$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa File: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (raw, json) Hash identifier: 9gYPg6ZgV+bZVINDgGflsEvGRgltWgXSooXCYUJ+H4Y= Subject key identifier: B9:BE:44:90:47:13:9B:35:91:5E:99:E0:04:A2:FB:58:D6:B6:FA:F7 Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F43285849F9DFDCF362F8F3DCE2434540 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 54579 IP address blocks: 65.255.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:dc:f3:62:f8:f3:dc:e2:43:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=c72bfe47-0224-422e-bdb2-cc65bc47d9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:dd:9e:63:b8:17:6c:30:32:de:a4:c3:9e: 79:35:e0:40:42:ab:9d:30:00:6b:f6:f8:46:2d:ed: 02:1e:1e:cb:1d:bf:29:5c:3c:f2:c2:9c:2c:cd:99: dd:6e:79:51:3b:71:73:b6:d0:56:11:43:87:29:29: dc:73:3a:67:f2:68:4f:24:6b:f7:a4:8c:ff:36:f7: 02:ec:dc:e3:20:d4:eb:22:6c:1d:39:29:6b:b6:e5: f9:09:c6:6f:b4:a8:c4:cf:94:1d:42:b5:b3:e2:e9: ec:af:64:18:33:0d:5a:8f:62:a6:5e:06:38:ef:14: 6d:99:28:40:3a:01:f3:5c:bc:8e:0b:1c:64:8e:70: 90:a6:3b:59:62:f1:4a:ff:24:17:21:d8:c1:0f:73: 5a:1c:c5:54:84:1a:8c:d9:2d:33:d9:4b:17:c1:f7: 98:b6:77:56:15:4b:b0:0f:fc:b4:23:5a:98:f0:33: 9e:a1:4e:23:28:62:5d:bd:ea:6e:12:6c:4e:24:47: f4:e6:01:eb:3b:43:01:0a:83:e9:85:61:cc:76:7e: d5:8d:53:79:70:07:b7:fb:6c:4f:ee:78:b5:1e:1b: 66:4e:d6:26:ff:1d:62:e4:e7:17:61:a3:02:e7:71: ed:c9:5c:c7:53:52:39:b5:59:e9:39:a2:b4:b0:bb: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:44:90:47:13:9B:35:91:5E:99:E0:04:A2:FB:58:D6:B6:FA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: 65.255.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:67:f5:40:b9:e7:cb:e8:ab:40:34:d9:cb:df:4c:2b:d6:00: dd:c7:34:d0:70:e0:e8:50:52:af:fe:79:e2:59:db:a9:92:72: f8:ee:86:cd:ca:29:c6:83:36:55:71:82:55:e7:ad:fc:9c:d2: 34:f2:eb:46:eb:bd:90:2f:ca:12:8b:9a:d6:3c:6d:fb:a6:93: c1:6f:5e:b7:bd:16:27:c6:0c:72:9a:01:ac:69:e5:f5:e8:a9: 4b:c3:58:9f:8c:45:68:bb:b8:d1:a8:65:6b:f7:0f:aa:c8:fb: 25:4f:d3:54:a5:e9:c1:ef:14:76:e1:f2:98:53:70:ca:aa:0c: 6d:ca:e9:d5:af:5c:34:f4:eb:f8:41:30:61:9a:cb:8f:54:7e: 7a:02:e1:02:a7:0c:4b:33:8c:5c:90:32:80:8e:32:13:d3:13: 6f:55:50:6a:ef:d1:41:c4:30:f0:9d:05:f2:80:f8:37:64:9e: ce:f1:9c:57:d7:d5:11:8d:d6:9e:13:93:c9:40:9d:fa:4a:eb: a3:10:e7:58:48:b4:92:73:c4:8e:ce:23:99:fb:df:a6:db:46: 72:24:f5:26:10:db:19:8a:b4:6c:ab:39:e4:cf:53:d4:5f:96: d4:0f:b6:86:53:06:57:72:7e:8e:bc:6b:28:a4:0f:35:12:1d: 6b:71:ab:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539zzYvjz3OJDRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk YzcyYmZlNDctMDIyNC00MjJlLWJkYjItY2M2NWJjNDdkOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jdnmO4F2wwMt6kw555NeBAQqudMABr9vhG Le0CHh7LHb8pXDzywpwszZndbnlRO3FzttBWEUOHKSncczpn8mhPJGv3pIz/NvcC 7NzjINTrImwdOSlrtuX5CcZvtKjEz5QdQrWz4unsr2QYMw1aj2KmXgY47xRtmShA OgHzXLyOCxxkjnCQpjtZYvFK/yQXIdjBD3NaHMVUhBqM2S0z2UsXwfeYtndWFUuw D/y0I1qY8DOeoU4jKGJdvepuEmxOJEf05gHrO0MBCoPphWHMdn7VjVN5cAe3+2xP 7ni1HhtmTtYm/x1i5OcXYaMC53HtyVzHU1I5tVnpOaK0sLsfewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLm+RJBHE5s1kV6Z4ASi+1jWtvr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvOWM4ZTE3YTAtYjYyNC0z Yjk4LTkyZTctZmJkNDBmMWY1ZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1n9UC558voq0A02cvfTCvWAN3HNNBw4OhQUq/+eeJZ26mScvjuhs3K KcaDNlVxglXnrfyc0jTy60brvZAvyhKLmtY8bfumk8FvXre9FifGDHKaAaxp5fXo qUvDWJ+MRWi7uNGoZWv3D6rI+yVP01Sl6cHvFHbh8phTcMqqDG3K6dWvXDT06/hB MGGay49UfnoC4QKnDEszjFyQMoCOMhPTE29VUGrv0UHEMPCdBfKA+Ddkns7xnFfX 1RGN1p4Tk8lAnfpK66MQ51hItJJzxI7OI5n736bbRnIk9SYQ2xmKtGyrOeTPU9Rf ltQPtoZTBldyfo68ayikDzUSHWtxq3E= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:10 2025 by rpki-client