrPdS6XToZPU74Z7q8= Subject key identifier: 21:A5:D3:91:E1:46:F5:0C:83:AC:3B:30:B0:05:A6:D5:85:A9:A8:F6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849EEC388DECD1C5F1DC2918C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa Signing time: Thu 22 May 2025 01:30:11 +0000 ROA not before: Thu 22 May 2025 01:30:11 +0000 ROA not after: Wed 20 Aug 2025 01:30:11 +0000 asID: 401742 IP address blocks: 64.71.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:c3:88:de:cd:1c:5f:1d:c2:91:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 22 01:30:11 2025 GMT Not After : Aug 20 01:30:11 2025 GMT Subject: CN=defa7442-98e3-475b-987d-6014be88b6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:6b:c2:0a:f4:8e:e6:fb:ef:a9:1b:40:82: 61:d3:6d:70:28:b8:e8:cf:d5:2a:fc:70:22:f6:8f: f1:76:62:e0:b4:97:50:b6:0a:b4:4d:1b:85:ac:13: 25:41:d5:4e:b9:18:05:21:22:c1:7e:1d:21:3a:f2: 10:65:26:cd:5c:0c:df:fb:55:4a:4b:09:d8:60:3e: f6:da:3a:2e:cc:60:9c:d2:9d:10:fd:bf:54:4e:5e: 34:1e:0c:b4:a2:f2:f9:2d:bb:7f:9c:29:5b:62:08: bd:05:06:d1:8f:cd:24:28:2b:f0:16:d6:99:53:7f: 7b:21:f0:7d:af:47:01:33:a3:39:a6:79:74:66:29: 6b:ac:ec:90:24:4d:af:20:1f:78:f5:5e:67:08:72: 87:7f:d3:7e:61:f7:2e:47:31:83:ed:93:13:c4:52: 95:27:75:87:8e:2e:9f:86:e0:d8:40:0f:10:93:14: 5e:e1:7d:24:4a:a6:d0:80:a4:9b:4c:4a:d2:dd:07: 0e:e9:87:7a:d2:56:44:eb:45:a9:0c:7d:f3:cb:7d: b3:f5:6c:24:54:8a:47:e7:ac:31:4e:27:b0:19:98: 61:23:d5:aa:8e:4f:34:2f:ae:ee:5b:37:83:33:bb: 3f:51:2d:da:7a:01:1a:0a:5b:58:bc:f6:2a:50:bc: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A5:D3:91:E1:46:F5:0C:83:AC:3B:30:B0:05:A6:D5:85:A9:A8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:52:21:64:ef:07:c2:ca:a1:c1:ab:1a:7e:91:8d:91:5f:2c: 13:fb:b7:3e:f0:1b:42:5f:7d:09:2a:7d:4a:de:a0:91:75:b0: b4:40:34:71:a1:41:1d:dc:21:2c:8f:ed:b7:ea:f9:87:2e:b3: 4f:b8:c7:4f:a0:83:2e:99:af:bd:8b:52:15:f9:a9:15:fd:9c: 2f:4c:c5:bc:7b:9e:61:ea:4f:84:95:a1:73:d4:6f:c7:f7:ec: 42:19:28:e9:5c:7b:b3:74:d9:42:05:62:e2:1d:fb:13:87:8b: d4:e1:3f:4a:d7:27:0e:32:48:d3:13:da:9e:3d:9f:06:07:42: 83:32:8f:02:9d:d9:17:55:a0:db:bf:b4:43:3b:2e:6d:eb:8b: e4:da:64:d2:3e:81:00:47:c7:77:e8:87:3a:29:af:07:f0:ec: cb:94:18:3f:66:e7:9d:57:ba:1c:c9:9f:da:26:7f:7b:99:91: 14:1a:17:70:dc:72:59:7a:a5:9a:83:75:14:0d:e3:a9:f4:e8: 4b:58:61:35:a7:bc:c0:9c:57:5c:c2:0d:c8:a6:9c:4f:7f:a3: 4c:53:df:de:4d:b7:8b:4d:f0:91:15:25:cf:9c:b3:52:c6:a7: 41:fc:42:1c:ad:89:b1:1a:1c:f3:2f:8d:02:50:a4:54:24:37: 98:80:7b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnuw4jezRxfHcKRjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUyMjAxMzAxMVoXDTI1MDgyMDAxMzAxMVowLzEtMCsGA1UEAxMk ZGVmYTc0NDItOThlMy00NzViLTk4N2QtNjAxNGJlODhiNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz1rwgr0jub776kbQIJh021wKLjoz9Uq/HAi 9o/xdmLgtJdQtgq0TRuFrBMlQdVOuRgFISLBfh0hOvIQZSbNXAzf+1VKSwnYYD72 2jouzGCc0p0Q/b9UTl40Hgy0ovL5Lbt/nClbYgi9BQbRj80kKCvwFtaZU397IfB9 r0cBM6M5pnl0ZilrrOyQJE2vIB949V5nCHKHf9N+YfcuRzGD7ZMTxFKVJ3WHji6f huDYQA8QkxRe4X0kSqbQgKSbTErS3QcO6Yd60lZE60WpDH3zy32z9WwkVIpH56wx TiewGZhhI9Wqjk80L67uWzeDM7s/US3aegEaCltYvPYqULzCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGl05HhRvUMg6w7MLAFptWFqaj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWYyMTRiOWYtYjU3MS0z ZTVlLTg2MmItMzljMzdjMjMxNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRSIWTvB8LKocGrGn6RjZFfLBP7tz7wG0JffQkqfUreoJF1sLRANHGh QR3cISyP7bfq+Ycus0+4x0+ggy6Zr72LUhX5qRX9nC9Mxbx7nmHqT4SVoXPUb8f3 7EIZKOlce7N02UIFYuId+xOHi9ThP0rXJw4ySNMT2p49nwYHQoMyjwKd2RdVoNu/ tEM7Lm3ri+TaZNI+gQBHx3fohzoprwfw7MuUGD9m551XuhzJn9omf3uZkRQaF3Dc cll6pZqDdRQN46n06EtYYTWnvMCcV1zCDcimnE9/o0xT395Nt4tN8JEVJc+cs1LG p0H8QhytibEaHPMvjQJQpFQkN5iAe9E= -----END CERTIFICATE-----Generated at Sun Jun 15 23:19:16 2025 by rpki-client