$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa File: cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa (raw, json) Hash identifier: wYYZXcIeuxZ1n8/XWQeF7loOtT1iTlhT3t+e5h/gxa0= Subject key identifier: 13:BB:37:13:1F:3A:5B:A5:88:18:B0:AE:44:FB:E2:8C:23:03:E0:20 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A119AA830BBD747B6B21F1F00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 21949 IP address blocks: 64.137.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a8:30:bb:d7:47:b6:b2:1f:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=11d2f1ca-5127-47ef-98c8-a5417f4b0659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f6:4c:97:cd:f3:fa:15:a0:8c:82:97:71:83: f7:35:92:3c:9a:ac:98:2d:e4:39:fa:1a:cf:ba:4e: 80:d5:c3:f4:e1:25:8b:ce:fe:3a:94:64:ca:78:9d: 3b:ea:98:f4:4b:57:35:bb:2e:5a:06:ff:7c:15:2f: 59:09:31:b8:df:20:66:15:74:e0:ee:bb:ea:e9:f9: 36:28:87:94:a5:ce:f8:77:0a:f9:8e:60:b6:ff:14: 15:0a:c2:3a:b4:84:2e:f6:7e:e8:69:1b:00:8c:56: 0c:01:f0:ac:51:db:3c:ef:b5:aa:a3:8d:38:cc:ad: 20:36:0e:d5:58:ed:40:84:ee:19:5d:8e:74:1f:db: 1d:3f:1d:23:fd:01:4c:8d:d5:af:b9:6d:f0:93:4c: c9:ab:c0:4a:88:dd:b1:a6:1a:fd:7d:9c:a4:9e:80: ce:c9:fd:97:f8:3a:24:58:ed:1c:63:99:f6:d2:a1: cb:e7:96:6b:fe:8c:08:90:e2:14:ed:2f:6f:5b:b5: f1:7f:60:9f:36:59:1e:d2:9a:e9:fb:79:d3:45:f6: a7:f6:3b:ed:a4:1c:7e:36:fc:64:81:27:9a:d1:24: 4b:cb:3f:af:d0:5a:e9:75:f3:35:19:49:1b:8c:e5: 82:d6:71:9c:63:f0:9c:d5:9e:5f:58:49:de:af:be: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BB:37:13:1F:3A:5B:A5:88:18:B0:AE:44:FB:E2:8C:23:03:E0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.137.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f8:28:e2:b7:f8:fb:46:61:83:9f:4b:b0:b5:87:56:db:9b: 06:67:37:cd:4d:ba:df:bb:4b:a8:9e:86:44:4e:8c:c8:67:88: a7:94:a0:19:ec:e0:ea:b4:dc:d1:72:97:b0:90:41:9b:ea:67: 16:5f:7a:e4:fe:9f:35:93:83:22:62:be:da:6d:d1:d0:4c:30: d4:36:74:7c:82:51:e2:6e:59:8f:5d:38:ae:d5:4a:82:cc:8b: ab:9e:eb:be:68:38:5e:7a:d9:b2:f4:d4:15:3b:d2:25:eb:bc: 7a:60:88:1a:4b:5d:8f:71:8b:20:6b:71:ba:7f:10:2e:26:da: e0:a0:3d:18:56:4a:91:c2:4b:f7:1e:97:c5:f3:ee:b1:f4:ee: c0:41:70:5f:90:4c:f8:35:f8:a5:62:02:8d:46:43:f2:02:a3: ae:f9:1c:b5:0a:f8:08:92:a0:67:89:5d:54:59:97:b5:ed:d2: 98:be:2f:86:59:7f:80:69:fe:64:65:50:20:5d:d2:09:36:c6: 85:d6:fa:aa:09:31:00:d4:0b:87:e4:a8:f5:e4:b8:f0:ac:2c: da:d8:09:ee:8d:84:96:9f:85:99:70:44:a9:ff:e7:f9:6f:40: 27:05:af:a0:75:bb:8d:26:c4:1d:7c:ac:ba:a4:c4:58:02:6e: 26:27:aa:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqgwu9dHtrIfHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MTFkMmYxY2EtNTEyNy00N2VmLTk4YzgtYTU0MTdmNGIwNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PZMl83z+hWgjIKXcYP3NZI8mqyYLeQ5+hrP uk6A1cP04SWLzv46lGTKeJ076pj0S1c1uy5aBv98FS9ZCTG43yBmFXTg7rvq6fk2 KIeUpc74dwr5jmC2/xQVCsI6tIQu9n7oaRsAjFYMAfCsUds877Wqo404zK0gNg7V WO1AhO4ZXY50H9sdPx0j/QFMjdWvuW3wk0zJq8BKiN2xphr9fZyknoDOyf2X+Dok WO0cY5n20qHL55Zr/owIkOIU7S9vW7Xxf2CfNlke0prp+3nTRfan9jvtpBx+Nvxk gSea0SRLyz+v0FrpdfM1GUkbjOWC1nGcY/Cc1Z5fWEner765xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO7NxMfOluliBiwrkT74owjA+AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FmY2VlZTktNjYyMy0z ZGJjLThiN2ItODdiMDNiMWJkNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL4KOK3+PtGYYOfS7C1h1bbmwZnN81Nut+7S6iehkROjMhniKeUoBns 4Oq03NFyl7CQQZvqZxZfeuT+nzWTgyJivtpt0dBMMNQ2dHyCUeJuWY9dOK7VSoLM i6ue675oOF562bL01BU70iXrvHpgiBpLXY9xiyBrcbp/EC4m2uCgPRhWSpHCS/ce l8Xz7rH07sBBcF+QTPg1+KViAo1GQ/ICo675HLUK+AiSoGeJXVRZl7Xt0pi+L4ZZ f4Bp/mRlUCBd0gk2xoXW+qoJMQDUC4fkqPXkuPCsLNrYCe6NhJafhZlwRKn/5/lv QCcFr6B1u40mxB18rLqkxFgCbiYnquY= -----END CERTIFICATE-----Generated at Tue Jul 1 12:39:28 2025 by rpki-client