$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa File: 43fa81ef-9a43-3b2e-8578-ff62facf5274.roa (raw, json) Hash identifier: qmdD+TySOzW32KLhh6xkotW9Bf6JfV5L6UkzkxQBQ1M= Subject key identifier: E6:5B:51:B1:80:61:49:31:AA:45:D2:C9:FE:12:F2:45:66:DD:72:64 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849FB452D91E29477C61E865100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa Signing time: Mon 26 May 2025 13:01:03 +0000 ROA not before: Mon 26 May 2025 13:01:03 +0000 ROA not after: Sun 24 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 64.237.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fb:45:2d:91:e2:94:77:c6:1e:86:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 26 13:01:03 2025 GMT Not After : Aug 24 13:01:03 2025 GMT Subject: CN=b515fd29-df6d-49b5-8ea7-3865abb05c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:85:02:38:b7:7e:e7:b4:44:5e:16:e2:71:58: 22:6c:fd:c7:5e:4d:e0:a1:32:75:5d:5c:5d:72:0f: 22:0e:3b:61:1b:11:24:cf:f5:22:18:76:b9:2c:85: 50:30:46:ea:da:d7:de:10:26:2d:c5:be:14:f4:f9: 20:9b:d0:99:31:46:1b:66:72:61:e7:4f:a4:43:12: c3:0e:23:18:8c:62:07:18:50:81:f2:e3:39:6f:cd: 53:a7:73:2f:0e:48:58:4e:d2:84:2e:0d:b8:6e:27: bb:c4:5e:ea:ae:2a:5a:77:8b:27:5d:3c:bc:13:e7: b2:48:70:7c:6f:4b:20:c6:c5:d9:1f:1a:bb:4f:27: b7:6f:84:f9:aa:94:4a:0a:77:1e:f1:0c:cb:59:0d: 4f:94:99:73:fc:03:41:53:b2:a2:87:b1:c2:ef:64: fe:52:15:9e:d5:9f:48:95:9e:b9:7e:18:d3:47:60: 91:60:19:06:71:7f:52:ad:32:e5:45:b0:a9:41:e4: 57:02:e0:a4:9b:d6:98:66:ef:6d:a9:dc:d3:92:2f: 85:7f:9b:60:49:53:90:91:96:02:c2:a5:8b:d9:29: 59:73:35:48:04:32:ee:31:7c:a6:80:24:7e:34:5b: 8e:36:b8:75:9a:44:20:a9:2c:42:d2:3f:20:11:bd: 19:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5B:51:B1:80:61:49:31:AA:45:D2:C9:FE:12:F2:45:66:DD:72:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:44:b2:ea:8e:73:94:43:73:94:d7:6f:5f:31:e7:62:b8:40: 72:89:2c:19:82:3a:b9:ff:67:b3:5f:cc:5f:89:ab:2c:55:d9: f7:a2:8c:ef:f8:b5:64:70:70:48:65:ce:42:44:e1:40:da:53: 8e:33:f2:a6:75:fc:6e:04:af:61:f8:eb:b8:bb:e6:92:8a:79: 45:54:10:f0:1c:5c:aa:6e:65:93:18:f4:bd:51:47:22:ff:94: 5b:61:49:0c:a0:4d:71:1b:4c:a1:4f:5b:05:09:55:09:bb:79: 9d:6d:be:80:91:15:50:76:d3:a0:12:67:5e:94:b7:a6:9d:24: dd:2a:62:0e:cd:02:ca:c6:78:eb:c8:67:b3:bb:75:76:25:5c: 44:c3:9b:7a:6d:11:57:0d:17:68:59:ea:3e:40:59:1b:b3:1a: 97:77:ae:7d:f5:35:4e:83:b7:f7:56:d2:d8:23:a4:ff:53:86: 3a:be:5e:3d:03:77:fa:e0:8b:67:9e:67:44:5d:f7:b6:32:d7: e7:a5:4b:67:ac:86:8d:4b:17:b0:30:b3:5e:ea:4f:53:03:69: 5b:18:1d:1b:82:f5:8e:3c:47:13:41:ea:d3:05:35:69:d4:70: 4a:c8:e6:f5:1e:57:aa:44:54:24:f3:b7:5e:e5:c6:43:f5:e4: 26:f7:6b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7RS2R4pR3xh6GUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk YjUxNWZkMjktZGY2ZC00OWI1LThlYTctMzg2NWFiYjA1Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oUCOLd+57REXhbicVgibP3HXk3goTJ1XVxd cg8iDjthGxEkz/UiGHa5LIVQMEbq2tfeECYtxb4U9Pkgm9CZMUYbZnJh50+kQxLD DiMYjGIHGFCB8uM5b81Tp3MvDkhYTtKELg24bie7xF7qripad4snXTy8E+eySHB8 b0sgxsXZHxq7Tye3b4T5qpRKCnce8QzLWQ1PlJlz/ANBU7Kih7HC72T+UhWe1Z9I lZ65fhjTR2CRYBkGcX9SrTLlRbCpQeRXAuCkm9aYZu9tqdzTki+Ff5tgSVOQkZYC wqWL2SlZczVIBDLuMXymgCR+NFuONrh1mkQgqSxC0j8gEb0ZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZbUbGAYUkxqkXSyf4S8kVm3XJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDNmYTgxZWYtOWE0My0z YjJlLTg1NzgtZmY2MmZhY2Y1Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1EsuqOc5RDc5TXb18x52K4QHKJLBmCOrn/Z7NfzF+JqyxV2feijO/4 tWRwcEhlzkJE4UDaU44z8qZ1/G4Er2H467i75pKKeUVUEPAcXKpuZZMY9L1RRyL/ lFthSQygTXEbTKFPWwUJVQm7eZ1tvoCRFVB206ASZ16Ut6adJN0qYg7NAsrGeOvI Z7O7dXYlXETDm3ptEVcNF2hZ6j5AWRuzGpd3rn31NU6Dt/dW0tgjpP9Thjq+Xj0D d/rgi2eeZ0Rd97Yy1+elS2esho1LF7Aws17qT1MDaVsYHRuC9Y48RxNB6tMFNWnU cErI5vUeV6pEVCTzt17lxkP15Cb3a1k= -----END CERTIFICATE-----Generated at Tue Jul 1 19:48:27 2025 by rpki-client