$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8b973ca9-bd12-3e31-93d5-aa486a4d492b.roa File: 8b973ca9-bd12-3e31-93d5-aa486a4d492b.roa (raw, json) Hash identifier: 4AzZWmHQg6jwIVeB0kuUKayFjXGlk7zhlX1NiLQeHX4= Subject key identifier: 12:AA:45:8A:6B:83:9C:1F:06:82:33:B4:3E:49:16:9F:F2:F0:98:B1 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A56004D305F1A732D5A290950 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8b973ca9-bd12-3e31-93d5-aa486a4d492b.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 13768 IP address blocks: 64.226.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:4d:30:5f:1a:73:2d:5a:29:09:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=e45e5cf8-b047-48ee-b1c9-cb55b101a3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:fe:76:a2:80:2e:d9:1d:da:c0:e6:82:63: e1:3b:11:ed:07:b7:e0:fd:d7:4a:cd:3d:af:a9:84: d7:7a:d0:50:83:c4:0c:19:0d:58:37:e0:f3:09:84: c5:1c:1e:3c:50:fe:b8:fb:a3:aa:5f:2e:07:fe:c8: 4e:b0:46:1c:af:58:18:3f:d2:d3:c4:98:45:bb:dc: 57:f8:0c:00:87:7f:75:04:81:28:73:e2:12:ac:f7: 84:10:89:28:38:aa:bc:82:f8:79:bc:a3:e5:0c:39: 13:42:57:25:40:7d:37:18:b3:aa:1b:73:1f:77:88: 25:2f:14:90:ab:5c:12:9e:1c:e0:91:c9:32:f5:90: e0:ab:73:e7:63:7e:b4:2a:ba:f4:59:a4:7c:c3:52: f3:8d:d9:a4:88:0b:bd:fb:39:14:cc:fc:9c:42:e0: 65:cd:00:f9:46:e8:15:d4:1d:64:02:4b:3a:57:13: 80:3f:75:fe:07:46:56:d9:ff:98:eb:a8:3b:72:a0: a3:67:17:67:6d:1d:5d:24:01:9f:30:53:48:8a:10: f8:62:96:a3:25:35:bb:81:a4:d5:ce:08:a7:c8:10: 89:73:03:02:9e:be:c3:2b:0c:ee:c8:1d:81:e0:34: 96:d8:28:cd:c4:2f:b1:48:5e:c0:84:1a:c3:28:c6: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:45:8A:6B:83:9C:1F:06:82:33:B4:3E:49:16:9F:F2:F0:98:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8b973ca9-bd12-3e31-93d5-aa486a4d492b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.226.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:13:13:80:20:46:ff:61:5e:44:76:42:67:25:ec:cc:1c:ab: 3b:50:ec:cf:da:04:3f:66:44:13:a1:46:b7:bf:b9:00:a2:e5: a6:13:c0:75:08:a6:72:9f:f9:0b:de:ac:e9:bc:1f:42:cb:43: 61:d4:b7:25:41:36:d7:c8:ce:ec:85:76:a2:8c:3b:bf:8f:dc: 1b:cc:71:37:0d:3a:c5:d3:5e:8d:2b:93:27:3d:b4:1d:42:c4: f9:fe:6d:1f:f3:df:c9:40:8e:6b:2f:b8:3f:a2:c2:09:db:bd: a2:a1:a6:9c:1d:df:01:d0:4b:a0:ef:20:ca:f8:bf:d7:fb:53: e9:6b:3a:59:0d:31:ef:7e:7f:85:41:db:2c:fd:a5:42:70:61: 03:22:f7:e4:b6:1c:6f:ba:49:44:22:3a:e6:15:f9:54:d4:c7: dc:7b:98:f1:e5:59:15:95:d9:f7:dc:05:d3:d8:f0:5e:34:b5: 73:1a:43:31:1e:c5:a9:01:d6:13:d6:f5:15:09:ca:f8:5e:f7: 6c:8f:d0:c8:cc:dc:86:0f:32:f2:e7:3e:36:5d:d4:06:5a:d2: 57:a5:02:8e:43:7f:d4:2a:e3:ab:9f:42:86:37:dd:90:1b:0f: c0:1f:0a:61:06:ff:f5:d3:bd:e5:b9:44:39:74:7d:eb:ad:3d: d1:d1:d8:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAE0wXxpzLVopCVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk ZTQ1ZTVjZjgtYjA0Ny00OGVlLWIxYzktY2I1NWIxMDFhM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3/+dqKALtkd2sDmgmPhOxHtB7fg/ddKzT2v qYTXetBQg8QMGQ1YN+DzCYTFHB48UP64+6OqXy4H/shOsEYcr1gYP9LTxJhFu9xX +AwAh391BIEoc+ISrPeEEIkoOKq8gvh5vKPlDDkTQlclQH03GLOqG3Mfd4glLxSQ q1wSnhzgkcky9ZDgq3PnY360Krr0WaR8w1LzjdmkiAu9+zkUzPycQuBlzQD5RugV 1B1kAks6VxOAP3X+B0ZW2f+Y66g7cqCjZxdnbR1dJAGfMFNIihD4YpajJTW7gaTV zginyBCJcwMCnr7DKwzuyB2B4DSW2CjNxC+xSF7AhBrDKMbRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKqRYprg5wfBoIztD5JFp/y8JixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOGI5NzNjYTktYmQxMi0z ZTMxLTkzZDUtYWE0ODZhNGQ0OTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOLPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4TE4AgRv9hXkR2Qmcl7MwcqztQ7M/aBD9mRBOhRre/uQCi5aYTwHUI pnKf+QverOm8H0LLQ2HUtyVBNtfIzuyFdqKMO7+P3BvMcTcNOsXTXo0rkyc9tB1C xPn+bR/z38lAjmsvuD+iwgnbvaKhppwd3wHQS6DvIMr4v9f7U+lrOlkNMe9+f4VB 2yz9pUJwYQMi9+S2HG+6SUQiOuYV+VTUx9x7mPHlWRWV2ffcBdPY8F40tXMaQzEe xakB1hPW9RUJyvhe92yP0MjM3IYPMvLnPjZd1AZa0lelAo5Df9Qq46ufQoY33ZAb D8AfCmEG//XTveW5RDl0feutPdHR2K8= -----END CERTIFICATE-----Generated at Mon Jun 30 14:51:39 2025 by rpki-client