$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa File: 400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json) Hash identifier: ZqAg+hyb4M/PgSpdzLhHC+3QyMfUP+k3buPE+r9GW7Y= Subject key identifier: 5F:C2:B2:1B:70:FD:33:FE:7F:C8:82:C2:83:64:63:E0:1A:2E:B3:59 Certificate issuer: /CN=f29fac19-e536-4e67-a788-6a1d4483389f Certificate serial: 010D0C9F43285849CBCF99C58487E080BE623380 Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 397715 IP address blocks: 64.4.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:99:c5:84:87:e0:80:be:62:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=4795b0d5-2034-4ef7-9aad-7804a6448fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:ef:98:ef:1a:5e:21:4f:52:57:1a:12:15: 01:bb:2c:3f:5a:b6:27:7b:47:66:d7:5a:2b:8b:ba: 16:db:25:38:4f:e1:f8:87:ef:c9:f0:5a:28:25:b7: 4e:46:70:b8:28:fe:10:e5:52:e6:64:09:7c:b0:ed: 08:8b:fd:65:e9:86:0b:f9:38:62:b6:34:79:52:46: 31:33:ff:67:fe:9f:93:3b:15:65:7f:60:c3:7e:6b: ad:81:d7:e3:21:2b:1e:3b:b4:b5:71:07:e8:99:20: 4b:e3:be:c2:e4:51:8b:07:d2:68:c9:46:ab:13:b3: 79:04:91:e5:c6:cb:df:48:78:30:9c:11:9d:a0:fe: 00:22:7b:be:5a:e2:94:6a:54:57:af:b7:f3:dc:20: 1b:ec:f3:5f:6b:65:d3:8f:79:a3:bb:b2:18:49:76: 48:5e:59:16:fd:13:b5:51:44:af:b3:82:19:c8:a6: ad:09:7e:76:56:6b:a6:87:3c:cd:d8:19:6b:fa:38: e3:31:66:d6:33:ec:6d:be:4e:6a:3f:13:5d:2a:44: 84:87:2d:65:ce:0c:eb:dc:57:af:07:74:f0:d9:b3: e5:0f:bd:6d:6b:de:f2:e6:f3:5e:88:e7:63:23:23: 4b:f2:d6:b9:81:0b:c9:75:77:36:f2:d1:b0:a3:a8: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C2:B2:1B:70:FD:33:FE:7F:C8:82:C2:83:64:63:E0:1A:2E:B3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl X509v3 Authority Key Identifier: keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer sbgp-ipAddrBlock: critical IPv4: 64.4.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:22:fc:76:2c:bc:d7:4b:d9:b0:99:f5:7d:fd:f0:a7:8e:19: 12:e5:0d:3f:62:55:0e:7a:f0:2a:b5:5e:9c:29:4d:a6:19:d9: 25:d4:ea:6a:05:12:6f:81:f3:3a:d6:d2:4e:96:f9:f3:20:04: dc:cf:fc:60:4c:f4:08:e9:49:bb:d9:ac:a0:c2:ce:1f:ad:ed: 06:27:6d:80:03:50:87:20:ef:81:6a:44:14:7c:bb:f4:e3:9f: e5:f2:e9:fb:e7:db:fb:cf:53:1f:32:9c:62:4b:d6:cf:5b:29: 14:06:3a:35:0c:66:dc:5d:62:d3:77:40:73:71:78:0a:6b:46: f9:39:0a:69:47:2c:98:37:8e:f0:e7:0e:ad:94:5c:2e:3e:3a: 54:d9:ac:3a:15:b3:55:bd:78:be:6b:b8:77:e7:3a:58:e3:ae: d7:68:93:fe:fd:2c:71:a6:be:39:0c:ba:3b:df:99:12:7f:6b: bc:51:cd:36:4f:2c:52:4d:a1:11:e2:e4:7b:dc:a2:d0:c8:53: 9f:49:c6:ff:b9:81:e5:8f:90:6e:87:28:05:c2:8d:89:d5:b4: 95:0a:42:f7:29:d8:da:5e:19:43:77:85:b3:33:24:27:3f:0a: 10:c9:7f:fd:c6:a7:75:40:13:39:46:e9:4d:61:b3:c5:39:55: 47:7c:84:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5nFhIfggL5iM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI5ZmFjMTktZTUzNi00ZTY3LWE3ODgtNmExZDQ0ODMz ODlmMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NDc5NWIwZDUtMjAzNC00ZWY3LTlhYWQtNzgwNGE2NDQ4ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxefvmO8aXiFPUlcaEhUBuyw/WrYne0dm11or i7oW2yU4T+H4h+/J8FooJbdORnC4KP4Q5VLmZAl8sO0Ii/1l6YYL+ThitjR5UkYx M/9n/p+TOxVlf2DDfmutgdfjISseO7S1cQfomSBL477C5FGLB9JoyUarE7N5BJHl xsvfSHgwnBGdoP4AInu+WuKUalRXr7fz3CAb7PNfa2XTj3mju7IYSXZIXlkW/RO1 UUSvs4IZyKatCX52VmumhzzN2Blr+jjjMWbWM+xtvk5qPxNdKkSEhy1lzgzr3Fev B3Tw2bPlD71ta97y5vNeiOdjIyNL8ta5gQvJdXc28tGwo6icGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/Cshtw/TP+f8iCwoNkY+AaLrNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlm YWMxOS1lNTM2LTRlNjctYTc4OC02YTFkNDQ4MzM4OWYvNDAwYzA3MzgtNWQ1MS0z ZDkwLWJkODctNzljMDhmZTZlMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI5ZmFjMTktZTUzNi00ZTY3LWE3 ODgtNmExZDQ0ODMzODlmL2YyOWZhYzE5LWU1MzYtNGU2Ny1hNzg4LTZhMWQ0NDgz Mzg5Zi5jcmwwHwYDVR0jBBgwFoAU221Dzj1FGHBxtIOrNbfSZaYc9mswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlmYWMxOS1lNTM2LTRlNjctYTc4OC02YTFk NDQ4MzM4OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQASvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEki/HYsvNdL2bCZ9X398KeOGRLlDT9iVQ568Cq1XpwpTaYZ2SXU6moF Em+B8zrW0k6W+fMgBNzP/GBM9AjpSbvZrKDCzh+t7QYnbYADUIcg74FqRBR8u/Tj n+Xy6fvn2/vPUx8ynGJL1s9bKRQGOjUMZtxdYtN3QHNxeAprRvk5CmlHLJg3jvDn Dq2UXC4+OlTZrDoVs1W9eL5ruHfnOljjrtdok/79LHGmvjkMujvfmRJ/a7xRzTZP LFJNoRHi5HvcotDIU59Jxv+5geWPkG6HKAXCjYnVtJUKQvcp2NpeGUN3hbMzJCc/ ChDJf/3Gp3VAEzlG6U1hs8U5VUd8hJs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:17:02 2025 by rpki-client