$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json) Hash identifier: sRcVVcZFB98236zmbFBiTjlovw3ZcfDylMSZnM6IJyA= Subject key identifier: B0:20:E1:BD:58:BF:DD:AA:44:C6:D5:F9:31:8D:FC:A6:52:A4:75:C4 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584A3B7AFA547CD59AA1AEEC10C0 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 21902 IP address blocks: 64.110.16.0/21 maxlen: 21 108.163.68.0/22 maxlen: 22 216.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fa:54:7c:d5:9a:a1:ae:ec:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=e1b5c548-6f83-4dbf-98a9-8e79ee08fb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:e6:33:cd:9e:fb:9e:b8:a9:75:c9:63:6a: 09:c7:36:85:9e:fb:ed:75:cd:96:b7:88:6d:ad:29: d3:a0:2a:27:56:45:03:6c:b1:09:19:aa:6a:6d:3d: a0:69:7f:0e:d5:09:d8:00:2c:91:44:f5:23:37:b4: 3c:7c:88:0a:bf:6e:3f:67:a7:23:7b:46:8b:ae:2b: 17:4b:7d:8c:0b:bc:0d:9f:49:4a:26:0c:b2:56:cc: 7c:f1:68:2a:4b:b0:fe:b4:f7:df:bf:3c:13:62:d1: 41:25:59:9d:dc:8d:4d:cb:6a:67:bf:e2:45:70:ed: 6e:8c:d9:2e:9a:86:11:0c:dd:ea:bf:e6:73:19:5a: 78:f4:ca:2d:a3:ff:01:c4:35:00:bc:ad:ce:d4:bb: 41:20:67:00:35:b2:22:bc:1c:5e:5a:05:41:48:40: 00:c0:8a:e2:64:2a:85:48:bb:4a:fc:db:53:3d:68: 60:14:61:87:a5:4b:62:87:f5:01:65:06:4b:1d:9f: 55:d7:df:15:25:f8:ee:89:c1:69:aa:7e:23:4a:cc: 45:bd:20:67:08:76:f3:05:7b:5e:8c:3e:a2:94:b0: b5:dc:0e:b1:c6:16:fd:59:3e:17:19:14:08:76:d1: 34:0d:3e:26:99:a9:35:d1:94:69:2d:b3:0e:dc:26: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:E1:BD:58:BF:DD:AA:44:C6:D5:F9:31:8D:FC:A6:52:A4:75:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: 64.110.16.0/21 108.163.68.0/22 216.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a8:fb:0d:40:fd:bd:5b:33:08:4d:b7:f5:87:37:1a:fa:9f: 1a:d4:6a:4a:2d:6d:f3:66:e3:b4:0b:7f:b8:6b:c0:bb:18:93: 9a:1f:e7:8e:69:04:af:29:7a:f0:72:02:a9:43:f3:3b:00:f7: ea:8f:d4:e6:33:f7:47:7b:c6:d2:2c:a1:03:e9:ad:e4:7a:39: a1:85:6f:08:9e:7f:3d:ec:e9:41:ad:fa:d6:83:62:5e:0d:b1: 7a:90:f7:4c:1a:98:c8:8c:ae:c2:48:79:9f:8c:2b:18:72:e7: 87:89:07:66:e9:ae:a3:2f:0e:ea:83:bf:d1:e2:68:88:47:f8: b3:67:b1:54:3c:61:8f:d1:49:7c:e7:f2:32:0c:5b:7e:d9:c8: b1:a0:a3:d6:97:84:9b:63:70:f7:61:38:e6:99:57:c0:b8:c8: 16:35:56:75:b5:f3:b4:17:f3:e1:52:da:39:2c:cb:24:f5:7a: 18:d9:80:87:95:db:8e:6b:cc:cd:ca:00:f5:3e:40:5d:b3:65: a1:b5:aa:36:28:fc:1c:59:30:ea:3f:00:8e:14:06:d4:58:c3: 21:a0:b8:09:01:85:24:71:09:8f:10:9c:c8:16:3e:55:4c:ba: 6a:70:f3:79:92:df:13:e6:0c:1d:3e:6b:1d:8c:20:12:f6:3b: 45:ed:db:0e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEo7evpUfNWaoa7sEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZTFiNWM1NDgtNmY4My00ZGJmLTk4YTktOGU3OWVlMDhmYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjATmM82e+564qXXJY2oJxzaFnvvtdc2Wt4ht rSnToConVkUDbLEJGapqbT2gaX8O1QnYACyRRPUjN7Q8fIgKv24/Z6cje0aLrisX S32MC7wNn0lKJgyyVsx88WgqS7D+tPffvzwTYtFBJVmd3I1Ny2pnv+JFcO1ujNku moYRDN3qv+ZzGVp49Moto/8BxDUAvK3O1LtBIGcANbIivBxeWgVBSEAAwIriZCqF SLtK/NtTPWhgFGGHpUtih/UBZQZLHZ9V198VJfjuicFpqn4jSsxFvSBnCHbzBXte jD6ilLC13A6xxhb9WT4XGRQIdtE0DT4mmak10ZRpLbMO3CbmcQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLAg4b1Yv92qRMbV+TGN/KZSpHXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvNjViMWFkMzYtY2JlOS0z NzcxLTljOTYtZTcwMDc0NGU2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG4QAwQC bKNEAwQE2L2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAE2o+w1A/b1bMwhNt/WHNxr6nxrUakotbfNm47QL f7hrwLsYk5of545pBK8pevByAqlD8zsA9+qP1OYz90d7xtIsoQPpreR6OaGFbwie fz3s6UGt+taDYl4NsXqQ90wamMiMrsJIeZ+MKxhy54eJB2bprqMvDuqDv9HiaIhH +LNnsVQ8YY/RSXzn8jIMW37ZyLGgo9aXhJtjcPdhOOaZV8C4yBY1VnW187QX8+FS 2jksyyT1ehjZgIeV245rzM3KAPU+QF2zZaG1qjYo/BxZMOo/AI4UBtRYwyGguAkB hSRxCY8QnMgWPlVMumpw83mS3xPmDB0+ax2MIBL2O0Xt2w4= -----END CERTIFICATE-----Generated at Sun Jul 6 06:02:39 2025 by rpki-client