$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa File: d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa (raw, json) Hash identifier: 2G3bSjXB2N9vq0BvXvlmtKQOL6WfTtZcfHIBKxnrOp4= Subject key identifier: 84:23:84:2D:C2:D7:C2:1C:83:C9:14:0C:F9:B1:87:CF:5E:C8:0F:D0 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584A46A5A97E6F01BC3D483CE200 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 32181 IP address blocks: 64.224.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:a9:7e:6f:01:bc:3d:48:3c:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=af3b94b1-f9cd-42b3-82ee-375a94afef8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:73:aa:05:3b:a3:f2:70:59:7c:f5:66:18: 00:2c:97:6c:62:2e:83:e3:89:55:34:1c:66:6e:10: d8:4b:70:3b:52:05:f9:66:0a:5b:d4:1c:cf:5f:1b: d4:76:9f:e0:75:ef:ad:40:45:d6:17:9d:83:d9:59: 6a:53:73:d3:62:ae:74:cf:f9:83:c4:f1:4a:a1:54: 55:fb:ab:e7:8a:0b:77:60:c6:fc:87:6b:fd:6d:bf: 6b:d4:1d:d5:4c:70:d8:d4:97:ad:e4:61:06:af:21: 59:a1:38:b2:50:b7:15:cf:66:4e:c7:84:4b:ce:c0: 24:07:a7:da:0f:67:68:4f:8e:4b:74:54:c7:96:92: 80:66:6c:60:c9:52:e9:a7:1f:65:07:26:80:91:22: f7:ac:67:14:af:44:91:13:34:bb:6a:12:b6:c7:f6: aa:e2:df:6e:b5:5f:4a:20:d4:0f:86:d1:e9:b3:8b: 50:03:8d:b2:8d:53:cb:24:f2:1f:05:2a:53:72:24: 37:22:0c:22:80:5b:76:2b:0c:d6:6d:d1:65:e9:03: 62:d2:d6:ee:7d:33:7f:fa:8d:91:07:ae:ee:90:13: b9:23:7b:19:69:a8:ca:e0:61:ff:d5:c8:7c:d6:c5: 24:e3:5e:42:86:28:df:1f:a8:76:a4:f1:df:7c:35: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:23:84:2D:C2:D7:C2:1C:83:C9:14:0C:F9:B1:87:CF:5E:C8:0F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3e:6d:b3:2a:07:d8:a4:14:9f:d4:62:68:45:f7:1c:02:eb: 10:b9:c1:0f:d6:ae:79:e3:a2:a2:fa:fd:2e:87:28:0b:14:0c: c0:0a:0f:83:ca:7a:18:0d:40:e8:e2:4c:51:e2:dd:40:6c:f4: e0:99:10:e7:9c:ce:b4:eb:70:2d:6e:43:f2:45:7f:7c:c9:06: a6:1b:97:cd:1f:30:24:58:89:d5:e2:11:ff:d3:e7:7c:b7:24: 53:d0:39:52:3c:d6:0d:ca:27:3f:62:c8:2c:e8:4c:cd:b0:c0: ec:e4:dc:51:6d:b5:3f:dd:51:dd:94:69:f2:a3:f2:a5:c5:d8: c5:c2:01:52:e2:d6:83:bb:bf:53:d9:ed:42:de:42:7c:0f:2e: 11:96:1d:9f:5e:f9:23:0f:92:f8:6c:37:bb:b2:04:c1:46:35: 88:1b:cf:9a:97:18:3b:9b:6e:f1:68:d8:92:35:87:78:7e:7a: 68:35:66:27:e1:88:5e:59:d3:ba:5d:08:39:1e:71:1a:f4:63: 75:b6:13:0b:a4:70:9e:09:3c:ba:f7:5d:24:8b:1d:dd:75:52: c8:0e:5c:02:72:3b:a6:b0:61:49:cd:2a:4a:8b:c3:30:20:a2: bd:09:32:7d:f9:60:d6:4b:44:7f:5b:c4:a3:24:95:a6:09:d6: dd:63:36:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpal+bwG8PUg84gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk YWYzYjk0YjEtZjljZC00MmIzLTgyZWUtMzc1YTk0YWZlZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm9zqgU7o/JwWXz1ZhgALJdsYi6D44lVNBxm bhDYS3A7UgX5Zgpb1BzPXxvUdp/gde+tQEXWF52D2VlqU3PTYq50z/mDxPFKoVRV +6vnigt3YMb8h2v9bb9r1B3VTHDY1Jet5GEGryFZoTiyULcVz2ZOx4RLzsAkB6fa D2doT45LdFTHlpKAZmxgyVLppx9lByaAkSL3rGcUr0SREzS7ahK2x/aq4t9utV9K INQPhtHps4tQA42yjVPLJPIfBSpTciQ3IgwigFt2KwzWbdFl6QNi0tbufTN/+o2R B67ukBO5I3sZaajK4GH/1ch81sUk415ChijfH6h2pPHffDUbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQjhC3C18Icg8kUDPmxh89eyA/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZDZiZDQ5NzEtYzQ1Mi0z NDgyLWFiZDEtZWE3YjViMmE3MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4+bbMqB9ikFJ/UYmhF9xwC6xC5wQ/WrnnjoqL6/S6HKAsUDMAKD4PK ehgNQOjiTFHi3UBs9OCZEOeczrTrcC1uQ/JFf3zJBqYbl80fMCRYidXiEf/T53y3 JFPQOVI81g3KJz9iyCzoTM2wwOzk3FFttT/dUd2UafKj8qXF2MXCAVLi1oO7v1PZ 7ULeQnwPLhGWHZ9e+SMPkvhsN7uyBMFGNYgbz5qXGDubbvFo2JI1h3h+emg1Zifh iF5Z07pdCDkecRr0Y3W2EwukcJ4JPLr3XSSLHd11UsgOXAJyO6awYUnNKkqLwzAg or0JMn35YNZLRH9bxKMklaYJ1t1jNro= -----END CERTIFICATE-----Generated at Sun Jun 29 06:56:30 2025 by rpki-client