$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa File: 39e3616a-2c95-33e4-bb9f-abf4e24da626.roa (raw, json) Hash identifier: Y8+6ik7EiL/DIOkS1J1nCXDKHLVP70kVbLZ/Mw3yHog= Subject key identifier: C8:A6:80:24:89:E9:07:EE:9F:81:CE:7D:6B:BC:8A:0C:66:9A:8B:D4 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A3A1592D75A0B03748E91CB00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 22652 IP address blocks: 64.187.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:92:d7:5a:0b:03:74:8e:91:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=81f6dd1e-5147-4b67-8748-cc536ae4a0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:60:2c:ca:ba:bd:98:81:b7:aa:9d:b9:6f: 56:d2:e8:f3:b8:5b:5d:5c:70:13:85:a4:5c:7a:3b: 0b:a0:2d:aa:9d:56:30:1f:12:6e:2e:88:18:09:b4: e6:7e:69:26:35:02:37:dc:ea:3f:69:28:77:b2:d0: 5c:30:20:05:b2:4d:b7:69:4e:e2:b6:8f:87:45:91: 42:52:b2:d7:e5:cc:88:c9:9f:76:cc:56:92:66:fa: f2:4d:b9:a1:f0:f9:7d:1e:29:4c:57:6e:58:1d:67: 36:f2:ee:3a:1f:56:99:24:bc:63:6c:6a:cd:d5:66: e7:24:f8:79:b6:1c:1b:79:17:ac:68:a3:0d:e8:ed: 78:b5:92:8f:df:18:42:68:14:95:c7:ab:f7:51:43: 1f:69:6b:f4:97:d8:34:c0:e6:19:14:61:a3:e9:5a: 21:e5:32:40:17:6c:e0:c6:44:ea:df:fd:f2:c1:d0: a9:19:f5:22:24:1f:54:1a:79:63:db:d8:54:9b:a2: 79:58:6e:de:cb:6b:4d:00:c9:9e:bc:94:c0:4b:01: d3:14:97:82:8a:29:55:1e:78:54:fa:9d:bc:1a:0e: bb:a9:ad:80:da:f9:0d:67:33:0f:d9:8c:06:6f:c7: 64:df:90:88:40:47:13:82:90:e0:dc:40:18:95:4f: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:80:24:89:E9:07:EE:9F:81:CE:7D:6B:BC:8A:0C:66:9A:8B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 64.187.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1a:ea:49:c2:a9:48:cb:ba:f2:3f:55:ad:ca:88:6c:3e:d6: 86:6e:33:30:09:26:d6:c4:db:1b:1a:d0:fe:d9:3b:13:a2:84: b7:6e:c6:a9:3a:f4:d2:34:df:a9:83:58:d9:99:0a:aa:40:be: 2e:be:42:42:b9:de:c1:e6:11:10:e4:6f:c2:fb:a4:a3:cb:38: d7:c2:0e:41:ff:83:a6:6a:de:f8:49:c0:e2:72:3d:c0:65:9d: 0c:08:0c:f5:02:02:d5:e0:04:3c:b7:20:4a:b0:68:91:70:31: a9:94:03:68:bd:0a:96:33:4c:34:44:ae:c8:b4:16:0b:be:20: d9:1b:af:9a:eb:36:e3:17:ba:6b:42:09:5d:f9:8b:ed:83:4f: 56:33:61:3a:00:0f:78:e5:9b:09:9e:32:0f:c8:77:bc:c3:6c: 43:6e:ed:c1:1f:98:12:f8:2b:09:75:2d:8c:7f:9c:19:02:6f: 2d:81:10:91:9d:1b:be:01:6e:75:07:ad:00:97:41:02:d2:a0: df:41:a6:5a:3d:07:e5:ac:39:ba:48:ee:d0:ed:62:45:11:f6: f0:1a:e1:61:34:aa:89:b5:4e:30:f0:b9:18:10:7a:17:3f:cc: 70:15:56:32:93:b6:2d:26:46:70:9d:5f:d3:08:49:8a:5b:67: 2d:48:d3:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZLXWgsDdI6RywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ODFmNmRkMWUtNTE0Ny00YjY3LTg3NDgtY2M1MzZhZTRhMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptdgLMq6vZiBt6qduW9W0ujzuFtdXHAThaRc ejsLoC2qnVYwHxJuLogYCbTmfmkmNQI33Oo/aSh3stBcMCAFsk23aU7ito+HRZFC UrLX5cyIyZ92zFaSZvryTbmh8Pl9HilMV25YHWc28u46H1aZJLxjbGrN1WbnJPh5 thwbeResaKMN6O14tZKP3xhCaBSVx6v3UUMfaWv0l9g0wOYZFGGj6Voh5TJAF2zg xkTq3/3ywdCpGfUiJB9UGnlj29hUm6J5WG7ey2tNAMmevJTASwHTFJeCiilVHnhU +p28Gg67qa2A2vkNZzMP2YwGb8dk35CIQEcTgpDg3EAYlU+rVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMimgCSJ6Qfun4HOfWu8igxmmovUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzllMzYxNmEtMmM5NS0z M2U0LWJiOWYtYWJmNGUyNGRhNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLu+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoa6knCqUjLuvI/Va3KiGw+1oZuMzAJJtbE2xsa0P7ZOxOihLduxqk6 9NI036mDWNmZCqpAvi6+QkK53sHmERDkb8L7pKPLONfCDkH/g6Zq3vhJwOJyPcBl nQwIDPUCAtXgBDy3IEqwaJFwMamUA2i9CpYzTDRErsi0Fgu+INkbr5rrNuMXumtC CV35i+2DT1YzYToAD3jlmwmeMg/Id7zDbENu7cEfmBL4Kwl1LYx/nBkCby2BEJGd G74BbnUHrQCXQQLSoN9Bplo9B+WsObpI7tDtYkUR9vAa4WE0qom1TjDwuRgQehc/ zHAVVjKTti0mRnCdX9MISYpbZy1I0/4= -----END CERTIFICATE-----Generated at Wed Jul 2 11:08:48 2025 by rpki-client