$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa File: 7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa (raw, json) Hash identifier: QEGpJJLrYjRkxmcFw64VUaZW+5jPZSny0jyTaz7vGpI= Subject key identifier: AC:E9:D3:34:4D:4D:07:2E:2F:B9:57:98:AA:A2:F5:9E:8C:1F:32:3D Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A5600538208E5DF37B01CB900 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 13768 IP address blocks: 64.226.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:53:82:08:e5:df:37:b0:1c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=85c7e776-eaaa-499d-9ecf-27b93005e41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:5f:90:0c:b0:9d:9a:a7:33:42:27:78:f3: ff:18:c6:da:96:21:9f:e3:7f:81:90:fc:d6:39:dc: 67:5a:dc:a5:c8:1b:55:1b:ea:5b:00:60:19:95:99: 0f:ff:44:32:b9:d4:9d:7f:2d:1a:f0:fd:ae:60:e8: ae:2d:53:16:fb:c3:ce:72:8a:7a:8e:68:60:bb:f5: c9:77:96:dc:95:22:c1:bc:ed:2a:b2:e0:e3:75:f3: 2b:a2:c3:e2:af:94:d6:d6:75:7c:24:ff:f7:40:e6: ce:ec:6e:6c:9e:02:c0:c6:1c:09:bb:74:27:ac:19: 3c:d1:7c:a5:aa:3e:47:56:e5:32:1d:31:8f:96:d0: 43:f7:3e:66:1d:4f:b3:b9:e9:6b:2f:32:45:68:d5: 6d:1b:36:20:8d:db:6b:92:d7:ff:09:9b:ce:a1:fd: be:63:f2:eb:1b:fc:bc:d0:78:55:19:d9:a1:92:e4: 7d:65:c5:99:85:f9:7d:d7:b9:cf:03:b1:09:59:b9: 40:9f:02:93:09:42:33:e3:86:2c:a1:26:62:19:fc: 9e:8e:9c:14:1b:5c:8d:5b:b0:84:c0:87:50:e4:4d: 72:6c:86:4c:b6:a1:9a:0f:0a:25:de:04:f9:a2:06: 38:d8:77:5b:4d:6e:02:90:fa:6a:d0:cf:90:d8:7f: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E9:D3:34:4D:4D:07:2E:2F:B9:57:98:AA:A2:F5:9E:8C:1F:32:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.226.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:77:73:c6:24:c1:d8:6b:7a:04:a4:71:6b:2d:f1:10:4a:7d: f0:1b:58:82:a8:01:1f:ff:0a:8d:c3:fe:93:2e:6c:fa:d5:fa: f7:8c:59:a6:08:e9:63:13:95:39:fa:15:28:f0:09:17:3c:e6: f4:b7:f2:f3:db:1e:b7:3b:23:5e:68:55:cd:a9:ab:d7:d5:f6: 78:2b:fb:b4:f0:7f:39:d1:db:04:19:83:89:be:4a:82:4a:18: bb:51:bf:c4:07:1c:39:9d:29:12:70:fa:e0:61:88:bf:49:c2: af:3e:bb:da:c1:b8:1d:d2:16:18:45:1f:b0:52:ab:a4:93:8b: bc:2b:8b:20:be:03:39:4b:5e:a9:fe:1b:d9:e4:78:85:b9:e5: 4e:67:11:7b:a4:17:94:c5:d7:9f:10:aa:96:58:6f:af:4c:46: a9:04:78:2b:00:e7:c0:75:ea:fe:d4:0f:2e:f5:2d:d8:d2:9e: 7a:29:bf:43:cb:1d:6c:3e:05:29:d2:7a:26:88:8e:50:73:96: 0b:e6:71:ec:09:12:49:54:3c:48:9f:af:44:24:3f:e9:0e:d7: 9b:f1:a5:75:ce:4d:af:9e:4e:a6:b7:c3:bd:76:95:37:17:a3: 8e:b1:48:b5:26:0e:9e:98:a0:23:e7:2a:c3:13:19:5c:35:fd: 26:eb:27:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFOCCOXfN7AcuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk ODVjN2U3NzYtZWFhYS00OTlkLTllY2YtMjdiOTMwMDVlNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z1fkAywnZqnM0InePP/GMbaliGf43+BkPzW OdxnWtylyBtVG+pbAGAZlZkP/0QyudSdfy0a8P2uYOiuLVMW+8POcop6jmhgu/XJ d5bclSLBvO0qsuDjdfMrosPir5TW1nV8JP/3QObO7G5sngLAxhwJu3QnrBk80Xyl qj5HVuUyHTGPltBD9z5mHU+zuelrLzJFaNVtGzYgjdtrktf/CZvOof2+Y/LrG/y8 0HhVGdmhkuR9ZcWZhfl917nPA7EJWblAnwKTCUIz44YsoSZiGfyejpwUG1yNW7CE wIdQ5E1ybIZMtqGaDwol3gT5ogY42HdbTW4CkPpq0M+Q2H+a/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzp0zRNTQcuL7lXmKqi9Z6MHzI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvN2QxYWVlZGEtMzBmZC0z ZmRlLWFlMDUtMzdjYmNkZGFkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt3c8YkwdhregSkcWst8RBKffAbWIKoAR//Co3D/pMubPrV+veMWaYI 6WMTlTn6FSjwCRc85vS38vPbHrc7I15oVc2pq9fV9ngr+7TwfznR2wQZg4m+SoJK GLtRv8QHHDmdKRJw+uBhiL9Jwq8+u9rBuB3SFhhFH7BSq6STi7wriyC+AzlLXqn+ G9nkeIW55U5nEXukF5TF158QqpZYb69MRqkEeCsA58B16v7UDy71LdjSnnopv0PL HWw+BSnSeiaIjlBzlgvmcewJEklUPEifr0QkP+kO15vxpXXOTa+eTqa3w712lTcX o46xSLUmDp6YoCPnKsMTGVw1/SbrJ9Q= -----END CERTIFICATE-----Generated at Tue Jul 1 16:28:47 2025 by rpki-client