$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa File: 02940a4b-8f05-3cde-9acb-b94b17f34781.roa (raw, json) Hash identifier: 2ttPl9OIzXjxXvMenWtEO9z0VQPVSj2C079+0O3ZHNs= Subject key identifier: EF:7A:C9:54:BC:13:4A:B9:EA:47:A8:FC:36:C1:26:16:BB:0F:41:05 Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F4328584A35E58CB8929D0B3C4F70EF40 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7922 IP address blocks: 64.84.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:8c:b8:92:9d:0b:3c:4f:70:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=5df1f678-4c4c-4880-b59b-4bf8dc8dc151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:06:67:0f:61:a4:6a:65:24:d7:5e:48:8c: d3:f4:ce:24:2d:ff:53:e7:67:4b:a7:c5:64:27:04: ab:17:88:5d:25:54:cf:f7:56:e8:29:b0:42:67:05: a4:7b:33:68:aa:1b:da:c3:77:e0:4e:7f:80:6b:1f: 52:06:9c:1c:11:03:06:de:35:66:bc:c5:ad:97:8e: 99:eb:4f:cd:8c:f4:01:d4:00:d0:29:c4:d6:4a:9e: 5e:87:26:67:88:75:f5:8a:7d:7e:c5:f5:44:df:c4: 54:69:2a:31:36:a8:d4:d2:3a:ba:ed:67:de:ab:15: 97:f8:a0:61:aa:b6:84:fb:54:65:b4:58:e4:1f:f3: 9a:0e:c3:31:ae:ad:cf:00:a0:d5:ac:17:a0:08:ac: 20:c4:da:1d:6f:cd:78:61:5d:11:df:1a:93:8f:c2: 5a:7a:6e:96:62:19:13:c5:7d:ab:76:3c:3b:7b:de: 04:f3:68:2e:d5:a9:0e:73:a2:97:52:dd:de:31:ba: 41:ed:f7:5e:27:6a:3e:a0:d2:a6:c4:4b:15:01:94: a0:37:d5:07:a2:ee:3b:a0:e8:04:06:f5:30:3e:7c: f5:22:1e:f0:b0:a9:60:64:1a:d6:6c:c4:10:78:d3: 84:f2:02:a0:5b:e6:2a:f5:f3:cd:78:85:4b:81:d6: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7A:C9:54:BC:13:4A:B9:EA:47:A8:FC:36:C1:26:16:BB:0F:41:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2b:85:52:24:7f:38:db:5a:bc:bd:f8:1c:ab:51:18:a6:a0: b7:1c:65:7a:9d:b4:bc:dc:ae:40:ce:be:af:9b:8a:a0:ab:50: 98:e1:f7:62:5a:2f:27:15:1d:e0:90:a8:a6:0a:1f:a2:0f:e4: c6:03:09:9a:ad:bf:47:22:3f:df:5d:c2:1e:c2:e3:b2:bf:1e: 31:8a:fc:4c:ef:92:7d:d5:1e:76:7f:55:bb:97:49:8e:50:db: 40:7d:f0:da:6e:4c:f5:00:ec:ec:96:bb:19:b3:14:e0:27:67: 0a:f5:72:aa:a1:e0:4a:43:e1:8f:ef:d3:2b:e5:4e:f1:fd:15: db:68:6d:0d:99:2e:90:88:90:a1:c8:07:ba:ba:bb:69:54:58: d0:91:41:7d:94:56:34:08:15:e1:e1:ef:c2:63:45:6b:38:22: 7a:d8:31:94:cc:9e:66:33:1a:1b:21:61:f0:4f:b7:26:2e:8b: fd:36:00:ba:4a:ab:e3:08:a1:70:be:f1:9a:39:d9:fb:3a:96: ed:7a:03:cb:a1:c1:3e:08:06:29:5b:3c:89:fa:a4:06:c4:fa: ab:51:88:6f:7b:a9:0c:21:8f:e5:9d:3f:be:97:c9:39:e4:22: 15:e4:a1:9b:a1:43:29:c6:7a:2c:a7:c2:8d:56:27:b6:94:28: 75:a3:eb:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15Yy4kp0LPE9w70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk NWRmMWY2NzgtNGM0Yy00ODgwLWI1OWItNGJmOGRjOGRjMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMAGZw9hpGplJNdeSIzT9M4kLf9T52dLp8Vk JwSrF4hdJVTP91boKbBCZwWkezNoqhvaw3fgTn+Aax9SBpwcEQMG3jVmvMWtl46Z 60/NjPQB1ADQKcTWSp5ehyZniHX1in1+xfVE38RUaSoxNqjU0jq67WfeqxWX+KBh qraE+1RltFjkH/OaDsMxrq3PAKDVrBegCKwgxNodb814YV0R3xqTj8Jaem6WYhkT xX2rdjw7e94E82gu1akOc6KXUt3eMbpB7fdeJ2o+oNKmxEsVAZSgN9UHou47oOgE BvUwPnz1Ih7wsKlgZBrWbMQQeNOE8gKgW+Yq9fPNeIVLgdaa1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO96yVS8E0q56keo/DbBJha7D0EFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvMDI5NDBhNGItOGYwNS0z Y2RlLTlhY2ItYjk0YjE3ZjM0NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIrhVIkfzjbWry9+ByrURimoLccZXqdtLzcrkDOvq+biqCrUJjh92Ja LycVHeCQqKYKH6IP5MYDCZqtv0ciP99dwh7C47K/HjGK/Ezvkn3VHnZ/VbuXSY5Q 20B98NpuTPUA7OyWuxmzFOAnZwr1cqqh4EpD4Y/v0yvlTvH9FdtobQ2ZLpCIkKHI B7q6u2lUWNCRQX2UVjQIFeHh78JjRWs4InrYMZTMnmYzGhshYfBPtyYui/02ALpK q+MIoXC+8Zo52fs6lu16A8uhwT4IBilbPIn6pAbE+qtRiG97qQwhj+WdP76XyTnk IhXkoZuhQynGeiynwo1WJ7aUKHWj6+k= -----END CERTIFICATE-----Generated at Sun Jun 29 17:58:19 2025 by rpki-client