$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa File: 84704c59-1b86-3949-9b9d-26dfdf55ba37.roa (raw, json) Hash identifier: Bf2Tt9NgLn5dJaa9QmlWepvv5NYJzCv7hw5r9bRic/g= Subject key identifier: DB:5E:7C:29:92:6B:99:CE:3D:FD:AF:FC:85:69:47:45:73:60:DB:31 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584A30502C558F7EEEF2D1830980 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 14090 IP address blocks: 64.21.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:2c:55:8f:7e:ee:f2:d1:83:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=28a8ea32-0356-4d31-92e7-e043c98a2e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:5c:f2:5d:e7:e9:68:6d:83:3c:63:8b:aa:65: 7e:cf:06:41:17:3c:2c:71:97:d5:04:8d:17:16:ca: 84:6d:00:ce:2c:0c:37:0d:6a:9b:c3:79:d6:95:02: 51:f5:70:23:76:85:66:90:0d:3b:14:ab:a2:ee:c7: f5:b0:d2:a7:cf:0d:2f:9b:cf:de:05:1b:bd:b6:03: ed:7a:4d:86:cd:89:09:7f:28:c1:0f:13:e5:10:5b: c3:91:06:83:de:37:20:df:c2:78:0c:1d:54:a0:f4: 95:60:10:36:3f:25:83:b0:5b:5f:db:4d:89:b4:d6: 61:28:b8:48:b2:95:ed:9a:f1:41:85:fd:a4:56:c0: 45:85:e3:46:c0:ea:43:91:0b:fa:c0:04:cb:23:d4: 03:8a:70:54:5e:70:eb:c5:83:f9:6f:1c:50:19:c8: bf:0d:1c:48:5d:73:8d:8a:ae:a3:8d:b0:75:8b:38: eb:42:51:bc:52:83:d9:78:9f:0b:8f:d4:b7:d0:7f: c2:26:25:cb:03:b8:94:06:1f:84:a7:ca:e8:b6:19: cf:50:4c:66:f4:9c:b8:02:1e:c5:b5:7a:ba:01:34: 9b:8b:f8:5a:92:42:aa:de:20:f2:1e:65:27:be:e0: c7:2f:3b:86:27:a0:8f:ee:55:39:07:79:22:bf:35: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5E:7C:29:92:6B:99:CE:3D:FD:AF:FC:85:69:47:45:73:60:DB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:80:0b:54:63:1e:0b:bf:8b:76:ac:36:b4:e9:49:11:03:0c: 01:1d:5d:30:ab:93:64:94:7a:8b:f1:57:8b:2f:89:42:8a:9e: 6d:3f:b8:a2:0e:66:7b:29:df:30:58:04:05:0f:b0:e1:3b:b1: fe:81:0b:09:31:6c:99:64:6c:c9:6e:16:3b:c8:da:fa:ee:ae: ed:d1:64:8e:ac:ee:32:95:e8:c8:6a:ba:11:6c:62:2a:a5:38: 04:e4:65:65:62:33:28:e3:85:5d:05:c7:e4:93:64:27:84:3a: 49:15:35:c5:13:05:75:b9:12:44:d0:30:72:79:a5:89:3d:b5: e8:ea:36:91:a2:cd:2f:98:7a:12:81:3a:74:fe:b2:1a:50:f8: 8e:08:bf:9f:57:e2:25:bc:d1:69:e0:7d:69:3d:bd:ae:f7:49: 1e:77:6d:d2:f3:1d:e0:6f:ee:cc:33:20:b2:1b:a8:92:e1:86: 38:6a:76:e1:29:04:ea:e0:35:49:0a:dd:40:b7:a1:47:5f:84: 00:98:a3:96:f6:80:52:3b:28:a0:11:e9:20:5c:ec:a3:0d:82: f3:3e:8a:a0:3c:0b:1a:b9:8b:f0:b2:78:a3:6d:9e:58:63:aa: 48:28:6a:21:c0:c5:00:f1:9c:be:77:37:4e:47:7d:36:69:d9: b0:a0:e3:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUCxVj37u8tGDCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjhhOGVhMzItMDM1Ni00ZDMxLTkyZTctZTA0M2M5OGEyZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FzyXefpaG2DPGOLqmV+zwZBFzwscZfVBI0X FsqEbQDOLAw3DWqbw3nWlQJR9XAjdoVmkA07FKui7sf1sNKnzw0vm8/eBRu9tgPt ek2GzYkJfyjBDxPlEFvDkQaD3jcg38J4DB1UoPSVYBA2PyWDsFtf202JtNZhKLhI spXtmvFBhf2kVsBFheNGwOpDkQv6wATLI9QDinBUXnDrxYP5bxxQGci/DRxIXXON iq6jjbB1izjrQlG8UoPZeJ8Lj9S30H/CJiXLA7iUBh+Ep8rothnPUExm9Jy4Ah7F tXq6ATSbi/hakkKq3iDyHmUnvuDHLzuGJ6CP7lU5B3kivzXPYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtefCmSa5nOPf2v/IVpR0VzYNsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvODQ3MDRjNTktMWI4Ni0z OTQ5LTliOWQtMjZkZmRmNTViYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyAC1RjHgu/i3asNrTpSREDDAEdXTCrk2SUeovxV4sviUKKnm0/uKIO Znsp3zBYBAUPsOE7sf6BCwkxbJlkbMluFjvI2vruru3RZI6s7jKV6MhquhFsYiql OATkZWViMyjjhV0Fx+STZCeEOkkVNcUTBXW5EkTQMHJ5pYk9tejqNpGizS+YehKB OnT+shpQ+I4Iv59X4iW80WngfWk9va73SR53bdLzHeBv7swzILIbqJLhhjhqduEp BOrgNUkK3UC3oUdfhACYo5b2gFI7KKAR6SBc7KMNgvM+iqA8Cxq5i/CyeKNtnlhj qkgoaiHAxQDxnL53N05HfTZp2bCg4yY= -----END CERTIFICATE-----Generated at Mon Jun 30 21:27:54 2025 by rpki-client