$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa File: e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa (raw, json) Hash identifier: yXtRDSzgovs6NX5ke6Wv8MBBZt+Kb6I7ZQLlsG8tHxg= Subject key identifier: C0:5F:31:77:22:C7:4A:A4:43:B2:F8:BD:92:B1:D3:C9:9A:83:7E:52 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849E7BA817E2B4E7AB94B752B80 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 21657 IP address blocks: 64.147.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:81:7e:2b:4e:7a:b9:4b:75:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=f592f46f-16ff-4c28-aa1f-5c0271ef82e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:38:32:da:75:f1:f7:0a:06:bb:37:d9:da: 6f:33:9d:b9:d1:36:58:73:cd:3a:2d:93:1a:7e:c4: d3:ba:e3:c9:70:51:c8:ef:b3:50:78:62:c3:5f:15: ba:7d:f7:d3:fa:20:17:e3:52:73:f4:26:09:0a:8f: 63:84:52:ea:4e:72:5c:d4:82:a9:81:ec:35:ea:c7: c0:00:4c:0a:c1:bd:76:40:09:f8:d5:32:ea:1a:db: cb:3a:6f:19:82:b4:9c:79:f3:5f:34:7a:92:04:e9: 1c:0c:5d:a4:3f:7f:29:17:41:c7:05:5a:4d:44:5a: 61:fa:52:26:3a:41:5b:bc:2a:1d:de:5b:13:c6:ce: 49:e5:ef:37:82:f8:a8:b7:5b:14:92:0e:de:ad:1f: 23:f0:41:c7:b1:51:24:ed:e5:a7:01:39:0c:34:34: f8:54:54:d2:c3:aa:9e:2c:76:cb:ce:62:e4:62:9c: 80:3c:0a:a9:ad:f6:06:dd:60:1a:58:21:d0:ef:30: 73:09:7f:88:3f:a0:34:fc:51:fe:d7:b2:04:dd:4c: 75:9c:37:ca:8b:cb:36:e4:c1:2f:b3:71:82:35:e2: 09:39:39:58:13:30:6b:a2:0b:17:ae:be:ed:e2:33: 26:36:b0:dd:14:29:1e:9a:bd:3b:55:5a:92:0f:0e: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5F:31:77:22:C7:4A:A4:43:B2:F8:BD:92:B1:D3:C9:9A:83:7E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:01:0d:37:6e:79:77:79:2c:f4:24:5a:e1:f7:e8:f4:24:bd: 78:bc:eb:b0:cc:58:b8:2b:6c:c3:90:f6:45:09:b1:f0:79:9f: c6:6d:92:d4:22:9a:17:1d:f6:29:a0:83:68:9e:8a:53:12:dc: a3:2e:73:71:11:66:95:68:c1:39:1f:f9:a9:b2:75:1d:32:f6: f5:d2:a7:0a:17:e3:f5:e7:d9:65:51:5d:46:5c:4b:57:3a:e7: 6c:71:08:34:1b:f8:7b:a1:b7:9e:dd:69:ee:76:28:51:02:44: 36:10:25:6d:a6:8b:ce:fa:88:0c:2d:6b:bd:c9:73:e8:49:63: 69:56:4b:2b:6b:55:b5:d2:b0:fc:79:3e:1b:78:4d:ac:e7:70: dc:11:f5:48:bf:a4:da:16:9b:81:73:ca:4e:7b:92:a3:e9:1d: a2:17:ff:7c:56:7c:53:64:75:c3:bf:e1:c2:f9:07:cf:c8:fc: a9:d2:e7:b3:21:d8:ea:9c:c3:90:e1:af:8a:ce:78:9b:99:90: 72:97:9a:fb:35:8c:ae:a0:1d:0f:b6:e8:84:6e:6a:c7:26:ca: 28:8c:d7:9e:14:89:c8:7a:9f:b5:2d:70:0e:06:62:98:87:3d: 6d:34:2b:19:97:30:a6:62:cf:96:2c:1e:02:55:52:f2:b5:3d: 30:b3:69:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoF+K056uUt1K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZjU5MmY0NmYtMTZmZi00YzI4LWFhMWYtNWMwMjcxZWY4MmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNs4Mtp18fcKBrs32dpvM5250TZYc806LZMa fsTTuuPJcFHI77NQeGLDXxW6fffT+iAX41Jz9CYJCo9jhFLqTnJc1IKpgew16sfA AEwKwb12QAn41TLqGtvLOm8ZgrScefNfNHqSBOkcDF2kP38pF0HHBVpNRFph+lIm OkFbvCod3lsTxs5J5e83gviot1sUkg7erR8j8EHHsVEk7eWnATkMNDT4VFTSw6qe LHbLzmLkYpyAPAqprfYG3WAaWCHQ7zBzCX+IP6A0/FH+17IE3Ux1nDfKi8s25MEv s3GCNeIJOTlYEzBrogsXrr7t4jMmNrDdFCkemr07VVqSDw64MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBfMXcix0qkQ7L4vZKx08mag35SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvZTMzZDNhNmItMTZmNy0z YzZlLWJjYjQtYzAyNzM0ODgyMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgBDTdueXd5LPQkWuH36PQkvXi867DMWLgrbMOQ9kUJsfB5n8ZtktQi mhcd9imgg2ieilMS3KMuc3ERZpVowTkf+amydR0y9vXSpwoX4/Xn2WVRXUZcS1c6 52xxCDQb+Huht57dae52KFECRDYQJW2mi876iAwta73Jc+hJY2lWSytrVbXSsPx5 Pht4TazncNwR9Ui/pNoWm4Fzyk57kqPpHaIX/3xWfFNkdcO/4cL5B8/I/KnS57Mh 2Oqcw5Dhr4rOeJuZkHKXmvs1jK6gHQ+26IRuascmyiiM154Uich6n7UtcA4GYpiH PW00KxmXMKZiz5YsHgJVUvK1PTCzaRA= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:22 2025 by rpki-client