$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa File: 3959543b-12b4-3a65-842b-987e2c3cb0e7.roa (raw, json) Hash identifier: LzQm+H50mYQzKz1OaBYK+Aa/MTCKTvIrXRNxMR2CgmM= Subject key identifier: DE:30:C1:61:40:45:5B:F6:53:3B:B9:24:BD:F4:56:EA:05:9A:D8:D3 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584A4F05C1701FC67F98F00E0200 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 20454 IP address blocks: 64.38.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c1:70:1f:c6:7f:98:f0:0e:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=eeceffd1-39b3-4cf8-9954-5c03bf6dabfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:5c:d4:0d:59:5c:2a:71:b5:f5:c5:f4:7a: 9f:18:bf:0f:3e:30:f2:28:a3:13:c2:72:85:c7:63: 89:c4:5a:9d:2a:80:eb:6d:9c:5e:be:86:f9:70:36: 5b:e8:0f:32:59:e0:5a:b2:56:aa:77:04:9b:4f:72: ec:98:93:35:c2:01:70:ba:f5:7b:2b:2d:f0:f2:94: 1f:0c:df:b3:b6:45:61:1b:0b:c0:00:ff:2b:c6:5c: df:e9:30:8a:fd:bc:c1:f1:dd:67:04:c1:87:ee:55: f4:cf:ff:f7:8c:ad:4a:86:61:66:7e:af:51:db:c2: d7:df:73:4f:3f:43:1b:77:e2:ca:b0:e6:04:7b:29: 48:ee:82:78:5d:8c:da:a0:f1:c9:9c:b9:d2:0e:5e: 85:80:95:b8:7e:b6:50:87:09:31:07:f2:32:63:1f: 5a:78:30:56:03:21:db:c9:75:26:0f:7b:6c:56:56: 83:bf:40:28:c9:05:28:76:c9:36:1b:d4:f4:19:a6: a9:84:2a:3c:71:00:a1:4a:bb:f5:a9:9a:12:36:4a: b2:0f:cc:ec:78:e5:18:3f:f0:bc:09:5b:86:79:bd: 1b:4f:e2:11:be:d0:88:a5:00:a9:b7:ac:ef:f4:d8: 7d:2d:5c:e2:1c:aa:a6:ea:b9:53:7d:a1:1b:24:72: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:30:C1:61:40:45:5B:F6:53:3B:B9:24:BD:F4:56:EA:05:9A:D8:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:91:d6:51:31:2d:31:40:1e:a1:03:2f:fe:f2:6b:d5:47:cc: 11:45:79:d7:cc:f4:dd:cd:7d:16:14:c5:62:e8:79:d3:ae:b4: 4c:57:a5:6a:a7:ee:f7:1f:0f:71:c2:cd:51:af:79:a2:de:ad: cd:b9:1a:3e:94:00:7a:40:38:a9:3a:85:41:74:45:54:67:e9: 5d:64:c4:d8:b3:7f:29:f1:d6:71:4b:17:1c:09:74:be:6c:1d: 7c:d5:de:f6:90:43:4a:33:8f:d3:b3:ef:8d:af:c9:6a:97:77: 08:41:c0:ec:56:ff:ff:3a:28:61:61:db:0a:26:db:a2:8d:81: 14:32:68:5e:80:9d:9d:0e:95:9a:e9:0a:c6:69:a9:d7:fa:9d: 71:4a:68:7a:bc:33:1e:56:1c:08:fd:eb:0b:26:51:30:9e:0f: c6:8c:41:d9:56:37:47:d8:3d:eb:81:19:10:25:06:b5:b3:4d: 27:2f:c1:14:73:36:c4:bc:c2:6a:3f:ad:e1:a8:54:01:3c:09: e8:35:a3:af:58:a6:f3:da:0b:10:22:c4:53:55:47:7a:e4:da: 09:2c:9a:11:cd:3d:bf:4a:65:b2:68:be:d5:33:61:97:a0:0b: 1e:41:59:22:4c:63:a3:d5:83:ce:30:bd:08:f0:48:54:10:20: 02:da:25:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBcFwH8Z/mPAOAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZWVjZWZmZDEtMzliMy00Y2Y4LTk5NTQtNWMwM2JmNmRhYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSdc1A1ZXCpxtfXF9HqfGL8PPjDyKKMTwnKF x2OJxFqdKoDrbZxevob5cDZb6A8yWeBaslaqdwSbT3LsmJM1wgFwuvV7Ky3w8pQf DN+ztkVhGwvAAP8rxlzf6TCK/bzB8d1nBMGH7lX0z//3jK1KhmFmfq9R28LX33NP P0Mbd+LKsOYEeylI7oJ4XYzaoPHJnLnSDl6FgJW4frZQhwkxB/IyYx9aeDBWAyHb yXUmD3tsVlaDv0AoyQUodsk2G9T0GaaphCo8cQChSrv1qZoSNkqyD8zseOUYP/C8 CVuGeb0bT+IRvtCIpQCpt6zv9Nh9LVziHKqm6rlTfaEbJHJs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4wwWFARVv2Uzu5JL30VuoFmtjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMzk1OTU0M2ItMTJiNC0z YTY1LTg0MmItOTg3ZTJjM2NiMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqR1lExLTFAHqEDL/7ya9VHzBFFedfM9N3NfRYUxWLoedOutExXpWqn 7vcfD3HCzVGveaLerc25Gj6UAHpAOKk6hUF0RVRn6V1kxNizfynx1nFLFxwJdL5s HXzV3vaQQ0ozj9Oz742vyWqXdwhBwOxW//86KGFh2wom26KNgRQyaF6AnZ0OlZrp CsZpqdf6nXFKaHq8Mx5WHAj96wsmUTCeD8aMQdlWN0fYPeuBGRAlBrWzTScvwRRz NsS8wmo/reGoVAE8Ceg1o69YpvPaCxAixFNVR3rk2gksmhHNPb9KZbJovtUzYZeg Cx5BWSJMY6PVg84wvQjwSFQQIALaJV4= -----END CERTIFICATE-----Generated at Sun Jun 29 11:48:12 2025 by rpki-client