$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa File: 576b1d7b-1627-3d93-915f-91e0366f9f95.roa (raw, json) Hash identifier: MzvlPtz3v9V5jD80tOpubUrbP0yQHD25oXkPjoDNQxI= Subject key identifier: 4A:70:00:F0:04:D9:3D:6E:03:D4:13:B8:BF:74:02:EC:56:69:DC:19 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A3E45A57C0DA46CE7FD3D5080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 26421 IP address blocks: 64.129.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a5:7c:0d:a4:6c:e7:fd:3d:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=136bb202-f8ed-4ff6-8ea8-f6e9258b3186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:cc:c6:99:e3:56:ba:32:0c:b6:80:a5:6a: 45:79:c8:57:c1:29:bd:e0:de:a9:57:ad:bf:c4:0f: 5c:60:39:7f:f0:1e:64:cb:c1:c0:76:5e:5c:50:f3: 3c:07:13:8e:2c:6d:be:97:0f:3a:04:ad:08:97:58: f9:05:9d:ee:ae:df:29:06:a8:db:10:08:8c:0d:b4: 47:b5:89:0c:d8:cc:6b:d0:d1:d3:7a:ea:d9:d6:3d: ff:a4:c4:77:54:da:00:b6:87:a0:5e:ba:95:3d:22: 9b:18:28:47:f9:ce:02:59:a8:27:be:d6:ae:26:8c: 58:da:f0:93:8a:db:6e:94:05:de:25:26:b7:e8:d5: 9b:76:45:4d:e8:12:c6:48:cf:89:e4:eb:db:e9:2e: 78:49:93:30:83:96:ad:32:57:c2:a3:2f:2b:12:b6: 1a:53:51:5f:2d:c2:be:e7:41:75:7a:b1:0c:4c:5f: e6:28:6c:7b:1b:fc:ab:fb:60:78:fd:32:09:af:60: 64:b1:8d:92:34:b4:f0:38:9a:95:e5:f7:0b:68:a3: c8:16:b7:c8:0a:73:14:96:4a:d3:14:d5:4d:7f:11: ec:d4:fd:eb:55:52:be:9e:3a:e0:89:b0:93:15:9a: cd:63:1e:31:07:35:50:92:16:53:d6:49:b8:ad:81: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:70:00:F0:04:D9:3D:6E:03:D4:13:B8:BF:74:02:EC:56:69:DC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.129.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:07:8b:67:88:b7:8f:de:a1:ea:e1:64:46:00:e8:b8:44: 4c:a0:d7:06:fc:bf:11:e8:e9:ab:29:6f:fe:7b:f0:f7:95:d0: 6c:53:91:70:50:c5:26:de:d1:ce:de:ce:29:a2:a9:e3:0f:2a: 7e:4d:65:3e:e7:2b:59:50:46:6f:c8:d2:11:fb:77:ed:e2:80: 8b:c7:53:a4:93:9f:1b:dc:ca:54:2b:2c:3f:d3:12:b5:fd:5c: a5:2b:a3:de:9e:e4:b1:fe:e6:8c:af:57:2e:55:15:78:38:f6: 06:c3:c2:12:20:fb:fc:e9:c3:65:e5:31:19:8c:7c:d5:d9:bf: 48:0e:bf:56:6b:a0:8a:6e:cc:6c:52:67:da:17:64:69:e9:29: 84:66:28:d5:c4:bb:64:71:ea:6d:c6:28:68:ab:4e:e8:03:41: a4:4e:22:98:cc:85:e5:46:ac:55:70:4b:84:1a:71:14:31:c3: e6:a9:42:2f:9a:89:3b:0b:20:a6:81:25:da:ae:4f:62:a7:61: 81:1d:2d:1c:4a:ca:33:63:13:14:7b:55:1f:9d:ff:56:8e:43: a0:b7:2d:f9:81:65:2f:22:28:22:9d:ab:c1:6d:6c:a2:10:07: b6:a2:86:e4:d4:33:63:3c:20:f7:5a:b3:f4:34:a4:23:74:ea: a4:d4:23:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaV8DaRs5/09UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk MTM2YmIyMDItZjhlZC00ZmY2LThlYTgtZjZlOTI1OGIzMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirbMxpnjVroyDLaApWpFechXwSm94N6pV62/ xA9cYDl/8B5ky8HAdl5cUPM8BxOOLG2+lw86BK0Il1j5BZ3urt8pBqjbEAiMDbRH tYkM2Mxr0NHTeurZ1j3/pMR3VNoAtoegXrqVPSKbGChH+c4CWagnvtauJoxY2vCT ittulAXeJSa36NWbdkVN6BLGSM+J5Ovb6S54SZMwg5atMlfCoy8rErYaU1FfLcK+ 50F1erEMTF/mKGx7G/yr+2B4/TIJr2BksY2SNLTwOJqV5fcLaKPIFrfICnMUlkrT FNVNfxHs1P3rVVK+njrgibCTFZrNYx4xBzVQkhZT1km4rYGiTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpwAPAE2T1uA9QTuL90AuxWadwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTc2YjFkN2ItMTYyNy0z ZDkzLTkxNWYtOTFlMDM2NmY5Zjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4cB4tniLeP3qHq4WRGAOi4REyg1wb8vxHo6aspb/578PeV0GxTkXBQ xSbe0c7ezimiqeMPKn5NZT7nK1lQRm/I0hH7d+3igIvHU6STnxvcylQrLD/TErX9 XKUro96e5LH+5oyvVy5VFXg49gbDwhIg+/zpw2XlMRmMfNXZv0gOv1ZroIpuzGxS Z9oXZGnpKYRmKNXEu2Rx6m3GKGirTugDQaROIpjMheVGrFVwS4QacRQxw+apQi+a iTsLIKaBJdquT2KnYYEdLRxKyjNjExR7VR+d/1aOQ6C3LfmBZS8iKCKdq8FtbKIQ B7aihuTUM2M8IPdas/Q0pCN06qTUI5U= -----END CERTIFICATE-----Generated at Tue Jul 1 16:53:27 2025 by rpki-client