$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/bd2eb3af-948e-3005-ae78-90f34d4f5889.roa File: bd2eb3af-948e-3005-ae78-90f34d4f5889.roa (raw, json) Hash identifier: s6Dt7J8Uo+bS5eAqHuvYwXNc++8RZlm+I3oOkBtBrIg= Subject key identifier: 6D:43:EE:4F:37:71:EE:52:D3:0E:73:97:65:90:05:EE:95:76:9B:92 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F43285849DA43B276CE6DC430C12A9A00 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/bd2eb3af-948e-3005-ae78-90f34d4f5889.roa Signing time: Wed 14 May 2025 17:16:27 +0000 ROA not before: Wed 14 May 2025 17:16:27 +0000 ROA not after: Tue 12 Aug 2025 17:16:27 +0000 asID: 22709 IP address blocks: 64.181.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:43:b2:76:ce:6d:c4:30:c1:2a:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: May 14 17:16:27 2025 GMT Not After : Aug 12 17:16:27 2025 GMT Subject: CN=a904432a-03bf-4f29-bd33-a1846d1832ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:b6:f6:fe:ac:ae:12:da:0d:68:ef:cc:40: 66:11:5c:14:0d:50:ef:65:72:e1:ad:f0:cf:a6:08: c4:bc:68:ac:44:c7:8c:d6:33:16:87:98:8e:02:15: a5:60:5a:bf:c9:9e:9e:85:6b:b9:d3:8e:42:3c:2c: 28:4f:73:b5:4c:5e:92:ae:22:3e:4c:4e:ff:93:07: 2c:66:99:93:27:bd:22:91:38:21:e1:12:b8:f2:6e: 99:49:b6:c9:92:25:fc:80:a5:49:5b:9c:41:66:4d: 01:e9:37:87:e9:36:c9:aa:7c:72:9e:46:d6:9c:3c: 69:f8:70:b7:54:33:af:7a:1a:dd:42:ea:da:77:40: 59:4b:7d:7d:2a:d5:2b:55:89:dc:29:05:b6:33:2d: 57:20:45:78:71:47:ea:23:3f:4a:9e:08:46:65:f3: 51:9e:8b:ae:22:21:bb:9d:5a:a5:99:e1:84:a8:e5: bc:93:ef:9a:b6:54:15:28:2d:f2:c8:e5:a7:e7:7f: 72:ba:29:b5:27:62:a3:26:95:bd:82:08:d7:9e:a9: b0:ed:aa:97:cd:2d:f5:7b:46:09:bd:40:da:27:8b: 81:15:80:57:c4:2a:46:6f:6e:a9:3a:c0:e3:76:32: 5e:eb:ae:e4:b5:50:d4:6b:14:4d:dc:ec:71:42:34: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:43:EE:4F:37:71:EE:52:D3:0E:73:97:65:90:05:EE:95:76:9B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/bd2eb3af-948e-3005-ae78-90f34d4f5889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 64.181.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ec:3b:89:23:96:0f:fe:dc:1b:b2:37:d6:48:20:81:1c:5d: eb:e1:eb:6a:3b:f4:fb:4f:65:45:b4:52:50:96:38:ca:97:1f: cb:9a:73:60:11:30:7d:2a:c7:16:1e:cb:65:e0:b6:15:cf:de: d2:03:96:72:c9:2b:7c:21:71:14:5c:eb:b2:a1:19:0c:54:68: 30:d3:87:10:88:fd:f6:b9:fb:7e:23:e6:86:48:75:20:97:2b: e4:aa:6f:ce:df:36:a4:a3:68:94:63:6b:47:a1:4c:56:56:12: 97:2b:a9:53:52:13:96:5d:5c:5d:af:3d:09:3b:ef:7c:6a:85: 41:46:73:6f:f1:9f:f5:06:3a:05:bc:2d:31:52:81:02:27:4f: b4:43:8e:2a:3e:cd:a9:c3:97:d7:c0:2e:a9:9a:db:77:64:a2: 44:2b:44:51:f8:74:ad:fd:42:f4:65:48:d5:b7:b5:ed:f2:35: a2:1f:bb:b2:c5:50:17:63:70:11:68:b8:3f:1c:74:ee:a2:e7: 76:13:ec:2f:6a:a6:4f:0d:18:26:f3:7e:c0:39:d2:61:0c:93: 73:bf:2d:90:de:aa:bd:a8:15:b6:83:96:a4:98:22:62:d9:f6: 95:c5:5d:5d:46:70:20:73:6e:31:f8:2f:f2:37:e7:cd:82:a7: a0:55:3c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnaQ7J2zm3EMMEqmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDUxNDE3MTYyN1oXDTI1MDgxMjE3MTYyN1owLzEtMCsGA1UEAxMk YTkwNDQzMmEtMDNiZi00ZjI5LWJkMzMtYTE4NDZkMTgzMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4y29v6srhLaDWjvzEBmEVwUDVDvZXLhrfDP pgjEvGisRMeM1jMWh5iOAhWlYFq/yZ6ehWu5045CPCwoT3O1TF6SriI+TE7/kwcs ZpmTJ70ikTgh4RK48m6ZSbbJkiX8gKVJW5xBZk0B6TeH6TbJqnxynkbWnDxp+HC3 VDOvehrdQurad0BZS319KtUrVYncKQW2My1XIEV4cUfqIz9KnghGZfNRnouuIiG7 nVqlmeGEqOW8k++atlQVKC3yyOWn539yuim1J2KjJpW9ggjXnqmw7aqXzS31e0YJ vUDaJ4uBFYBXxCpGb26pOsDjdjJe667ktVDUaxRN3OxxQjQshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1D7k83ce5S0w5zl2WQBe6VdpuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvYmQyZWIzYWYtOTQ4ZS0z MDA1LWFlNzgtOTBmMzRkNGY1ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXsO4kjlg/+3BuyN9ZIIIEcXevh62o79PtPZUW0UlCWOMqXH8uac2AR MH0qxxYey2XgthXP3tIDlnLJK3whcRRc67KhGQxUaDDThxCI/fa5+34j5oZIdSCX K+Sqb87fNqSjaJRja0ehTFZWEpcrqVNSE5ZdXF2vPQk773xqhUFGc2/xn/UGOgW8 LTFSgQInT7RDjio+zanDl9fALqma23dkokQrRFH4dK39QvRlSNW3te3yNaIfu7LF UBdjcBFouD8cdO6i53YT7C9qpk8NGCbzfsA50mEMk3O/LZDeqr2oFbaDlqSYImLZ 9pXFXV1GcCBzbjH4L/I3582Cp6BVPII= -----END CERTIFICATE-----Generated at Tue Jul 1 17:06:45 2025 by rpki-client