$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa File: a8d50708-183d-32fa-8e34-b0e93ebefc17.roa (raw, json) Hash identifier: cFZt92lTnI47QelnDDTJJld1Y6JFrb2Eu2zWZawbaXI= Subject key identifier: 68:01:4E:44:0E:99:C1:29:89:0D:C5:9E:06:C1:E4:D0:42:75:A0:BC Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849E7BA819A58F3D5E43BEF9780 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 394111 IP address blocks: 64.147.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:81:9a:58:f3:d5:e4:3b:ef:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=0144c6af-abe4-4727-a44b-69859ddc6a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:5d:c2:d3:19:ef:c5:b1:fa:ab:fb:0f:9d: 7c:1f:47:f0:92:70:73:9a:bf:9f:25:6c:a4:68:ab: 5c:ce:b9:c0:b4:5b:a1:ba:c3:db:72:e5:36:8d:cf: 26:06:1d:c1:d1:66:8a:3c:c6:ab:61:bc:11:61:a5: 86:1b:4f:d9:f8:1c:98:51:4e:14:07:21:59:4c:54: 56:e0:30:31:5b:2b:d1:ae:a4:a3:74:52:5b:4e:52: a8:3d:90:53:7b:fc:aa:88:e6:71:ae:1a:6e:37:11: 7a:06:24:43:e5:13:9e:23:b6:77:20:fa:c0:bd:48: 00:83:67:5c:4d:80:ba:6e:a4:28:71:13:16:26:67: 39:3e:52:b7:38:36:1e:29:2a:96:25:71:78:92:53: 27:eb:a7:6a:80:dc:19:2f:2a:61:72:6a:c8:8d:d4: c0:d4:46:f6:6e:fd:f7:96:de:75:57:dc:88:f6:c8: 8e:73:35:34:17:92:c6:5d:d7:26:00:83:9f:06:cf: d7:74:8e:80:15:11:14:5c:96:c1:fa:e0:26:f1:f4: 7d:16:3f:19:c1:15:7c:ad:3e:66:ba:28:e7:85:33: 0d:28:bb:0a:0a:fd:35:ea:bb:fc:fb:46:13:de:be: 43:03:44:32:8d:42:02:63:ab:6f:c8:d8:41:c4:88: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:01:4E:44:0E:99:C1:29:89:0D:C5:9E:06:C1:E4:D0:42:75:A0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:33:07:23:bc:e7:46:93:40:7d:10:dd:ad:e7:f9:b7:41:88: 62:36:1c:4a:bc:ec:89:64:0a:f3:53:90:2c:28:d8:fe:36:d2: 27:0b:4e:6b:1d:d4:68:87:d1:aa:68:c4:b1:c4:69:6d:4c:9b: 9d:6c:46:de:14:27:43:a8:ea:f4:f8:79:d6:9d:2e:c2:c4:5c: d9:9f:df:8c:2f:64:d0:02:05:9c:3c:d1:79:d2:20:d5:64:87: 56:3a:e2:df:1d:1e:fe:c6:a8:50:38:45:9f:b8:c7:22:4f:2d: 18:6f:ac:62:29:89:86:3c:40:72:08:bb:7f:13:d1:b2:f8:d0: 17:8f:5d:7f:2c:7d:b0:8e:33:ca:a6:02:e2:1e:68:ea:24:79: 44:d3:1c:3f:9c:70:21:75:e6:04:90:2f:c8:71:b7:7e:5d:1d: 7c:0a:01:0e:3a:cd:d0:41:fe:82:61:9e:d5:e2:2c:18:4c:46: af:7b:6b:ac:6b:da:ea:d1:6b:68:6a:58:5f:29:62:34:82:0e: 5c:22:f4:76:5b:b5:93:e8:03:6a:ce:d1:ef:8f:76:a4:f1:fd: c6:5f:c3:be:12:dd:c9:21:79:dd:ae:d2:d9:74:96:9e:8d:4e: a4:b8:43:27:19:94:28:d1:1a:1d:3b:e5:2a:45:81:82:56:b9: bc:1a:f4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoGaWPPV5Dvvl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MDE0NGM2YWYtYWJlNC00NzI3LWE0NGItNjk4NTlkZGM2YTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyVdwtMZ78Wx+qv7D518H0fwknBzmr+fJWyk aKtczrnAtFuhusPbcuU2jc8mBh3B0WaKPMarYbwRYaWGG0/Z+ByYUU4UByFZTFRW 4DAxWyvRrqSjdFJbTlKoPZBTe/yqiOZxrhpuNxF6BiRD5ROeI7Z3IPrAvUgAg2dc TYC6bqQocRMWJmc5PlK3ODYeKSqWJXF4klMn66dqgNwZLyphcmrIjdTA1Eb2bv33 lt51V9yI9siOczU0F5LGXdcmAIOfBs/XdI6AFREUXJbB+uAm8fR9Fj8ZwRV8rT5m uijnhTMNKLsKCv016rv8+0YT3r5DA0QyjUICY6tvyNhBxIh7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgBTkQOmcEpiQ3FngbB5NBCdaC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYThkNTA3MDgtMTgzZC0z MmZhLThlMzQtYjBlOTNlYmVmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIzByO850aTQH0Q3a3n+bdBiGI2HEq87IlkCvNTkCwo2P420icLTmsd 1GiH0apoxLHEaW1Mm51sRt4UJ0Oo6vT4edadLsLEXNmf34wvZNACBZw80XnSINVk h1Y64t8dHv7GqFA4RZ+4xyJPLRhvrGIpiYY8QHIIu38T0bL40BePXX8sfbCOM8qm AuIeaOokeUTTHD+ccCF15gSQL8hxt35dHXwKAQ46zdBB/oJhntXiLBhMRq97a6xr 2urRa2hqWF8pYjSCDlwi9HZbtZPoA2rO0e+PdqTx/cZfw74S3ckhed2u0tl0lp6N TqS4QycZlCjRGh075SpFgYJWubwa9JQ= -----END CERTIFICATE-----Generated at Wed Jul 2 04:19:50 2025 by rpki-client