$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa File: fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa (raw, json) Hash identifier: N0xal8NRjzIX5jJCFYa1adU1zmxROLRPqGpwHBYy8LI= Subject key identifier: E9:09:35:CD:0B:65:08:00:EB:B1:71:93:4E:3C:CA:30:34:86:09:2D Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584A268AAEE78CDD363F05B36200 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 13414 IP address blocks: 64.63.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ae:e7:8c:dd:36:3f:05:b3:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=c99da678-d85b-4611-b253-2fc0247d2621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:2e:35:b3:c8:e6:f8:3e:26:01:1b:f9:1b: 6d:74:b7:01:5d:f6:f9:b7:f3:40:bc:ac:0e:81:5c: c9:dc:7f:3d:0d:8a:9a:e4:62:1b:f9:ca:67:d0:c7: 8a:b5:7c:08:78:65:d3:f1:b8:9d:87:2e:5a:51:8a: 63:8c:1f:95:da:c5:cd:aa:ee:8c:1f:12:36:c7:3e: b3:66:89:a8:7e:da:b6:0c:bc:39:4e:93:ab:e8:03: 9c:ee:44:d1:65:d8:dc:2b:82:48:48:1f:f2:87:c0: 23:49:19:2e:a1:96:34:61:81:26:10:62:08:1a:c3: 43:de:13:f0:43:ca:8d:98:05:1f:a7:ca:e2:19:c5: 2f:2d:24:46:17:a4:65:2f:45:c0:fb:18:13:96:58: 89:de:24:50:72:f3:53:f8:27:31:72:a8:68:0d:eb: a6:61:cc:a4:66:1f:ce:5b:14:59:0a:a5:f3:54:54: 47:e3:46:4d:6a:72:44:7d:65:75:c9:a1:05:f0:f8: 57:e6:94:c8:8b:8e:d9:44:46:70:d7:74:4b:93:4d: c5:7c:ec:73:45:fe:21:e7:78:fb:47:aa:43:d3:1b: 76:0d:fd:f0:8f:bd:9b:34:09:6d:19:7c:c0:14:53: 41:10:3d:6e:57:3c:3e:6f:b9:66:4e:fd:37:ac:55: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:09:35:CD:0B:65:08:00:EB:B1:71:93:4E:3C:CA:30:34:86:09:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:41:19:86:73:b8:80:b0:b3:c8:db:a3:98:ce:c4:0d:8c:c3: ba:7f:3d:46:48:3d:3a:ee:55:41:14:3b:1d:a0:96:37:6f:bd: c5:fb:6b:94:3f:a4:b8:12:54:a3:40:1f:13:39:59:25:c9:24: e1:b7:ef:92:0d:8c:26:0a:b1:70:6a:fe:d2:3f:3e:db:10:98: e5:24:2a:9e:6f:ea:0b:63:fb:89:78:3b:9e:2a:3a:03:1c:1d: 1c:cb:90:c7:76:e7:cf:d8:91:32:63:20:83:4f:00:07:10:66: 80:b8:d3:34:7f:44:55:e6:8d:64:49:64:fe:22:24:c3:c2:65: bb:d9:ce:d3:f8:32:d5:88:de:e0:83:46:b9:cc:42:37:48:7e: bb:d6:0e:26:5f:d5:c4:16:88:65:31:20:ac:7b:14:cc:f6:05: 23:af:3a:34:02:b7:2a:d3:f0:3f:44:c2:93:48:72:10:49:da: ed:30:4f:da:54:03:5c:3d:ee:76:34:3b:27:69:8b:33:fe:5c: cb:b2:96:58:c2:a7:13:a6:e5:d8:29:9a:78:3c:aa:07:29:93: 7c:0c:e7:c5:89:59:fc:48:82:c9:3b:f3:37:d1:c8:17:1d:03: 90:3f:90:be:e1:19:2f:0b:a1:74:8c:2f:26:2e:81:1d:51:51: 3b:89:98:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiq7njN02PwWzYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk Yzk5ZGE2NzgtZDg1Yi00NjExLWIyNTMtMmZjMDI0N2QyNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQQuNbPI5vg+JgEb+RttdLcBXfb5t/NAvKwO gVzJ3H89DYqa5GIb+cpn0MeKtXwIeGXT8bidhy5aUYpjjB+V2sXNqu6MHxI2xz6z Zomoftq2DLw5TpOr6AOc7kTRZdjcK4JISB/yh8AjSRkuoZY0YYEmEGIIGsND3hPw Q8qNmAUfp8riGcUvLSRGF6RlL0XA+xgTlliJ3iRQcvNT+CcxcqhoDeumYcykZh/O WxRZCqXzVFRH40ZNanJEfWV1yaEF8PhX5pTIi47ZREZw13RLk03FfOxzRf4h53j7 R6pD0xt2Df3wj72bNAltGXzAFFNBED1uVzw+b7lmTv03rFUGBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkJNc0LZQgA67Fxk048yjA0hgktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZmVkNGFmNGEtMWE0Mi0z ZDA0LTkzN2QtNWRmZWM5YjMxMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBBGYZzuICws8jbo5jOxA2Mw7p/PUZIPTruVUEUOx2gljdvvcX7a5Q/ pLgSVKNAHxM5WSXJJOG375INjCYKsXBq/tI/PtsQmOUkKp5v6gtj+4l4O54qOgMc HRzLkMd258/YkTJjIINPAAcQZoC40zR/RFXmjWRJZP4iJMPCZbvZztP4MtWI3uCD RrnMQjdIfrvWDiZf1cQWiGUxIKx7FMz2BSOvOjQCtyrT8D9EwpNIchBJ2u0wT9pU A1w97nY0OydpizP+XMuylljCpxOm5dgpmng8qgcpk3wM58WJWfxIgsk78zfRyBcd A5A/kL7hGS8LoXSMLyYugR1RUTuJmAU= -----END CERTIFICATE-----Generated at Wed Jul 2 04:31:17 2025 by rpki-client