$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa File: 68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa (raw, json) Hash identifier: 8K18EXxtu8m4E7AZ+403QbYD99rzknxiwSMX42Zca48= Subject key identifier: 00:65:0F:F4:01:22:B7:74:F4:99:F3:A2:90:4D:E4:56:F7:4F:AE:20 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584A454037D2DA2A4863A607D100 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 34774 IP address blocks: 199.64.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:37:d2:da:2a:48:63:a6:07:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=2204ed6c-6675-4eca-b167-ae8d46a38a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:16:bb:d2:0c:d8:06:4f:19:e6:80:8c:3c: f0:3b:37:13:45:a3:02:b9:2a:64:27:21:00:5a:ed: b2:ee:b1:f7:6f:ac:77:4f:03:34:83:b6:80:9b:03: 84:0b:31:5c:dc:b9:8a:07:ad:12:40:65:7f:a4:1e: 99:35:f8:1d:38:62:84:0e:8a:2a:ea:e0:0a:7c:4d: 2e:b3:84:59:e9:7b:a7:4b:72:27:d1:0e:f8:f2:7a: 1c:b9:e6:e4:5f:a8:cc:24:d1:01:92:e7:52:20:f0: ae:83:60:f7:d9:5e:ad:c9:00:a9:ed:5a:cb:3b:05: 79:90:69:9b:61:2a:69:7b:05:15:eb:eb:72:2b:c3: c2:91:fb:dd:bc:61:e0:97:65:07:ea:e7:fb:2e:2c: a4:c1:ba:e5:71:94:a7:3d:e1:6d:c3:c3:c8:e9:b4: fd:94:41:51:15:84:73:50:35:d5:48:9c:2f:85:0e: 4d:5b:09:e6:f6:5e:c3:6f:e2:97:4f:16:a6:f9:03: 30:90:1b:9d:ef:96:4f:dd:75:7e:f3:2d:3a:ce:8c: d8:f7:8a:f4:c0:ab:de:ea:5a:d4:81:89:f7:70:50: ed:90:4d:24:05:e9:a4:b2:99:9e:c4:52:78:4a:59: a4:0a:12:01:bf:ec:91:bf:b4:93:90:02:52:ce:5b: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:65:0F:F4:01:22:B7:74:F4:99:F3:A2:90:4D:E4:56:F7:4F:AE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:47:b6:2c:ed:71:f2:e3:21:37:43:30:87:97:18:fc:e2:d9: 1e:d6:d5:5a:7d:39:94:2c:57:10:a8:86:31:6b:5e:3b:be:d9: ab:85:32:d1:22:cf:99:75:78:90:ec:cf:16:b1:40:57:1e:d3: db:71:d7:f7:c1:e6:bd:48:f9:80:be:79:f4:73:50:b7:65:6f: 41:a9:92:e4:28:59:7b:10:a0:78:a2:01:ae:15:e6:5d:b4:5d: 97:b4:d5:18:ef:2b:42:06:0e:54:a5:d2:d6:06:bd:14:99:dd: b8:af:9c:70:4f:35:81:9d:d3:7c:42:65:b9:fe:d3:a9:94:3f: af:0a:2f:7e:cc:f4:a2:64:64:4c:a8:98:88:ad:04:54:3e:c9: c2:e8:c6:da:07:b5:13:bb:9a:c1:c2:f6:7b:52:46:69:89:52: 0c:da:0c:e6:c1:60:05:68:64:68:0f:ec:36:9d:09:73:7a:7a: 3c:d1:67:98:b1:da:84:dd:a0:a2:1e:9e:48:0f:2f:19:d3:91: 61:29:b0:b5:7e:00:45:1d:7e:65:08:92:3a:0e:85:93:af:16: bc:77:c2:6d:0d:28:99:be:bb:1d:34:5b:a3:7a:ba:36:71:99: d3:5b:c7:bf:db:74:31:b3:ef:f7:9c:d8:33:bd:06:f9:19:58: 98:06:5c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDfS2ipIY6YH0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MjIwNGVkNmMtNjY3NS00ZWNhLWIxNjctYWU4ZDQ2YTM4YThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4QWu9IM2AZPGeaAjDzwOzcTRaMCuSpkJyEA Wu2y7rH3b6x3TwM0g7aAmwOECzFc3LmKB60SQGV/pB6ZNfgdOGKEDooq6uAKfE0u s4RZ6XunS3In0Q748nocuebkX6jMJNEBkudSIPCug2D32V6tyQCp7VrLOwV5kGmb YSppewUV6+tyK8PCkfvdvGHgl2UH6uf7LiykwbrlcZSnPeFtw8PI6bT9lEFRFYRz UDXVSJwvhQ5NWwnm9l7Db+KXTxam+QMwkBud75ZP3XV+8y06zozY94r0wKve6lrU gYn3cFDtkE0kBemkspmexFJ4SlmkChIBv+yRv7STkAJSzlv1ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABlD/QBIrd09JnzopBN5Fb3T64gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNjhmYmY0NmEtNjAzMC0z ZWI5LWExYTUtNzIwNjBhNWU3MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVHtiztcfLjITdDMIeXGPzi2R7W1Vp9OZQsVxCohjFrXju+2auFMtEi z5l1eJDszxaxQFce09tx1/fB5r1I+YC+efRzULdlb0GpkuQoWXsQoHiiAa4V5l20 XZe01RjvK0IGDlSl0tYGvRSZ3bivnHBPNYGd03xCZbn+06mUP68KL37M9KJkZEyo mIitBFQ+ycLoxtoHtRO7msHC9ntSRmmJUgzaDObBYAVoZGgP7DadCXN6ejzRZ5ix 2oTdoKIenkgPLxnTkWEpsLV+AEUdfmUIkjoOhZOvFrx3wm0NKJm+ux00W6N6ujZx mdNbx7/bdDGz7/ec2DO9BvkZWJgGXDE= -----END CERTIFICATE-----Generated at Tue Jul 1 15:03:25 2025 by rpki-client