$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa File: d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa (raw, json) Hash identifier: NY+0yO2XQtkxyVjCIcFeFUK6eTm5ZOMxoyBzxikQYZk= Subject key identifier: 2B:D2:2F:40:5A:66:0E:63:1C:AB:20:4A:1E:4C:01:FA:E1:54:2C:07 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BEE9166CF87E483432240 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 47066 IP address blocks: 64.62.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ee:91:66:cf:87:e4:83:43:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2192800f-8ec4-4ff1-b1ff-30ea4af72a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:e1:c0:96:93:24:20:05:38:c2:81:ed:eb: ef:06:db:7c:81:98:8e:c2:cf:c4:b6:25:c2:ef:56: 5d:7c:9d:53:5e:89:5f:c7:2c:76:6d:a7:4e:1f:91: 85:ab:bb:3a:17:3f:9d:b1:27:f5:76:64:98:e9:72: 09:9c:d8:b0:87:d4:88:46:1a:36:bc:eb:95:07:2f: 44:13:c5:37:07:17:2c:a9:65:80:6e:8f:e0:30:f3: ed:34:d5:a2:67:08:38:98:80:71:6b:c8:fb:87:fa: 2d:8c:eb:34:f2:d0:e4:09:e2:db:cb:3b:42:f2:ff: a1:ab:fe:d7:4d:18:b2:10:5c:92:64:9d:6d:6e:b6: 78:86:75:db:c9:70:6b:86:a3:93:75:fa:f1:20:20: 7c:b7:6b:f7:55:d7:ed:7f:8a:96:74:95:9c:9b:d9: 7c:ba:57:13:df:f4:72:3d:4f:70:38:32:3f:6e:42: e9:6c:3e:43:4d:ea:55:f9:87:cd:27:99:0e:de:9a: 13:28:ba:9d:10:72:f9:b0:37:2a:72:ca:e2:5a:45: 48:59:a5:52:05:75:08:f9:aa:af:89:7c:88:ce:78: 13:53:21:2b:5f:a9:24:fb:0d:3a:79:32:62:89:a7: 8f:a5:f5:98:27:54:e4:29:1f:f7:00:9d:ff:18:4d: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D2:2F:40:5A:66:0E:63:1C:AB:20:4A:1E:4C:01:FA:E1:54:2C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7c1e42a-3c5f-3dd7-b279-710ab6b693d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8c:75:a1:ae:04:4b:f5:68:95:af:48:52:bd:84:67:79:34: f5:01:ff:4b:6e:70:45:42:94:81:36:55:32:aa:19:80:13:f2: bd:bb:3e:51:9e:65:95:2e:c6:56:4c:5e:bc:78:9f:b5:60:c7: 7b:c6:e7:9f:c9:cd:6a:ed:99:0a:42:03:b3:ae:6c:10:be:84: fe:de:72:cb:e2:eb:bd:a3:6c:cb:6e:e2:c2:d5:68:7d:af:02: ce:64:eb:bf:b0:18:43:47:c9:bd:a3:5e:a0:c3:10:c9:fe:57: c1:5a:85:f4:45:35:76:39:b8:01:2f:7d:76:2c:5b:5e:e1:75: 65:79:4a:65:7d:ae:f9:a2:38:6b:ed:45:a5:6c:52:9d:84:94: 67:46:61:f5:1a:09:b7:61:31:71:76:53:3b:59:c5:cd:22:8b: 5f:17:e7:a9:e0:57:14:7b:c7:e5:e8:1f:8d:ec:c2:ec:24:de: d7:8f:f3:c7:58:1e:17:95:73:6f:6f:10:5f:25:04:ad:6e:5e: 76:03:69:44:af:c8:d6:b5:64:61:c8:62:8c:b9:38:c8:bf:91: cf:fb:9e:b3:ac:1b:29:88:33:9c:f2:2b:81:21:c5:0b:72:80: 92:2e:ae:cb:d0:cc:4a:72:7e:27:b5:ac:fc:75:f8:34:03:97: a4:52:4d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G+6RZs+H5INDIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjE5MjgwMGYtOGVjNC00ZmYxLWIxZmYtMzBlYTRhZjcyYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpzhwJaTJCAFOMKB7evvBtt8gZiOws/EtiXC 71ZdfJ1TXolfxyx2badOH5GFq7s6Fz+dsSf1dmSY6XIJnNiwh9SIRho2vOuVBy9E E8U3BxcsqWWAbo/gMPPtNNWiZwg4mIBxa8j7h/otjOs08tDkCeLbyztC8v+hq/7X TRiyEFySZJ1tbrZ4hnXbyXBrhqOTdfrxICB8t2v3Vdftf4qWdJWcm9l8ulcT3/Ry PU9wODI/bkLpbD5DTepV+YfNJ5kO3poTKLqdEHL5sDcqcsriWkVIWaVSBXUI+aqv iXyIzngTUyErX6kk+w06eTJiiaePpfWYJ1TkKR/3AJ3/GE3ojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvSL0BaZg5jHKsgSh5MAfrhVCwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDdjMWU0MmEtM2M1Zi0z ZGQ3LWIyNzktNzEwYWI2YjY5M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuMdaGuBEv1aJWvSFK9hGd5NPUB/0tucEVClIE2VTKqGYAT8r27PlGe ZZUuxlZMXrx4n7Vgx3vG55/JzWrtmQpCA7OubBC+hP7ecsvi672jbMtu4sLVaH2v As5k67+wGENHyb2jXqDDEMn+V8FahfRFNXY5uAEvfXYsW17hdWV5SmV9rvmiOGvt RaVsUp2ElGdGYfUaCbdhMXF2UztZxc0ii18X56ngVxR7x+XoH43swuwk3teP88dY HheVc29vEF8lBK1uXnYDaUSvyNa1ZGHIYoy5OMi/kc/7nrOsGymIM5zyK4EhxQty gJIursvQzEpyfie1rPx1+DQDl6RSTTA= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:14 2025 by rpki-client