$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa File: af0a8e4a-42b9-3667-8ce3-865564983774.roa (raw, json) Hash identifier: 5yvDJolQfYj0DmuOZkqTMwoJByvbk0ARJeZENi+FLb4= Subject key identifier: 63:47:02:F1:5C:95:E2:38:2C:A3:2D:F3:25:67:BA:F9:84:23:1D:40 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F43285849F7151437BB9461A02CECBC40 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 11444 IP address blocks: 161.129.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:14:37:bb:94:61:a0:2c:ec:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=1c64f448-5eb6-4b70-8dd5-7037a38f0a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:82:2a:18:41:06:19:8e:51:a7:e7:02:f0: 04:cb:44:2e:d1:01:65:c9:f0:ca:7a:5d:45:68:f0: 18:d2:84:8d:6a:df:96:18:40:44:cb:d4:c3:24:90: 59:c5:fd:cb:05:6d:06:02:fa:e7:c1:54:31:22:0f: 63:68:7a:24:d8:38:68:e9:46:43:24:31:e2:7c:18: 73:51:d6:35:13:9d:59:92:f6:cf:8e:6b:64:3a:17: 4f:b8:9b:ba:49:a7:9a:cf:d7:46:88:fd:18:7c:b5: 56:f9:5a:e7:a9:4e:a2:61:a6:0d:ea:86:1e:18:b6: cf:d1:72:e7:16:68:88:8c:54:1f:a1:f5:15:6f:e2: 86:1b:e1:68:6e:9c:9d:a0:74:dc:ca:06:ba:20:40: df:b5:bb:eb:87:dc:99:d4:27:a8:17:3c:b9:4c:2c: a1:61:26:1a:24:ee:64:8e:c7:44:18:78:2b:94:77: 01:1e:79:c3:80:85:12:91:a3:d5:89:cb:59:42:95: 17:2f:d9:8c:30:33:9b:3a:9e:0f:01:1b:8f:0a:0f: 17:e5:e9:67:7e:c1:d0:60:68:bd:e2:c4:25:cc:ef: 93:09:a4:f5:26:82:63:8f:8f:2d:c0:e8:54:37:6c: 77:bf:82:7a:51:91:1c:b0:3e:c2:a5:88:11:bd:46: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:47:02:F1:5C:95:E2:38:2C:A3:2D:F3:25:67:BA:F9:84:23:1D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:eb:90:c7:4e:3c:82:32:e7:f2:79:33:b7:5a:94:a4:32:d5: 88:64:ad:29:ab:30:69:b3:14:63:b0:34:e6:ac:74:1d:cf:62: 1c:e8:a4:b6:f6:00:0d:af:1d:f2:39:b7:fc:b0:84:f3:34:68: e1:58:cc:81:af:7c:55:8f:99:7a:51:82:9a:ed:6d:7e:b2:b9: 36:ef:1b:98:e9:55:2d:9d:db:40:74:9b:d7:50:8c:60:ec:d2: 9a:97:df:56:17:1e:ad:47:ae:36:f4:db:02:45:f7:57:3b:21: 69:1f:d2:8a:5a:b4:f9:1d:7b:dd:39:11:5b:f2:70:35:0f:2d: f9:75:3d:33:21:a6:62:24:67:49:c5:92:4f:48:0c:82:e6:ac: 8b:c8:93:5d:9e:00:16:b0:cf:a9:52:dd:41:07:5a:53:aa:08: 67:d1:47:58:23:2c:0b:a0:5e:34:99:31:9e:f7:18:ae:35:64: 0f:e3:1a:33:f7:ae:f3:46:28:a6:3e:33:84:2d:40:0e:cc:c4: c0:a7:1d:ea:eb:01:79:3b:69:38:7c:11:e6:4b:37:41:0a:5c: 92:a9:47:52:ca:03:97:3b:f1:5b:9f:f0:cd:09:1f:dd:38:67: 49:d5:17:72:d9:35:2f:cd:29:ee:46:6b:8b:ab:21:88:7c:fa: f0:4a:f2:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRQ3u5RhoCzsvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MWM2NGY0NDgtNWViNi00YjcwLThkZDUtNzAzN2EzOGYwYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3aCKhhBBhmOUafnAvAEy0Qu0QFlyfDKel1F aPAY0oSNat+WGEBEy9TDJJBZxf3LBW0GAvrnwVQxIg9jaHok2Dho6UZDJDHifBhz UdY1E51ZkvbPjmtkOhdPuJu6Saeaz9dGiP0YfLVW+VrnqU6iYaYN6oYeGLbP0XLn FmiIjFQfofUVb+KGG+FobpydoHTcyga6IEDftbvrh9yZ1CeoFzy5TCyhYSYaJO5k jsdEGHgrlHcBHnnDgIUSkaPVictZQpUXL9mMMDObOp4PARuPCg8X5elnfsHQYGi9 4sQlzO+TCaT1JoJjj48twOhUN2x3v4J6UZEcsD7CpYgRvUb1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNHAvFcleI4LKMt8yVnuvmEIx1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvYWYwYThlNGEtNDJiOS0z NjY3LThjZTMtODY1NTY0OTgzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjrkMdOPIIy5/J5M7dalKQy1YhkrSmrMGmzFGOwNOasdB3PYhzopLb2 AA2vHfI5t/ywhPM0aOFYzIGvfFWPmXpRgprtbX6yuTbvG5jpVS2d20B0m9dQjGDs 0pqX31YXHq1Hrjb02wJF91c7IWkf0opatPkde905EVvycDUPLfl1PTMhpmIkZ0nF kk9IDILmrIvIk12eABawz6lS3UEHWlOqCGfRR1gjLAugXjSZMZ73GK41ZA/jGjP3 rvNGKKY+M4QtQA7MxMCnHerrAXk7aTh8EeZLN0EKXJKpR1LKA5c78Vuf8M0JH904 Z0nVF3LZNS/NKe5Ga4urIYh8+vBK8s0= -----END CERTIFICATE-----Generated at Tue Jul 1 20:00:26 2025 by rpki-client