$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa File: 4687eb35-ec35-3007-bacb-6e57bd51c87b.roa (raw, json) Hash identifier: yqKpyJzCy1llLHGLFegQeNtoXieQU3MkEB+G9lfAyVU= Subject key identifier: 4F:3E:0F:C5:6D:88:99:84:52:B6:2C:7D:64:EE:6F:D7:7E:C8:A1:3A Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584A093A9B1838DA118271783800 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 399629 IP address blocks: 64.7.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9b:18:38:da:11:82:71:78:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=e2a18fd5-9c02-4974-8d6b-10d16f8d3309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:0f:4f:74:72:33:ff:9e:1e:54:f8:eb:7e: 68:34:5d:d5:b7:2c:45:09:97:9d:3e:28:6a:f5:52: b3:41:bb:8c:8b:d9:d1:41:55:76:fd:c1:2b:ec:62: 8b:34:25:b3:07:bb:c2:ef:58:c8:8f:85:a9:23:69: b0:2d:e9:f2:77:ed:6d:79:b6:ea:95:f5:25:45:da: 2e:b0:d4:32:db:64:6f:39:1e:72:4f:3e:66:db:04: 97:14:29:54:0d:80:5d:52:3b:56:1e:d1:83:04:96: cb:8c:13:1b:0c:45:c8:c2:54:42:11:17:40:61:e5: ea:16:05:d4:0e:3b:92:66:2b:f4:63:28:41:75:42: f1:5d:06:ff:96:5d:a6:07:50:ad:ba:87:92:83:a5: 5f:56:37:8c:46:31:bd:9c:50:93:37:dc:f7:d9:5f: f2:83:e8:49:0c:be:b8:b0:9a:ea:8a:84:70:ed:aa: 91:32:98:5b:4d:55:3c:37:e2:ea:fa:7b:4e:0f:b5: 5a:47:d0:3e:33:38:69:f3:98:d6:cb:f4:28:bc:33: 8c:0d:ac:06:ed:f4:98:3b:f1:9b:aa:d3:47:aa:0d: 85:93:c5:08:59:fb:19:f5:73:65:4f:ae:12:3f:59: 7e:23:8d:d3:5d:be:cd:f2:82:0a:b1:a5:37:f3:a8: d9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3E:0F:C5:6D:88:99:84:52:B6:2C:7D:64:EE:6F:D7:7E:C8:A1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.7.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:96:83:95:19:be:28:d0:30:79:bf:17:f8:16:31:7e:c2:8d: cf:af:3f:ac:7b:eb:4e:fe:ea:0d:a4:cf:48:0d:af:63:de:5e: cd:06:67:cb:0d:e3:9a:59:b4:ae:19:7a:a6:2a:89:e0:f7:26: c4:7d:12:b4:29:1a:98:15:32:26:7e:0b:46:7b:a9:0b:82:48: c6:7f:3d:ad:27:38:4f:39:d7:86:4e:77:0f:aa:03:52:17:06: 91:06:2b:48:17:b3:81:8f:40:a4:23:27:fa:e2:0f:71:7d:66: 1d:22:d6:66:96:05:d5:70:c5:94:14:1f:9a:9e:b1:3e:19:09: 74:db:73:05:9a:6e:71:2c:91:9c:d0:66:c1:12:3c:05:87:c4: a5:fc:61:d0:4e:b8:f1:c8:5e:83:37:79:65:04:b7:a4:4f:ed: c3:ab:f1:14:84:09:1a:55:e9:15:29:7a:da:d7:89:74:da:39: c8:ff:af:9a:9f:6e:4c:54:1f:b2:a1:e6:87:15:1b:3d:03:6d: b8:6b:8d:e8:db:47:d4:a6:c9:18:99:9a:f8:dc:3b:fe:cb:23: 4a:6e:b6:49:c3:fb:0e:bb:7f:6d:9e:5a:ef:31:ea:36:fb:97: f7:0a:d2:49:00:32:14:a1:84:57:24:12:6e:36:9a:b3:5c:3b: 2b:1d:22:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOpsYONoRgnF4OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZTJhMThmZDUtOWMwMi00OTc0LThkNmItMTBkMTZmOGQzMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDcPT3RyM/+eHlT4635oNF3VtyxFCZedPihq 9VKzQbuMi9nRQVV2/cEr7GKLNCWzB7vC71jIj4WpI2mwLenyd+1tebbqlfUlRdou sNQy22RvOR5yTz5m2wSXFClUDYBdUjtWHtGDBJbLjBMbDEXIwlRCERdAYeXqFgXU DjuSZiv0YyhBdULxXQb/ll2mB1CtuoeSg6VfVjeMRjG9nFCTN9z32V/yg+hJDL64 sJrqioRw7aqRMphbTVU8N+Lq+ntOD7VaR9A+Mzhp85jWy/QovDOMDawG7fSYO/Gb qtNHqg2Fk8UIWfsZ9XNlT64SP1l+I43TXb7N8oIKsaU386jZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8+D8VtiJmEUrYsfWTub9d+yKE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDY4N2ViMzUtZWMzNS0z MDA3LWJhY2ItNmU1N2JkNTFjODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiWg5UZvijQMHm/F/gWMX7Cjc+vP6x7607+6g2kz0gNr2PeXs0GZ8sN 45pZtK4ZeqYqieD3JsR9ErQpGpgVMiZ+C0Z7qQuCSMZ/Pa0nOE8514ZOdw+qA1IX BpEGK0gXs4GPQKQjJ/riD3F9Zh0i1maWBdVwxZQUH5qesT4ZCXTbcwWabnEskZzQ ZsESPAWHxKX8YdBOuPHIXoM3eWUEt6RP7cOr8RSECRpV6RUpetrXiXTaOcj/r5qf bkxUH7Kh5ocVGz0DbbhrjejbR9SmyRiZmvjcO/7LI0putknD+w67f22eWu8x6jb7 l/cK0kkAMhShhFckEm42mrNcOysdIjc= -----END CERTIFICATE-----Generated at Tue Jul 1 04:24:28 2025 by rpki-client