$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/24be61bf-bf4a-320e-ad0a-b962a9dcae66.roa File: 24be61bf-bf4a-320e-ad0a-b962a9dcae66.roa (raw, json) Hash identifier: KnXA4wpz/0z7j1RS5//dsHeFKNEBdPECQQFH90ThsV8= Subject key identifier: F7:96:BD:40:F5:BA:DA:62:81:D3:51:F6:AD:BC:6C:33:F1:90:7D:5A Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584A268ABE413FA123982DB2AAC0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/24be61bf-bf4a-320e-ad0a-b962a9dcae66.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 198949 IP address blocks: 64.18.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:be:41:3f:a1:23:98:2d:b2:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=bbb595b9-783e-4fc5-9822-e43c910e4576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:c7:2c:99:d5:b6:49:e1:82:b7:14:76:df: 9b:eb:6a:88:c4:97:10:ce:ed:f1:ad:4b:ba:3e:c5: fd:1f:89:2d:f4:b7:15:02:49:d2:c0:92:4a:f6:be: 42:34:39:b3:e9:11:dd:3b:56:ac:78:fe:b9:a8:8c: 13:44:eb:96:91:2f:6e:86:76:74:18:fa:5e:8a:a2: 23:5b:ef:7a:f0:04:be:da:46:84:43:7b:c9:06:d2: 30:82:29:7b:36:3f:31:b0:5b:81:1f:bc:ad:dd:fc: 58:95:96:57:48:78:4a:4f:d9:67:56:d3:57:82:29: 6a:42:a5:6b:5d:f5:9d:e0:81:1b:36:dc:33:51:95: fa:0e:76:30:49:ec:fa:7f:12:2d:27:63:a1:6d:d8: f9:dc:29:91:cc:7d:05:a7:4a:33:c1:09:f9:a5:a8: 9e:bb:53:97:32:47:63:ba:48:46:23:68:85:68:92: 30:80:ca:5b:ff:c8:cb:ca:6e:04:e9:df:cf:86:9e: 4d:3e:4a:c4:92:15:d7:14:3c:b9:c4:14:66:c2:02: 6f:6a:c5:31:c8:67:58:79:75:73:ef:b8:d1:ab:71: 08:bf:c9:15:0a:90:89:7b:5d:11:7b:18:97:d9:e7: 69:5a:21:57:ac:8f:8b:c3:f6:56:ef:45:b9:30:f0: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:96:BD:40:F5:BA:DA:62:81:D3:51:F6:AD:BC:6C:33:F1:90:7D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/24be61bf-bf4a-320e-ad0a-b962a9dcae66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 64.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f4:f5:6d:be:97:2b:d9:f6:00:b1:c3:f7:3f:70:8a:73:a3: 10:9f:cf:04:5a:04:75:ea:70:ed:e4:c8:b6:6c:3d:86:46:67: ec:4c:1b:2a:95:18:0f:49:0a:f7:c5:4a:ab:5c:8f:37:22:eb: da:39:1e:5b:72:55:0e:b7:32:70:b4:a9:ad:9f:0b:07:f5:43: 14:4f:19:75:a5:3b:eb:16:12:f8:ef:eb:b9:c9:92:e3:67:e3: 80:9a:87:c5:08:26:a9:d0:04:69:8b:bc:07:b1:29:82:88:42: c2:06:16:10:c0:f1:0b:75:a3:b3:05:60:4a:5c:da:21:31:e4: 41:f8:65:49:20:a8:ff:90:10:4a:b4:58:54:c1:34:cc:9f:cb: e1:ff:55:b2:a9:7b:75:7b:b3:8c:40:17:91:b2:51:ce:47:e1: 27:77:54:42:d0:c4:58:89:8b:74:73:b1:48:8b:5c:3e:d6:42: 73:50:53:b2:02:47:38:7e:98:c2:27:0d:df:c4:49:f4:4d:03: 72:5a:1f:65:ed:13:88:09:6f:62:c5:b2:84:f3:c4:b4:95:4a: 54:5b:26:a3:bc:b3:1c:5a:a6:07:5d:bb:68:6c:69:d7:41:e6: a0:9d:71:91:34:a5:a4:09:92:6a:97:b0:81:24:89:fb:23:14: 5c:c2:8e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomir5BP6EjmC2yqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk YmJiNTk1YjktNzgzZS00ZmM1LTk4MjItZTQzYzkxMGU0NTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/HLJnVtknhgrcUdt+b62qIxJcQzu3xrUu6 PsX9H4kt9LcVAknSwJJK9r5CNDmz6RHdO1aseP65qIwTROuWkS9uhnZ0GPpeiqIj W+968AS+2kaEQ3vJBtIwgil7Nj8xsFuBH7yt3fxYlZZXSHhKT9lnVtNXgilqQqVr XfWd4IEbNtwzUZX6DnYwSez6fxItJ2Ohbdj53CmRzH0Fp0ozwQn5paieu1OXMkdj ukhGI2iFaJIwgMpb/8jLym4E6d/Php5NPkrEkhXXFDy5xBRmwgJvasUxyGdYeXVz 77jRq3EIv8kVCpCJe10RexiX2edpWiFXrI+Lw/ZW70W5MPC6LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeWvUD1utpigdNR9q28bDPxkH1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMjRiZTYxYmYtYmY0YS0z MjBlLWFkMGEtYjk2MmE5ZGNhZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD09W2+lyvZ9gCxw/c/cIpzoxCfzwRaBHXqcO3kyLZsPYZGZ+xMGyqV GA9JCvfFSqtcjzci69o5HltyVQ63MnC0qa2fCwf1QxRPGXWlO+sWEvjv67nJkuNn 44Cah8UIJqnQBGmLvAexKYKIQsIGFhDA8Qt1o7MFYEpc2iEx5EH4ZUkgqP+QEEq0 WFTBNMyfy+H/VbKpe3V7s4xAF5GyUc5H4Sd3VELQxFiJi3RzsUiLXD7WQnNQU7IC Rzh+mMInDd/ESfRNA3JaH2XtE4gJb2LFsoTzxLSVSlRbJqO8sxxapgddu2hsaddB 5qCdcZE0paQJkmqXsIEkifsjFFzCjjQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:27:21 2025 by rpki-client