$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa File: 4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa (raw, json) Hash identifier: DJiGlNbD9/wyRKx1icKMiDKIno/SfFCoUUrOXcimVIY= Subject key identifier: E2:74:35:47:71:99:66:42:4E:3C:B5:45:17:29:D2:DB:1C:94:3F:D0 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584A41104B8E09C1B20DC549ADE0 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 5769 IP address blocks: 24.53.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4b:8e:09:c1:b2:0d:c5:49:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=db709e4a-e0b6-4cf2-9f59-1f20e26d9088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:4b:8b:46:a1:3b:25:c6:49:70:53:9c:86: cd:78:45:6e:00:da:c6:3e:9e:26:d9:f2:64:da:3b: 43:5e:e8:ba:fc:34:93:0a:2c:05:94:ad:e6:f7:2d: 67:a5:aa:83:dd:98:41:83:43:ee:b1:2c:96:e8:52: a1:da:d7:25:19:75:44:6f:4d:2d:e4:b1:f5:52:68: ea:b0:ac:57:ee:9b:9e:c2:aa:7b:67:45:7f:70:b7: f2:fb:9c:8f:c9:0a:f1:3b:67:96:9d:8c:77:e3:2f: 88:f1:6f:84:d8:65:04:5f:87:f9:bc:a5:8c:a3:1d: 6f:6b:c0:b8:f7:90:3c:64:7d:56:2e:9e:d9:95:f2: 7d:10:9d:8e:fe:27:16:58:f2:06:00:c7:e1:60:52: 8b:1e:fb:85:3d:41:1e:5c:e6:b3:73:79:1c:2a:c0: 74:53:a9:31:38:07:9a:d0:b9:39:2f:a1:5e:37:25: cd:a9:62:68:2b:a2:9e:2a:98:bc:85:4f:40:94:77: 88:19:1f:f1:95:3e:02:77:b3:96:45:c0:de:9a:49: 39:d8:28:19:9c:1d:17:ea:94:e8:d0:be:48:21:87: 7c:dc:92:d7:5e:fe:68:f3:3b:ab:fc:a9:fa:ff:40: 7c:cd:ea:35:75:20:8d:94:e1:a7:db:6e:4b:66:a8: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:35:47:71:99:66:42:4E:3C:B5:45:17:29:D2:DB:1C:94:3F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 24.53.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7a:29:82:b5:35:91:5f:c1:76:c8:63:83:18:b8:d1:95:d2: 09:cd:a5:bd:bd:8b:bf:9b:84:96:7a:ec:5e:75:bc:67:0b:98: 4c:3d:0c:7e:55:7e:f6:3f:43:74:78:f8:a0:74:3d:2c:b9:8a: c4:1d:f5:bb:21:91:d1:c2:69:42:fc:22:be:83:05:de:98:c4: 63:47:e9:12:63:b6:ff:66:5c:e3:ec:8d:be:3a:ad:ff:12:59: e5:b9:36:6d:92:a7:5a:3f:8e:af:f3:1f:63:69:d2:16:28:9e: 53:a6:02:ea:da:40:06:78:19:1f:a5:ac:c4:f1:4d:93:74:2e: 66:59:a5:ee:ba:b9:d5:89:8b:72:b3:bb:48:9d:49:c7:44:7d: 02:62:bc:72:c4:28:5e:5f:30:bd:dd:20:e8:e2:56:dd:13:a3: 96:e7:17:5c:06:54:9b:4b:15:3e:b0:88:8a:97:59:47:03:59: 65:6c:f9:f9:39:d6:4a:03:60:15:91:2f:e8:90:e9:18:4a:55: 63:08:92:31:e5:38:f2:ae:e6:c4:62:58:f8:ec:67:97:6a:bd: 20:dc:39:f1:dd:e2:4b:75:e7:a0:84:d6:f1:b1:aa:e1:ee:a9: 60:75:44:35:b5:c1:b8:6a:aa:9d:7a:39:cb:0f:fd:ac:24:5a: ce:ba:d1:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEEuOCcGyDcVJreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZGI3MDllNGEtZTBiNi00Y2YyLTlmNTktMWYyMGUyNmQ5MDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/lLi0ahOyXGSXBTnIbNeEVuANrGPp4m2fJk 2jtDXui6/DSTCiwFlK3m9y1npaqD3ZhBg0PusSyW6FKh2tclGXVEb00t5LH1Umjq sKxX7puewqp7Z0V/cLfy+5yPyQrxO2eWnYx34y+I8W+E2GUEX4f5vKWMox1va8C4 95A8ZH1WLp7ZlfJ9EJ2O/icWWPIGAMfhYFKLHvuFPUEeXOazc3kcKsB0U6kxOAea 0Lk5L6FeNyXNqWJoK6KeKpi8hU9AlHeIGR/xlT4Cd7OWRcDemkk52CgZnB0X6pTo 0L5IIYd83JLXXv5o8zur/Kn6/0B8zeo1dSCNlOGn225LZqhW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ0NUdxmWZCTjy1RRcp0tsclD/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNGNjNWY3ODUtY2RlMS0z MWM4LWE1ZGEtMWUxNWMyNWQwMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGDUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN6KYK1NZFfwXbIY4MYuNGV0gnNpb29i7+bhJZ67F51vGcLmEw9DH5V fvY/Q3R4+KB0PSy5isQd9bshkdHCaUL8Ir6DBd6YxGNH6RJjtv9mXOPsjb46rf8S WeW5Nm2Sp1o/jq/zH2Np0hYonlOmAuraQAZ4GR+lrMTxTZN0LmZZpe66udWJi3Kz u0idScdEfQJivHLEKF5fML3dIOjiVt0To5bnF1wGVJtLFT6wiIqXWUcDWWVs+fk5 1koDYBWRL+iQ6RhKVWMIkjHlOPKu5sRiWPjsZ5dqvSDcOfHd4kt156CE1vGxquHu qWB1RDW1wbhqqp16OcsP/awkWs660Qg= -----END CERTIFICATE-----Generated at Sat Jul 5 10:52:53 2025 by rpki-client