$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa File: ff23613f-b262-34dc-8e04-9c24922a8957.roa (raw, json) Hash identifier: VgRzDP/GAFDaI94o4R28VB6AIw33d7UTkQB8tcUgN7g= Subject key identifier: 47:E1:BF:2C:43:C5:31:B1:29:F3:FB:DF:C6:66:3C:8D:2C:9B:23:89 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F43285849E7BA783C1A6BB0A0CDEC18C0 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 20454 IP address blocks: 64.38.244.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:78:3c:1a:6b:b0:a0:cd:ec:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=e3eff2cd-4df6-4e72-8d4f-404e713fba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:d1:7d:d7:0c:c5:c0:d8:5b:69:ab:b6:b2: ce:61:66:79:e2:b0:52:c8:7d:e6:80:fd:4f:9e:a4: 0a:fd:26:f5:be:0a:9f:86:48:4b:45:66:08:9f:dd: 64:7e:4d:50:d1:c2:87:a2:a5:d4:2f:fb:b6:b5:68: ae:7c:e7:2e:64:e7:65:67:2b:23:27:19:90:48:99: bb:39:1e:98:83:92:9a:47:30:85:34:d8:15:b2:b2: 3d:46:8b:1d:a9:70:78:bf:44:f9:37:cc:f7:8e:10: 17:d7:d5:0a:2c:16:9e:52:b1:1a:04:2d:c0:88:80: cd:e7:01:9a:db:c4:46:0a:3a:92:56:5d:4a:7c:b4: 11:90:d9:9f:b5:75:18:1c:f3:cb:d0:7c:0e:34:9c: 79:85:01:1b:2b:ba:77:e6:17:15:49:f4:01:2b:51: 18:ed:a2:33:f6:22:6e:8e:21:3a:68:66:d2:88:6e: 7d:3b:97:18:af:f4:f7:0b:17:d1:b6:5b:e5:8c:51: 9a:d7:9a:42:66:fc:82:1c:5c:35:06:48:74:6d:74: 96:d8:22:31:72:e6:b5:00:a1:82:d2:f1:50:cb:77: 29:7d:94:4d:3b:48:c1:7a:b2:82:6d:c9:fb:1a:a0: 04:46:ef:d6:8d:af:d5:e8:68:ba:12:7e:6f:8b:bb: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E1:BF:2C:43:C5:31:B1:29:F3:FB:DF:C6:66:3C:8D:2C:9B:23:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8a:6e:dd:ae:16:f4:09:6b:d5:eb:50:62:79:2c:f1:3b:8b: 5a:0c:2e:4c:64:d2:06:d8:0c:66:61:e0:bd:83:4d:fe:33:07: c4:bb:20:5b:fb:33:8f:b6:23:02:ee:6f:d2:67:74:9e:1c:ac: ca:e0:2f:4a:5e:9b:e9:da:26:b5:47:fd:09:59:98:7b:b8:17: 41:d5:f9:7a:3f:f8:8a:eb:40:22:20:0c:40:36:56:21:9e:28: c6:12:75:c0:5b:cc:9c:04:10:2c:0d:a8:e3:50:5f:3f:fc:c4: 86:44:72:60:98:2e:d9:35:06:3b:cc:71:59:f6:50:0e:73:6d: 44:35:31:21:bf:12:09:6d:4c:dd:10:7f:db:c1:30:5a:8c:f8: 79:db:8c:c1:33:5d:28:8e:54:36:7f:ee:01:fa:b5:f0:89:48: f2:7c:e9:46:73:60:08:f8:af:03:07:ca:ba:da:32:48:69:dc: cf:be:34:47:1f:46:c2:1a:21:4a:9a:ae:30:db:67:52:9d:8e: fc:b3:c6:ec:a5:7f:9f:65:e6:fc:e4:ba:30:b1:76:7b:c9:01: 78:cb:05:15:16:6b:f0:2e:f4:1c:ef:e3:fb:c5:ca:43:79:7c: 8d:e1:2d:88:b9:a7:93:08:61:de:4b:49:67:d6:dc:f2:63:7f: 71:09:87:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnung8GmuwoM3sGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZTNlZmYyY2QtNGRmNi00ZTcyLThkNGYtNDA0ZTcxM2ZiYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNHRfdcMxcDYW2mrtrLOYWZ54rBSyH3mgP1P nqQK/Sb1vgqfhkhLRWYIn91kfk1Q0cKHoqXUL/u2tWiufOcuZOdlZysjJxmQSJm7 OR6Yg5KaRzCFNNgVsrI9RosdqXB4v0T5N8z3jhAX19UKLBaeUrEaBC3AiIDN5wGa 28RGCjqSVl1KfLQRkNmftXUYHPPL0HwONJx5hQEbK7p35hcVSfQBK1EY7aIz9iJu jiE6aGbSiG59O5cYr/T3CxfRtlvljFGa15pCZvyCHFw1Bkh0bXSW2CIxcua1AKGC 0vFQy3cpfZRNO0jBerKCbcn7GqAERu/Wja/V6Gi6En5vi7uC+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfhvyxDxTGxKfP738ZmPI0smyOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZmYyMzYxM2YtYjI2Mi0z NGRjLThlMDQtOWMyNDkyMmE4OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKKbt2uFvQJa9XrUGJ5LPE7i1oMLkxk0gbYDGZh4L2DTf4zB8S7IFv7 M4+2IwLub9JndJ4crMrgL0pem+naJrVH/QlZmHu4F0HV+Xo/+IrrQCIgDEA2ViGe KMYSdcBbzJwEECwNqONQXz/8xIZEcmCYLtk1BjvMcVn2UA5zbUQ1MSG/EgltTN0Q f9vBMFqM+HnbjMEzXSiOVDZ/7gH6tfCJSPJ86UZzYAj4rwMHyrraMkhp3M++NEcf RsIaIUqarjDbZ1Kdjvyzxuylf59l5vzkujCxdnvJAXjLBRUWa/Au9Bzv4/vFykN5 fI3hLYi5p5MIYd5LSWfW3PJjf3EJhyE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:00:02 2025 by rpki-client