$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa File: 963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (raw, json) Hash identifier: DLg3SNo1MMK572n2xVjJtlQtjHeAV+hEhL5Uu7Jacjc= Subject key identifier: 9C:C9:41:59:01:E2:AA:88:06:A4:C0:02:93:42:6E:39:BD:38:A7:F6 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584A331AF72D274C04956E423500 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 64.57.33.0/24 maxlen: 24 64.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f7:2d:27:4c:04:95:6e:42:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=bedbbf8f-2f40-40d0-aa92-37236e0cb842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:23:b6:17:ce:02:dc:95:cb:98:ed:6b:52: 9d:f3:d9:a4:10:71:c0:3f:88:26:91:28:af:89:c8: 1e:b5:8e:f8:1c:4c:a7:ba:ce:7d:a6:ba:9e:57:9a: 1a:f8:56:38:41:25:bd:80:dc:8f:a7:a8:3e:a9:08: dd:a6:c4:87:ef:20:11:a3:1c:e9:60:b0:8b:6f:96: 2d:50:83:80:d4:2c:be:3d:e3:d0:60:79:f5:ef:bf: be:55:e4:9b:11:8c:1e:e0:de:c1:7e:a1:78:5d:d1: ab:d1:66:24:41:e6:0e:23:eb:34:40:7e:d7:34:09: ba:19:79:52:ec:0b:07:2d:08:79:72:4e:ff:cc:9b: 59:ba:ea:54:ea:d8:f9:df:44:29:0d:cd:5b:4c:2e: ce:18:65:c5:d4:1c:74:6c:31:cf:4c:85:2b:ab:cf: 08:45:8e:1b:d6:a2:4c:70:4c:b9:1f:ce:81:58:68: 15:45:33:e7:c5:db:d1:cb:7e:2c:fd:b6:cc:68:03: 9d:02:06:41:c0:94:3e:d2:2c:e6:d3:1e:bd:eb:1c: 1c:70:9a:d7:30:3d:ac:b4:23:cb:74:4e:1e:3d:2e: 27:1e:4d:90:02:31:54:df:38:65:b2:cb:7d:f9:ea: 83:0f:25:b1:75:25:8f:d2:5d:fd:80:b4:c4:bc:c2: ec:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C9:41:59:01:E2:AA:88:06:A4:C0:02:93:42:6E:39:BD:38:A7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.33.0-64.57.34.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:35:c4:e1:06:17:b3:36:9b:0d:46:f3:8f:e6:13:72:01:4a: 9f:52:56:0a:14:2e:ff:7f:2c:93:6e:78:d1:06:0a:69:4b:15: 4f:2d:3e:02:cb:d7:8f:1b:d5:a8:17:e2:12:88:c3:39:af:cf: dc:d7:97:e1:98:0c:a3:d1:b3:5e:e8:6c:73:db:d5:58:d5:b4: 39:e7:5a:57:2b:35:28:ce:d8:35:57:81:d3:cd:9b:c4:1a:91: f0:f4:75:8a:ff:68:30:4f:6e:b6:40:5e:65:ff:0a:35:cc:c6: 09:55:3d:f2:55:fe:e2:3c:76:ec:eb:e4:91:cc:2e:63:9c:68: 21:fe:bb:24:11:55:3e:3f:9a:50:81:8d:b4:b7:49:f3:58:52: 1a:46:cb:16:ed:5d:cb:59:06:b4:6d:38:87:d5:fb:1b:c8:e2: bb:11:b3:63:87:c1:7b:1b:4b:5c:0e:07:a0:cc:91:7c:1a:5d: 6f:fa:fa:d9:5c:25:be:aa:f9:b8:f1:f0:86:bc:b2:d9:84:cb: b0:d7:60:b7:2c:a3:35:3a:e0:27:fb:93:03:61:58:3b:c7:b5: 4d:d9:a7:f3:84:32:36:86:d6:2b:c6:2c:db:62:b8:06:d4:d1: e4:91:9e:0d:1f:7a:e8:c7:ce:c0:29:b3:49:a0:57:62:8f:e3: f6:48:c6:90 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEozGvctJ0wElW5CNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YmVkYmJmOGYtMmY0MC00MGQwLWFhOTItMzcyMzZlMGNiODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LgjthfOAtyVy5jta1Kd89mkEHHAP4gmkSiv icgetY74HEynus59prqeV5oa+FY4QSW9gNyPp6g+qQjdpsSH7yARoxzpYLCLb5Yt UIOA1Cy+PePQYHn177++VeSbEYwe4N7BfqF4XdGr0WYkQeYOI+s0QH7XNAm6GXlS 7AsHLQh5ck7/zJtZuupU6tj530QpDc1bTC7OGGXF1Bx0bDHPTIUrq88IRY4b1qJM cEy5H86BWGgVRTPnxdvRy34s/bbMaAOdAgZBwJQ+0izm0x696xwccJrXMD2stCPL dE4ePS4nHk2QAjFU3zhlsst9+eqDDyWxdSWP0l39gLTEvMLs8wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJzJQVkB4qqIBqTAApNCbjm9OKf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTYzZDM4MzktNDAxNS0z NWE3LWIzOGItYjFjMzFiNGE0ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASjXE4QYXszabDUbzj+YTcgFKn1JWChQu/38sk2540QYK aUsVTy0+AsvXjxvVqBfiEojDOa/P3NeX4ZgMo9GzXuhsc9vVWNW0OedaVys1KM7Y NVeB082bxBqR8PR1iv9oME9utkBeZf8KNczGCVU98lX+4jx27OvkkcwuY5xoIf67 JBFVPj+aUIGNtLdJ81hSGkbLFu1dy1kGtG04h9X7G8jiuxGzY4fBextLXA4HoMyR fBpdb/r62Vwlvqr5uPHwhryy2YTLsNdgtyyjNTrgJ/uTA2FYO8e1Tdmn84QyNobW K8Ys22K4BtTR5JGeDR966MfOwCmzSaBXYo/j9kjGkA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:33:33 2025 by rpki-client