$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acb33a1f-b419-320b-966b-936077de3fa9.roa File: acb33a1f-b419-320b-966b-936077de3fa9.roa (raw, json) Hash identifier: oVQV+1vbbVzp8JFU66WYyMxY5X/68vQWig2dLtVJrAc= Subject key identifier: 44:B1:C4:96:98:6A:30:3E:30:0F:79:29:36:95:53:81:A4:CE:4B:CA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849EEC3846440FB4800F19EF880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acb33a1f-b419-320b-966b-936077de3fa9.roa Signing time: Thu 22 May 2025 01:30:09 +0000 ROA not before: Thu 22 May 2025 01:30:09 +0000 ROA not after: Wed 20 Aug 2025 01:30:09 +0000 asID: 401742 IP address blocks: 64.71.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:c3:84:64:40:fb:48:00:f1:9e:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 22 01:30:09 2025 GMT Not After : Aug 20 01:30:09 2025 GMT Subject: CN=27730c1a-a703-4d98-9c20-8462b0408ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b2:b6:ef:3b:aa:48:4d:53:66:09:c1:8d:7f: b7:4c:ec:32:22:5e:63:c0:0e:9d:fa:f2:82:4e:14: 6a:20:e9:b4:9a:34:6c:f5:04:de:d1:24:14:5c:bd: c2:a0:6f:44:51:d6:5e:52:8c:c0:f7:c1:f8:35:48: 59:11:53:07:1b:e4:a0:cd:20:68:43:d4:45:8d:5c: c9:da:ad:89:ab:da:0e:3c:58:5a:19:22:94:91:44: 57:70:04:68:d6:16:67:38:38:bb:28:bf:74:e8:08: 57:28:63:1d:ef:25:9d:e3:34:95:97:82:01:80:2c: 29:34:99:59:c8:5e:22:ad:20:b3:2a:63:67:bb:82: 03:86:dc:eb:b7:15:6a:8d:86:9f:b4:9a:30:b7:ba: 45:5d:fb:39:ea:6c:be:3f:67:3b:d1:cd:aa:2c:0c: 7c:21:df:96:66:f5:31:54:42:7a:16:21:e8:2d:11: 6f:44:8c:64:28:8a:ad:98:02:a3:a6:e8:d6:09:89: 5a:9d:ed:4d:df:01:bb:8c:8c:fc:ab:17:9c:0b:5b: 2e:ec:a3:20:1e:85:ca:c0:76:b7:5b:b5:88:33:bb: 26:ae:e6:10:e4:eb:9c:ea:df:14:d6:8f:9e:d9:c2: f3:27:ac:b6:bc:27:07:7b:1f:4f:62:1c:3f:e1:70: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B1:C4:96:98:6A:30:3E:30:0F:79:29:36:95:53:81:A4:CE:4B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acb33a1f-b419-320b-966b-936077de3fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:40:14:53:c9:a7:21:20:a9:56:2e:5e:b1:78:d7:e1:e2:aa: bd:ae:b1:c0:43:52:7f:03:a0:49:d5:e4:7b:47:83:87:18:b4: 72:65:83:62:dc:cd:b6:98:1e:e3:9b:a1:d0:0f:66:25:dd:01: 0f:cf:27:c1:a0:fb:56:c5:03:ed:e4:b6:47:2a:c1:b7:41:b6: dc:cc:d1:66:00:6d:b6:36:a1:51:10:aa:39:eb:4b:dc:59:73: 8b:9d:dd:fa:d0:cf:b9:73:53:d5:2e:74:99:e0:4c:30:6c:14: 21:e1:83:df:93:7e:b2:8b:35:a6:e2:f7:e9:d6:dd:b4:4e:e3: 81:a2:55:f1:95:2b:6c:f8:49:df:c9:20:a1:e9:2d:c9:1c:8b: d9:a0:39:a3:17:d2:74:00:66:bb:fe:dd:f7:4f:8e:79:1f:7b: c6:c9:16:54:12:cd:7c:2a:6a:79:90:46:10:72:ab:fe:a3:5a: 46:61:c8:32:1d:d3:35:89:6e:83:60:a8:ab:97:4e:85:aa:7b: cf:18:bd:ee:b2:5b:bd:ac:ea:ad:70:31:e3:59:da:72:66:da: 2b:7a:80:9a:c2:aa:a6:5a:d2:b7:c4:e3:83:8a:f9:4f:0b:58: f3:88:6f:ad:a6:45:bb:10:48:b1:12:1c:c8:5b:4f:88:5d:e8: 42:fa:53:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnuw4RkQPtIAPGe+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUyMjAxMzAwOVoXDTI1MDgyMDAxMzAwOVowLzEtMCsGA1UEAxMk Mjc3MzBjMWEtYTcwMy00ZDk4LTljMjAtODQ2MmIwNDA4YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLK27zuqSE1TZgnBjX+3TOwyIl5jwA6d+vKC ThRqIOm0mjRs9QTe0SQUXL3CoG9EUdZeUozA98H4NUhZEVMHG+SgzSBoQ9RFjVzJ 2q2Jq9oOPFhaGSKUkURXcARo1hZnODi7KL906AhXKGMd7yWd4zSVl4IBgCwpNJlZ yF4irSCzKmNnu4IDhtzrtxVqjYaftJowt7pFXfs56my+P2c70c2qLAx8Id+WZvUx VEJ6FiHoLRFvRIxkKIqtmAKjpujWCYlane1N3wG7jIz8qxecC1su7KMgHoXKwHa3 W7WIM7smruYQ5Ouc6t8U1o+e2cLzJ6y2vCcHex9PYhw/4XDYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESxxJaYajA+MA95KTaVU4GkzkvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWNiMzNhMWYtYjQxOS0z MjBiLTk2NmItOTM2MDc3ZGUzZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNAFFPJpyEgqVYuXrF41+Hiqr2uscBDUn8DoEnV5HtHg4cYtHJlg2Lc zbaYHuObodAPZiXdAQ/PJ8Gg+1bFA+3ktkcqwbdBttzM0WYAbbY2oVEQqjnrS9xZ c4ud3frQz7lzU9UudJngTDBsFCHhg9+TfrKLNabi9+nW3bRO44GiVfGVK2z4Sd/J IKHpLckci9mgOaMX0nQAZrv+3fdPjnkfe8bJFlQSzXwqanmQRhByq/6jWkZhyDId 0zWJboNgqKuXToWqe88Yve6yW72s6q1wMeNZ2nJm2it6gJrCqqZa0rfE44OK+U8L WPOIb62mRbsQSLESHMhbT4hd6EL6U40= -----END CERTIFICATE-----Generated at Sun Jun 15 15:37:30 2025 by rpki-client