$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa File: 1529c059-7633-3836-940a-f5b311f13fd2.roa (raw, json) Hash identifier: G1bd/yarem9MTQuIRkD4nwNf138+/Dg6MpV70SC0kwA= Subject key identifier: C7:A1:DA:C7:32:37:9A:FC:7F:EB:50:C7:6E:3B:A6:1A:98:45:62:AA Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584A2955667C30C160D5E6F45700 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 393885 IP address blocks: 64.71.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:66:7c:30:c1:60:d5:e6:f4:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=c3c0e44b-7a10-43f5-a0d3-00d5446c2ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:8f:f4:27:22:bb:d6:b8:04:ea:c0:5b:99: ad:42:c5:fb:95:d7:c3:80:26:d7:6e:b9:89:77:80: d8:13:9f:a3:2f:e7:45:48:26:58:08:0e:3e:a0:53: 2b:7a:bc:ba:a7:a2:55:a8:a4:02:3e:51:6d:9e:fc: a2:e6:d0:51:ae:a2:f4:a9:16:d5:c1:c5:e6:9b:a2: b1:78:8e:ac:54:a0:c7:64:77:26:9f:3b:48:6d:cb: bd:49:6f:b2:29:4b:ac:b6:f2:63:a9:67:9f:cd:7b: b9:82:45:25:18:56:99:63:c1:54:20:f1:f9:1a:52: ea:50:0c:73:eb:99:af:09:e3:07:a7:7a:7b:90:59: 8c:c6:54:18:3c:3a:89:ed:6a:cd:26:87:81:e9:a3: cd:d0:6b:3e:d0:5a:92:68:ec:17:6e:3b:ac:c9:90: 84:03:8a:64:b4:cb:53:46:52:51:9c:a9:de:5e:76: fb:ae:30:87:ab:6e:e2:2b:53:79:c8:68:b9:a5:8d: 8b:a6:10:2f:ad:3d:d2:7c:65:8d:db:58:ac:fd:40: da:3b:ba:09:13:49:b4:58:7c:22:f3:bb:28:53:7c: 71:87:41:ee:31:b2:15:9c:33:b9:d6:d8:59:d6:f2: 50:03:08:8e:cb:8b:35:fa:e9:da:05:48:17:af:f7: 3f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A1:DA:C7:32:37:9A:FC:7F:EB:50:C7:6E:3B:A6:1A:98:45:62:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:66:8e:76:de:d8:18:ff:57:64:f9:e7:06:3f:e0:e2:bf:c6: b5:92:ea:38:bb:5e:62:e7:84:3b:55:df:67:fe:86:80:7e:33: 32:c2:03:e0:aa:d9:97:ab:03:fd:c8:68:86:c0:c9:32:55:d3: 32:d8:cb:ce:95:a3:1d:a2:8b:0d:51:25:f6:91:38:15:4d:4b: ac:10:c5:99:56:98:97:60:60:06:31:5f:03:01:a7:7e:99:d2: 09:53:a0:62:7f:d2:90:9f:5d:d5:43:6d:08:55:a8:62:83:a9: a5:e6:c0:3e:40:a5:d2:ba:05:e5:84:b7:6c:72:4f:bd:90:c4: d0:72:c6:89:22:75:f7:1d:9f:7b:dc:01:6b:37:5f:18:16:ba: eb:57:a9:4a:d6:6b:83:56:62:dc:fb:cd:bf:a2:d6:aa:ed:ee: 16:be:07:fe:35:a2:ae:f2:71:02:07:7c:9f:11:54:02:62:d2: 01:1e:ca:5c:27:32:e3:05:ec:fc:c6:d2:2b:09:92:fe:11:f2: 2e:5b:75:66:34:79:1d:ee:86:50:82:be:51:18:73:8a:e2:b4: 55:3c:dd:b3:cf:ec:e2:d6:77:ee:12:bb:85:71:5c:75:3a:50: 0f:3f:2a:a0:f5:2e:27:f7:8b:ec:cc:30:e2:28:19:ac:12:87: a0:30:9d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWZ8MMFg1eb0VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk YzNjMGU0NGItN2ExMC00M2Y1LWEwZDMtMDBkNTQ0NmMyYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL2P9Cciu9a4BOrAW5mtQsX7ldfDgCbXbrmJ d4DYE5+jL+dFSCZYCA4+oFMrery6p6JVqKQCPlFtnvyi5tBRrqL0qRbVwcXmm6Kx eI6sVKDHZHcmnztIbcu9SW+yKUustvJjqWefzXu5gkUlGFaZY8FUIPH5GlLqUAxz 65mvCeMHp3p7kFmMxlQYPDqJ7WrNJoeB6aPN0Gs+0FqSaOwXbjusyZCEA4pktMtT RlJRnKneXnb7rjCHq27iK1N5yGi5pY2LphAvrT3SfGWN21is/UDaO7oJE0m0WHwi 87soU3xxh0HuMbIVnDO51thZ1vJQAwiOy4s1+unaBUgXr/c/fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeh2scyN5r8f+tQx247phqYRWKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMTUyOWMwNTktNzYzMy0z ODM2LTk0MGEtZjViMzExZjEzZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQEfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBmjnbe2Bj/V2T55wY/4OK/xrWS6ji7XmLnhDtV32f+hoB+MzLCA+Cq 2ZerA/3IaIbAyTJV0zLYy86Vox2iiw1RJfaROBVNS6wQxZlWmJdgYAYxXwMBp36Z 0glToGJ/0pCfXdVDbQhVqGKDqaXmwD5ApdK6BeWEt2xyT72QxNByxokidfcdn3vc AWs3XxgWuutXqUrWa4NWYtz7zb+i1qrt7ha+B/41oq7ycQIHfJ8RVAJi0gEeylwn MuMF7PzG0isJkv4R8i5bdWY0eR3uhlCCvlEYc4ritFU83bPP7OLWd+4Su4VxXHU6 UA8/KqD1Lif3i+zMMOIoGawSh6AwneM= -----END CERTIFICATE-----Generated at Mon Jun 30 01:45:06 2025 by rpki-client