$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa File: dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa (raw, json) Hash identifier: k7f9WAynj3ggPg+YHrCvBxni78gHa0rH90FkAeip8t8= Subject key identifier: 13:56:88:E7:93:AB:6F:DA:86:85:C7:95:DF:1E:A5:FD:F0:FE:A2:C1 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584A4110574356A3268996AD3100 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 12083 IP address blocks: 64.233.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:57:43:56:a3:26:89:96:ad:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=bdc0577a-f5d2-4415-aa77-ff18ff6d41dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:0b:57:a1:34:4c:48:54:2b:0c:be:96:12: 87:d4:74:40:6c:70:88:b3:ab:a3:07:8f:ac:f3:63: ef:bf:3b:3d:8c:a1:33:cd:d3:ec:20:0a:c8:17:f7: 09:14:72:4d:29:27:12:1b:bb:fd:bc:80:72:4d:bd: 0d:b4:29:e8:a3:0b:6b:6f:69:6a:d7:d5:a1:e2:d9: 6e:47:1e:93:0a:28:d7:d7:b9:1b:99:97:30:37:3c: 7a:03:4d:52:6e:59:ca:3e:d9:c7:09:22:df:3b:6c: 20:f4:08:bf:16:73:ba:05:cc:26:77:e5:f6:38:19: 77:1e:1e:3e:41:16:c5:f2:05:0c:77:dc:2e:93:3b: be:19:83:5c:69:c2:40:fd:20:4b:e6:a0:b3:43:7e: a5:32:97:16:69:6a:ec:e6:00:35:f1:84:93:76:7f: 62:8a:85:6d:55:a7:c8:91:54:43:7e:9f:6b:fe:1c: a8:b2:fa:66:05:dc:6a:36:23:41:fd:60:b6:1c:e2: f3:77:d4:2d:4b:e3:bd:be:23:de:8c:b6:4e:7d:32: 39:e0:f3:f3:ab:75:51:33:c2:4c:43:b6:8e:60:38: 71:37:f8:d5:fb:dd:d4:4a:23:6f:51:72:19:3d:2a: 43:43:11:77:b2:56:37:f0:1c:ad:55:cf:ab:e1:d0: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:56:88:E7:93:AB:6F:DA:86:85:C7:95:DF:1E:A5:FD:F0:FE:A2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/dbf9c499-5afc-3be5-a5e5-2e83744e19a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 64.233.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:e1:2c:14:e9:86:90:14:7d:a7:a5:77:f7:51:22:11:bb: 11:cf:25:db:d2:cc:50:b9:dd:0b:18:9e:f5:8b:ab:cb:c3:24: d1:f0:95:c6:da:b9:85:68:9b:c2:43:48:f7:aa:4e:72:e9:a4: a3:a8:58:28:55:61:59:71:1a:67:4a:85:a3:35:fc:0e:62:a1: d3:44:22:60:90:20:fa:83:0c:da:bf:0a:11:24:bc:42:e6:b3: fb:e1:5b:1c:1d:32:a3:6b:d8:38:45:b8:26:cc:fe:13:35:2b: e7:c9:fa:8f:bd:2e:76:a3:b4:c8:ab:e1:36:6d:e8:07:4f:78: b2:97:90:63:52:72:cf:d1:e1:2c:c5:fb:31:a3:50:ac:d1:01: e0:11:25:c5:61:71:19:33:1c:b9:f0:ec:1f:30:e7:7e:a4:ec: 2b:e4:14:a0:6a:16:60:7a:66:3f:f1:4e:c9:91:b2:43:94:8b: 49:80:02:36:6f:1f:2c:9e:eb:d7:bb:52:dc:35:a8:56:ba:7a: be:42:b2:9e:c7:6a:c2:54:da:8e:08:4e:22:95:33:7b:ac:e3: d4:d3:d9:38:dd:e9:71:14:f0:1b:35:65:b6:7d:d4:8f:07:2d: f6:57:a3:6f:3d:0b:b6:8a:4c:6f:d3:dc:4c:3a:25:2d:f5:1e: 5e:55:22:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFdDVqMmiZatMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YmRjMDU3N2EtZjVkMi00NDE1LWFhNzctZmYxOGZmNmQ0MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlMLV6E0TEhUKwy+lhKH1HRAbHCIs6ujB4+s 82Pvvzs9jKEzzdPsIArIF/cJFHJNKScSG7v9vIByTb0NtCnoowtrb2lq19Wh4tlu Rx6TCijX17kbmZcwNzx6A01SblnKPtnHCSLfO2wg9Ai/FnO6Bcwmd+X2OBl3Hh4+ QRbF8gUMd9wukzu+GYNcacJA/SBL5qCzQ36lMpcWaWrs5gA18YSTdn9iioVtVafI kVRDfp9r/hyosvpmBdxqNiNB/WC2HOLzd9QtS+O9viPejLZOfTI54PPzq3VRM8JM Q7aOYDhxN/jV+93USiNvUXIZPSpDQxF3slY38BytVc+r4dAPCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNWiOeTq2/ahoXHld8epf3w/qLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZGJmOWM0OTktNWFmYy0z YmU1LWE1ZTUtMmU4Mzc0NGUxOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQOnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxl4SwU6YaQFH2npXf3USIRuxHPJdvSzFC53QsYnvWLq8vDJNHwlcba uYVom8JDSPeqTnLppKOoWChVYVlxGmdKhaM1/A5iodNEImCQIPqDDNq/ChEkvELm s/vhWxwdMqNr2DhFuCbM/hM1K+fJ+o+9LnajtMir4TZt6AdPeLKXkGNScs/R4SzF +zGjUKzRAeARJcVhcRkzHLnw7B8w536k7CvkFKBqFmB6Zj/xTsmRskOUi0mAAjZv Hyye69e7Utw1qFa6er5Csp7HasJU2o4ITiKVM3us49TT2Tjd6XEU8Bs1ZbZ91I8H LfZXo289C7aKTG/T3Ew6JS31Hl5VIt0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:35:50 2025 by rpki-client