$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa File: 400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json) Hash identifier: jgfQLL1d7JHotzksCs3O1QftJFs5oq45QDefE5YLjYk= Subject key identifier: E0:BC:FA:31:35:BE:3F:FC:E5:6D:87:6A:42:0D:94:E9:EF:1E:61:BB Certificate issuer: /CN=f29fac19-e536-4e67-a788-6a1d4483389f Certificate serial: 010D0C9F4328584AAB265C04693B8845FA03AB80 Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 397715 IP address blocks: 64.4.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5c:04:69:3b:88:45:fa:03:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=6ddd463d-077d-4c2e-93c6-8c498743a2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:a2:c4:93:13:37:44:46:e2:a8:2f:2f:2f: 43:11:b4:fa:20:a7:64:45:2e:ed:4d:0d:a5:cd:4f: 66:38:1f:1c:c9:74:d8:64:db:d5:59:29:6b:28:5c: 9e:3e:ee:50:59:6f:c3:2b:de:93:d6:ee:e4:53:85: 18:fb:47:85:1f:05:33:a7:27:6d:20:32:41:ea:85: a9:a8:2f:40:7d:67:68:eb:4c:bd:08:3e:fe:45:cb: 09:b8:32:e8:13:61:58:9f:16:34:dc:f4:32:cb:68: ce:36:3e:30:0d:fe:39:f6:05:21:28:61:58:f7:66: 3e:fa:cc:8a:8f:c6:db:f2:f8:a2:a5:84:e1:d4:ed: 4c:a7:01:5b:ab:ec:67:08:dc:13:1f:e9:80:3d:92: d9:16:c0:b0:b3:25:a9:e1:62:38:f9:63:af:0b:9f: c4:4d:a5:01:6a:8b:8f:8c:ab:4f:ff:24:b2:b8:64: 98:b7:31:d5:f4:31:0a:bc:2a:5e:18:f0:7e:f9:9b: dc:12:53:58:ad:ef:3a:2b:9f:49:fe:fa:e9:bd:b7: 49:81:e9:c8:c5:e6:68:ae:de:83:96:54:63:4b:04: 07:e4:6c:a5:87:4b:18:11:83:48:bc:e4:56:a7:5b: a1:47:ce:19:8e:5e:e2:c7:a1:43:a9:75:f2:bd:7e: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:FA:31:35:BE:3F:FC:E5:6D:87:6A:42:0D:94:E9:EF:1E:61:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl X509v3 Authority Key Identifier: keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer sbgp-ipAddrBlock: critical IPv4: 64.4.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9c:79:61:1d:9b:62:fc:3f:7c:46:cd:12:53:a0:96:4c:c3: e6:a5:23:9a:34:04:2d:99:ef:49:fb:96:06:aa:a4:c9:c6:45: 31:68:f4:bf:0e:01:b0:16:58:02:46:e3:d9:2c:6b:44:bb:c3: 04:73:ba:9c:3d:b8:b6:4b:bb:bd:95:0c:81:da:2b:68:d9:bb: 0b:48:b3:03:10:ae:59:b1:95:2b:ed:bc:5b:09:ae:c4:9b:88: 3c:63:2c:27:80:40:d1:cd:df:d8:fa:c5:3a:ba:ad:82:63:ec: 53:78:44:d7:cc:8a:fb:0c:82:4d:23:f5:66:0a:90:fa:74:3c: 4c:02:0d:28:38:94:97:cd:11:45:94:b8:10:30:0a:6b:e0:57: 83:c3:8e:45:de:e0:ac:46:09:01:36:24:a8:ae:24:2d:ee:4c: 02:79:05:32:47:07:cd:90:89:7c:08:4a:46:73:c1:15:2c:15: 49:8c:a3:1b:98:8d:16:ad:a0:f2:bc:05:f0:11:f0:4c:e3:98: 8d:f8:cb:99:fd:b2:4f:5e:5b:60:81:53:81:e7:ed:ce:54:ab: 03:1c:65:e2:8c:4b:26:d1:1b:ac:db:99:b8:61:d5:70:4f:09: f3:2e:1b:4d:98:ce:44:ed:47:bd:b9:0a:76:43:46:ca:4e:16: 65:99:17:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlwEaTuIRfoDq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI5ZmFjMTktZTUzNi00ZTY3LWE3ODgtNmExZDQ0ODMz ODlmMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NmRkZDQ2M2QtMDc3ZC00YzJlLTkzYzYtOGM0OTg3NDNhMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmOixJMTN0RG4qgvLy9DEbT6IKdkRS7tTQ2l zU9mOB8cyXTYZNvVWSlrKFyePu5QWW/DK96T1u7kU4UY+0eFHwUzpydtIDJB6oWp qC9AfWdo60y9CD7+RcsJuDLoE2FYnxY03PQyy2jONj4wDf459gUhKGFY92Y++syK j8bb8viipYTh1O1MpwFbq+xnCNwTH+mAPZLZFsCwsyWp4WI4+WOvC5/ETaUBaouP jKtP/ySyuGSYtzHV9DEKvCpeGPB++ZvcElNYre86K59J/vrpvbdJgenIxeZort6D llRjSwQH5Gylh0sYEYNIvORWp1uhR84Zjl7ix6FDqXXyvX75+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC8+jE1vj/85W2HakINlOnvHmG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlm YWMxOS1lNTM2LTRlNjctYTc4OC02YTFkNDQ4MzM4OWYvNDAwYzA3MzgtNWQ1MS0z ZDkwLWJkODctNzljMDhmZTZlMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI5ZmFjMTktZTUzNi00ZTY3LWE3 ODgtNmExZDQ0ODMzODlmL2YyOWZhYzE5LWU1MzYtNGU2Ny1hNzg4LTZhMWQ0NDgz Mzg5Zi5jcmwwHwYDVR0jBBgwFoAU221Dzj1FGHBxtIOrNbfSZaYc9mswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlmYWMxOS1lNTM2LTRlNjctYTc4OC02YTFk NDQ4MzM4OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQASvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESceWEdm2L8P3xGzRJToJZMw+alI5o0BC2Z70n7lgaqpMnGRTFo9L8O AbAWWAJG49ksa0S7wwRzupw9uLZLu72VDIHaK2jZuwtIswMQrlmxlSvtvFsJrsSb iDxjLCeAQNHN39j6xTq6rYJj7FN4RNfMivsMgk0j9WYKkPp0PEwCDSg4lJfNEUWU uBAwCmvgV4PDjkXe4KxGCQE2JKiuJC3uTAJ5BTJHB82QiXwISkZzwRUsFUmMoxuY jRatoPK8BfAR8EzjmI34y5n9sk9eW2CBU4Hn7c5UqwMcZeKMSybRG6zbmbhh1XBP CfMuG02YzkTtR725CnZDRspOFmWZFwg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:45 2025 by rpki-client