$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1155c666-f6b9-34d1-9bd3-cb132eafe585.roa File: 1155c666-f6b9-34d1-9bd3-cb132eafe585.roa (raw, json) Hash identifier: ND+HNqoGfe7Lkex48qrjsOYAXFZukirr0Uum9dugCS4= Subject key identifier: CF:BD:47:F3:9D:2E:5E:72:DA:BA:9E:FC:3E:46:18:31:32:B8:28:1B Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F43285849F715275CE519009A376D9D00 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1155c666-f6b9-34d1-9bd3-cb132eafe585.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 397362 IP address blocks: 64.19.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:27:5c:e5:19:00:9a:37:6d:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=57c012da-17b7-4132-a1cd-05d767d48d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:43:79:d5:e8:77:59:e5:ba:98:ca:be:03:09: 6f:b6:59:1f:86:d5:9a:eb:11:6f:e4:68:98:24:68: d9:2a:5b:85:7c:42:e7:3c:42:fb:af:fe:9b:8e:04: 8a:28:4e:6c:89:38:52:c6:a4:ff:b1:3c:38:96:99: 7e:0e:32:be:81:7f:52:19:a2:0d:d9:84:03:2b:29: 19:e8:70:d2:af:9e:8e:22:96:be:8f:64:19:bd:9d: 7b:69:2c:5f:75:ff:6d:2b:de:7a:1f:98:b5:33:22: 41:c1:1a:ba:c0:9e:91:7d:f7:92:f3:b7:6d:a1:8f: 12:f3:e8:c3:0b:1c:45:40:98:f6:01:43:95:9e:e5: 5b:87:ca:79:7a:42:ab:ce:1b:42:34:5f:45:98:69: 61:b1:ae:24:32:6c:08:fa:2f:b7:0a:a2:cd:78:7f: ec:19:60:56:cb:4b:dc:1e:8e:3a:f6:ac:dc:62:46: b9:83:fd:d7:57:6d:5d:db:a1:88:e6:43:4e:dc:76: e0:93:63:cb:a2:22:8b:b7:42:a3:88:25:dc:0d:41: f2:12:54:1e:d9:39:e0:24:44:9c:81:65:bc:68:3c: b5:3c:d0:d8:b9:73:be:44:84:80:48:7a:22:c9:8e: 66:71:95:2c:e4:10:8c:44:b7:95:6b:34:ba:cf:75: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BD:47:F3:9D:2E:5E:72:DA:BA:9E:FC:3E:46:18:31:32:B8:28:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1155c666-f6b9-34d1-9bd3-cb132eafe585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 64.19.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:70:eb:87:4d:cc:13:e3:ba:d4:a2:1f:ae:9c:e9:f1:08:64: 28:39:39:ed:62:35:90:1b:36:2e:99:93:aa:dd:e0:15:70:30: 26:eb:22:be:20:78:44:b5:1c:d3:3c:3e:4e:c7:1a:08:60:b7: 7a:41:90:66:20:41:5b:9b:df:25:d2:8f:c8:a0:68:30:64:f5: c8:51:8e:b4:3e:b8:94:48:7d:0e:a6:26:1b:d9:92:07:9a:84: c2:d7:35:e2:b0:5e:23:b9:03:66:0a:54:b1:5a:ce:4e:d8:a5: bb:36:83:fa:dc:f4:5e:13:34:cc:51:4c:18:3f:aa:1a:2a:a4: bb:0c:2f:a8:31:7a:f4:18:e1:2e:04:0f:ce:f0:21:36:62:6b: 28:00:00:cf:bd:be:f7:86:9d:50:56:e8:e9:4f:a5:3f:88:9d: 45:fc:4c:7d:d9:43:fb:02:03:46:45:9a:a2:3c:ab:e5:46:f3: 9e:ba:65:e0:b8:c1:91:4b:75:ee:1f:9f:ea:ba:f0:ec:94:76: f0:24:49:7f:be:8f:e3:75:1f:69:1e:4b:47:a3:f1:1a:ba:22: 4b:57:d0:0f:d9:28:03:12:d9:93:41:d8:3f:9e:e3:66:99:b0: 1c:32:c6:30:2d:70:7f:c1:58:eb:e2:0f:11:0a:bb:3e:9d:59: 11:b4:04:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSdc5RkAmjdtnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NTdjMDEyZGEtMTdiNy00MTMyLWExY2QtMDVkNzY3ZDQ4ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUN51eh3WeW6mMq+AwlvtlkfhtWa6xFv5GiY JGjZKluFfELnPEL7r/6bjgSKKE5siThSxqT/sTw4lpl+DjK+gX9SGaIN2YQDKykZ 6HDSr56OIpa+j2QZvZ17aSxfdf9tK956H5i1MyJBwRq6wJ6RffeS87dtoY8S8+jD CxxFQJj2AUOVnuVbh8p5ekKrzhtCNF9FmGlhsa4kMmwI+i+3CqLNeH/sGWBWy0vc Ho469qzcYka5g/3XV21d26GI5kNO3Hbgk2PLoiKLt0KjiCXcDUHyElQe2TngJESc gWW8aDy1PNDYuXO+RISASHoiyY5mcZUs5BCMRLeVazS6z3VIlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+9R/OdLl5y2rqe/D5GGDEyuCgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMTE1NWM2NjYtZjZiOS0z NGQxLTliZDMtY2IxMzJlYWZlNTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBNlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFw64dNzBPjutSiH66c6fEIZCg5Oe1iNZAbNi6Zk6rd4BVwMCbrIr4g eES1HNM8Pk7HGghgt3pBkGYgQVub3yXSj8igaDBk9chRjrQ+uJRIfQ6mJhvZkgea hMLXNeKwXiO5A2YKVLFazk7Ypbs2g/rc9F4TNMxRTBg/qhoqpLsML6gxevQY4S4E D87wITZiaygAAM+9vveGnVBW6OlPpT+InUX8TH3ZQ/sCA0ZFmqI8q+VG8566ZeC4 wZFLde4fn+q68OyUdvAkSX++j+N1H2keS0ej8Rq6IktX0A/ZKAMS2ZNB2D+e42aZ sBwyxjAtcH/BWOviDxEKuz6dWRG0BNc= -----END CERTIFICATE-----Generated at Tue Jul 1 01:09:36 2025 by rpki-client