$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa File: cbf0ebb9-455c-3107-8c84-974a7f12d863.roa (raw, json) Hash identifier: F//XG2gsCrp90FheUWydUYC25iN8vi0YmygQfwmJFO0= Subject key identifier: 77:DA:92:EA:54:41:76:AD:16:25:BA:18:AE:AC:58:C1:9C:6C:8F:9F Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584A549B17C7EF898701727D5A00 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20454 IP address blocks: 64.38.208.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:17:c7:ef:89:87:01:72:7d:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=94f3eb1b-dad6-433c-81cd-ed85bb97189e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:98:a0:85:b5:55:75:cc:55:62:c1:80:1b: db:21:7b:d6:e0:4e:8d:30:c2:83:13:70:7e:0e:c1: 0c:10:95:27:ed:27:c9:c5:ee:6d:58:8d:f0:7e:7a: 31:62:14:d3:b2:f2:5f:37:9d:b2:c0:76:f1:44:50: b0:3d:0e:51:dc:87:bc:b6:42:4e:61:b6:f7:21:bd: 9f:51:d8:36:06:64:3b:46:d7:07:a0:d7:f7:4a:f0: 63:1d:12:ed:25:a8:36:65:1d:42:0e:d5:64:95:d7: 61:51:fb:5a:63:cd:c6:ff:4d:21:58:86:4c:31:ff: eb:b4:1d:60:5e:cc:f0:78:d5:d7:0b:52:f7:30:06: 4e:8a:71:db:3d:6a:57:b0:da:d1:d4:30:5f:b2:83: 3c:86:ea:67:ff:de:ee:50:84:6b:21:2d:1a:55:5d: 29:60:34:8f:44:d7:54:43:be:0f:f3:16:05:52:54: 4e:9f:85:d9:fb:03:24:d3:d0:b1:13:7d:0d:5c:8d: 12:08:46:e3:0e:63:27:45:80:c0:49:40:b4:1d:36: 39:c5:e8:33:75:2d:3f:03:be:2f:d7:54:6c:a7:d9: dd:c0:c7:7c:20:ab:10:46:af:3f:a1:e7:16:c8:7c: 5d:76:86:36:4b:18:9f:07:a4:f1:3c:1d:13:fd:06: 09:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DA:92:EA:54:41:76:AD:16:25:BA:18:AE:AC:58:C1:9C:6C:8F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:26:4d:a5:bc:4f:1c:2b:b1:30:05:48:9a:3b:a6:0d:74:6d: c1:a5:0e:4c:47:45:25:9d:95:3d:f4:aa:da:f3:90:76:59:6d: 06:9f:77:95:33:5d:a5:07:aa:4f:05:ed:e3:8f:75:34:3d:81: 7d:7a:16:c4:92:b0:68:d3:5a:af:ad:03:38:a3:74:51:19:34: 67:31:b1:5a:d3:e4:58:04:5f:33:1c:6c:89:b8:40:b6:0d:7d: b1:02:c1:f6:2e:5b:53:69:0c:bf:12:1a:92:37:71:ee:ad:0f: a4:dd:92:39:29:b5:5c:e5:53:1e:65:ea:2f:0e:a7:5e:92:a8: a5:b6:89:60:41:95:03:85:72:8c:fa:e7:b9:d5:8f:fa:21:82: 61:98:8e:cc:c2:e8:2f:46:fb:3a:a9:99:b0:1b:28:df:ca:a1: f2:ac:92:1d:0f:a1:8a:7a:78:7a:59:19:79:f4:db:20:ab:85: 26:b4:fe:14:af:4d:1c:42:c7:68:d1:d3:e5:77:8a:0e:14:4c: bc:64:01:f2:11:7e:39:c2:34:62:4b:af:a3:6c:0f:a2:36:6c: 48:b1:2d:02:6d:4c:43:a8:2d:38:6f:d1:81:b1:66:0f:37:07: fd:1b:73:cd:ba:b9:91:96:88:ba:90:88:df:08:75:90:8f:e4: e2:2d:bf:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxfH74mHAXJ9WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk OTRmM2ViMWItZGFkNi00MzNjLTgxY2QtZWQ4NWJiOTcxODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC2YoIW1VXXMVWLBgBvbIXvW4E6NMMKDE3B+ DsEMEJUn7SfJxe5tWI3wfnoxYhTTsvJfN52ywHbxRFCwPQ5R3Ie8tkJOYbb3Ib2f Udg2BmQ7RtcHoNf3SvBjHRLtJag2ZR1CDtVklddhUftaY83G/00hWIZMMf/rtB1g XszweNXXC1L3MAZOinHbPWpXsNrR1DBfsoM8hupn/97uUIRrIS0aVV0pYDSPRNdU Q74P8xYFUlROn4XZ+wMk09CxE30NXI0SCEbjDmMnRYDASUC0HTY5xegzdS0/A74v 11Rsp9ndwMd8IKsQRq8/oecWyHxddoY2SxifB6TxPB0T/QYJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfakupUQXatFiW6GK6sWMGcbI+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvY2JmMGViYjktNDU1Yy0z MTA3LThjODQtOTc0YTdmMTJkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsmTaW8TxwrsTAFSJo7pg10bcGlDkxHRSWdlT30qtrzkHZZbQafd5Uz XaUHqk8F7eOPdTQ9gX16FsSSsGjTWq+tAzijdFEZNGcxsVrT5FgEXzMcbIm4QLYN fbECwfYuW1NpDL8SGpI3ce6tD6TdkjkptVzlUx5l6i8Op16SqKW2iWBBlQOFcoz6 57nVj/ohgmGYjszC6C9G+zqpmbAbKN/KofKskh0PoYp6eHpZGXn02yCrhSa0/hSv TRxCx2jR0+V3ig4UTLxkAfIRfjnCNGJLr6NsD6I2bEixLQJtTEOoLThv0YGxZg83 B/0bc826uZGWiLqQiN8IdZCP5OItv3Q= -----END CERTIFICATE-----Generated at Sun Jun 29 11:21:56 2025 by rpki-client