$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa File: 4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa (raw, json) Hash identifier: qVf7I+EtLiD/cA0gFqwjJ2yCpBuatg+FD3Xo+2imxOU= Subject key identifier: FE:2D:BE:79:0D:39:7E:32:8B:42:AC:0F:3C:DE:A9:9D:BE:F1:0A:D8 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A4F8B0C37A378C738F4EB1B00 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa Signing time: Wed 25 Jun 2025 17:29:47 +0000 ROA not before: Wed 25 Jun 2025 17:29:47 +0000 ROA not after: Tue 23 Sep 2025 17:29:47 +0000 asID: 26967 IP address blocks: 64.136.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:8b:0c:37:a3:78:c7:38:f4:eb:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 25 17:29:47 2025 GMT Not After : Sep 23 17:29:47 2025 GMT Subject: CN=ff07a07a-c7d3-4b1e-9ea9-ed578a4bc0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:6c:49:70:ca:80:ce:2c:14:66:f3:c1:94: af:ac:80:d2:0c:fe:47:b9:96:bd:ea:92:da:7a:49: f2:83:9e:ee:9d:0e:4a:1f:7a:62:66:c6:06:6b:0f: 0d:0f:cb:3a:1f:57:92:ad:42:93:22:96:77:be:a1: bc:eb:4b:a9:0d:bc:a8:00:9d:c1:5d:3f:f4:5c:0f: 5b:3e:bf:b4:9d:a8:92:4b:bf:6f:6f:a4:b2:58:26: 07:c1:a5:6a:34:3d:15:a0:38:8f:9d:86:ad:c2:53: a9:bb:9b:ac:14:ef:d8:1e:46:1b:3a:3c:f4:fb:46: 63:78:5f:d4:cd:51:8a:d7:4f:46:f0:16:0e:c4:9d: ee:d0:99:07:11:79:6e:e6:1b:15:72:7b:59:7a:ac: 93:61:67:a2:f5:9e:65:2d:2c:e1:da:1c:9f:63:c7: 80:b3:25:fc:dd:d2:e7:f1:89:66:0b:6e:c4:fe:4e: 9d:7e:6b:80:50:e9:03:ff:fb:1b:6a:fe:ea:38:8e: 84:41:9c:10:6d:b7:d4:26:a7:3e:c6:a2:52:27:74: c4:a2:3d:3a:45:35:77:83:fc:82:56:1c:30:63:5f: 9e:83:d8:ba:c6:73:42:f1:8f:5b:31:8e:21:a0:8a: a5:68:77:ac:b5:69:ff:84:d0:fc:39:64:d5:61:1c: 70:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2D:BE:79:0D:39:7E:32:8B:42:AC:0F:3C:DE:A9:9D:BE:F1:0A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:31:ac:b7:41:18:85:ea:8a:fd:77:2f:07:80:9f:56:70:51: f6:81:93:39:ac:bf:bd:83:d3:4a:84:fb:9e:7f:c5:2c:8d:e7: 36:50:35:63:2f:9d:e3:74:01:d7:fd:60:fb:88:7a:9d:24:1b: f1:04:07:53:48:86:5c:f3:00:59:41:bb:a5:9e:5b:f8:a1:48: c1:27:ce:12:6e:5a:de:78:23:ad:94:0c:d2:ce:ee:f3:9b:d0: 78:c0:cd:a0:08:22:00:3f:b2:f9:7c:46:94:fb:72:6a:a9:88: e9:4b:1c:12:65:81:8c:af:59:24:05:aa:b7:86:74:c6:35:a8: 80:31:6c:da:00:45:d5:cb:8b:4d:2c:dd:b2:3b:9c:d5:22:1d: c8:d3:b8:df:89:76:15:ad:88:3a:07:2f:df:05:92:a3:c4:c8: d4:aa:75:43:34:4b:15:8e:3d:25:0c:08:74:c1:4a:96:ed:a9: 27:40:64:e4:85:93:a8:37:00:94:0e:57:e8:a8:00:6e:92:37: 26:c7:6a:3c:b4:7a:ca:d3:fd:a3:07:1b:ed:19:c7:6a:85:15: 82:83:b1:51:91:c6:9d:44:56:6a:1c:c4:13:64:46:ae:e0:39: 9d:83:dd:19:f5:d8:a5:84:49:d3:6e:26:cc:7c:b4:2d:df:08: c0:68:33:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPiww3o3jHOPTrGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYyNTE3Mjk0N1oXDTI1MDkyMzE3Mjk0N1owLzEtMCsGA1UEAxMk ZmYwN2EwN2EtYzdkMy00YjFlLTllYTktZWQ1NzhhNGJjMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijVsSXDKgM4sFGbzwZSvrIDSDP5HuZa96pLa eknyg57unQ5KH3piZsYGaw8ND8s6H1eSrUKTIpZ3vqG860upDbyoAJ3BXT/0XA9b Pr+0naiSS79vb6SyWCYHwaVqND0VoDiPnYatwlOpu5usFO/YHkYbOjz0+0ZjeF/U zVGK109G8BYOxJ3u0JkHEXlu5hsVcntZeqyTYWei9Z5lLSzh2hyfY8eAsyX83dLn 8YlmC27E/k6dfmuAUOkD//sbav7qOI6EQZwQbbfUJqc+xqJSJ3TEoj06RTV3g/yC VhwwY1+eg9i6xnNC8Y9bMY4hoIqlaHestWn/hND8OWTVYRxwBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4tvnkNOX4yi0KsDzzeqZ2+8QrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNDU4OWU3MmQtZjVmYi0z NjMwLWFiZmYtNmVlZThkMjFkOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQxrLdBGIXqiv13LweAn1ZwUfaBkzmsv72D00qE+55/xSyN5zZQNWMv neN0Adf9YPuIep0kG/EEB1NIhlzzAFlBu6WeW/ihSMEnzhJuWt54I62UDNLO7vOb 0HjAzaAIIgA/svl8RpT7cmqpiOlLHBJlgYyvWSQFqreGdMY1qIAxbNoARdXLi00s 3bI7nNUiHcjTuN+JdhWtiDoHL98FkqPEyNSqdUM0SxWOPSUMCHTBSpbtqSdAZOSF k6g3AJQOV+ioAG6SNybHajy0esrT/aMHG+0Zx2qFFYKDsVGRxp1EVmocxBNkRq7g OZ2D3Rn12KWESdNuJsx8tC3fCMBoM/E= -----END CERTIFICATE-----Generated at Sun Jun 29 23:34:37 2025 by rpki-client