$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa File: 5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa (raw, json) Hash identifier: BcK6oJdjD6Rry/Ei3vp0mEdwr+cnY8VmQtjOC8Vj2L0= Subject key identifier: 36:F8:4A:73:74:CD:F6:75:70:80:27:80:CF:4C:5C:AA:8E:AA:80:1C Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A612B115B6625C919B6AFCF00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 15164 IP address blocks: 64.251.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:11:5b:66:25:c9:19:b6:af:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=2f337f20-8c81-45c2-862d-90323af68946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:5e:ec:8a:7a:24:40:a8:69:e8:57:ea:5d: cc:4f:45:de:c7:a0:2d:0b:3c:1c:89:c2:4e:6b:47: b7:c5:67:56:4d:5d:27:d6:4f:53:bd:b6:d9:d0:e9: 3d:12:75:d5:be:9a:8d:12:ed:36:4b:18:ef:76:c9: 65:e8:ee:1b:81:8f:c2:92:a8:66:59:1a:db:46:25: 28:70:c4:a0:4f:4a:63:ab:b0:21:09:be:34:c7:ee: cf:31:60:20:0b:2f:2d:2b:74:da:21:b2:b4:1a:6d: 25:01:bd:d4:60:79:7a:61:0a:39:8f:9a:5d:d3:76: fb:54:2d:e1:86:a8:bb:75:b1:e3:ec:1b:79:db:7e: 34:88:cd:8f:db:ab:2f:93:a2:36:41:da:a7:14:42: ab:30:da:64:54:e3:68:7c:5a:ba:7a:59:c0:7e:69: 60:d3:22:3e:aa:82:7e:98:29:43:e8:91:cd:49:e8: 05:52:46:16:6a:8f:1e:71:43:bc:1c:60:42:fc:83: 94:db:6b:0e:f0:b6:a0:89:8a:63:93:2d:60:1e:7f: aa:c0:e5:e5:a2:82:de:6b:56:73:55:df:9a:2b:f3: c9:26:53:84:20:ca:79:58:49:7e:f6:ab:e4:f7:68: e4:cd:76:36:1b:a3:5e:96:d4:6e:bd:03:da:6c:3f: c1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F8:4A:73:74:CD:F6:75:70:80:27:80:CF:4C:5C:AA:8E:AA:80:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 64.251.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:28:a5:5f:83:de:18:89:e0:c7:3b:f1:88:c1:70:e4:e7:52: 1d:e9:61:5b:52:8b:ee:b9:a8:ba:a2:2b:59:76:34:6b:7d:4e: 7a:87:0a:ca:d0:5d:d3:5b:2a:01:ef:36:9f:ee:c1:6c:d7:fb: 11:09:31:34:62:db:1f:50:67:3d:44:b5:31:ba:46:ff:6c:eb: 6a:93:b3:7f:5c:07:10:0d:b6:49:91:6c:6d:13:df:7d:49:d5: 44:c1:6e:05:dc:61:28:4a:f1:70:38:e7:48:b2:e4:a4:2e:ac: 5b:f9:7b:60:fc:ea:47:b0:aa:e5:f2:4d:d5:0d:98:14:fd:87: 1d:54:c0:02:ca:2b:60:94:d6:76:6a:96:c3:9e:c0:d1:43:f0: 9f:47:99:85:56:7b:65:87:a6:26:94:0d:76:67:18:0b:5a:50: db:a2:a0:78:42:09:6a:ee:32:44:b5:63:08:50:07:67:8b:1f: 84:84:91:82:07:1f:d9:72:28:51:cb:2c:8f:d3:da:92:02:a6: 96:d2:1f:0d:dc:22:a9:53:5d:de:59:bb:de:c3:a5:2a:27:ae: 78:99:a6:4f:85:40:a8:e7:9b:71:af:fd:e3:cb:70:82:bf:59: ac:c8:60:8a:2c:cb:5b:a1:f0:0f:49:04:cc:71:ac:d1:ec:80: 21:15:b5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxFbZiXJGbavzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MmYzMzdmMjAtOGM4MS00NWMyLTg2MmQtOTAzMjNhZjY4OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T9e7Ip6JECoaehX6l3MT0Xex6AtCzwcicJO a0e3xWdWTV0n1k9TvbbZ0Ok9EnXVvpqNEu02Sxjvdsll6O4bgY/CkqhmWRrbRiUo cMSgT0pjq7AhCb40x+7PMWAgCy8tK3TaIbK0Gm0lAb3UYHl6YQo5j5pd03b7VC3h hqi7dbHj7Bt52340iM2P26svk6I2QdqnFEKrMNpkVONofFq6elnAfmlg0yI+qoJ+ mClD6JHNSegFUkYWao8ecUO8HGBC/IOU22sO8LagiYpjky1gHn+qwOXlooLea1Zz Vd+aK/PJJlOEIMp5WEl+9qvk92jkzXY2G6NeltRuvQPabD/BaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb4SnN0zfZ1cIAngM9MXKqOqoAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNWE0MjIwYmItZjI1ZS0z NmYwLTliZTUtZDVmYmZiZmViNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQPvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAopV+D3hiJ4Mc78YjBcOTnUh3pYVtSi+65qLqiK1l2NGt9TnqHCsrQ XdNbKgHvNp/uwWzX+xEJMTRi2x9QZz1EtTG6Rv9s62qTs39cBxANtkmRbG0T331J 1UTBbgXcYShK8XA450iy5KQurFv5e2D86kewquXyTdUNmBT9hx1UwALKK2CU1nZq lsOewNFD8J9HmYVWe2WHpiaUDXZnGAtaUNuioHhCCWruMkS1YwhQB2eLH4SEkYIH H9lyKFHLLI/T2pICppbSHw3cIqlTXd5Zu97DpSonrniZpk+FQKjnm3Gv/ePLcIK/ WazIYIosy1uh8A9JBMxxrNHsgCEVtcI= -----END CERTIFICATE-----Generated at Wed Jul 2 13:03:48 2025 by rpki-client