$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0eaa549b-8a19-35de-a478-3d2acd8ac037.roa File: 0eaa549b-8a19-35de-a478-3d2acd8ac037.roa (raw, json) Hash identifier: tQl9QzECA7Llq0dv/JOHLhHIu2gFEKs2ElI4lAhQxB8= Subject key identifier: 95:02:D6:20:3B:51:61:9E:13:44:9C:7C:87:09:A1:FF:B9:49:30:ED Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A652A84B0BDDE2BBBDD1A6E08 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0eaa549b-8a19-35de-a478-3d2acd8ac037.roa Signing time: Thu 03 Jul 2025 11:23:04 +0000 ROA not before: Thu 03 Jul 2025 11:23:04 +0000 ROA not after: Wed 01 Oct 2025 11:23:04 +0000 asID: 212238 IP address blocks: 64.6.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:2a:84:b0:bd:de:2b:bb:dd:1a:6e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 3 11:23:04 2025 GMT Not After : Oct 1 11:23:04 2025 GMT Subject: CN=4ac435c5-b58d-4c8e-8e73-39a72f05551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:f1:57:7c:aa:3c:b5:c0:1f:c1:2c:0e:4c: 51:aa:1b:e0:11:9b:8a:2a:35:25:de:ce:e1:dc:a2: 7a:e9:66:2d:a3:0d:28:d3:ea:c4:c5:4b:b5:37:ab: b7:5e:08:e7:6a:ae:35:0a:04:e7:b0:fb:84:5e:44: e0:b8:e7:b4:7a:41:84:3b:e7:3a:37:cc:0c:49:29: d0:b0:20:9e:3a:8b:be:7a:88:c1:04:e7:8d:45:1b: f5:2b:64:83:28:6f:94:34:7c:61:f4:02:17:57:d1: 34:bc:70:82:8a:36:a9:96:ce:97:28:38:9e:32:4b: fc:69:7b:40:c2:b3:34:04:da:25:6f:2e:46:dc:7b: 6d:e8:c5:63:30:7e:aa:81:fc:d8:d8:11:88:78:a5: 17:ea:47:36:4c:c8:1c:80:11:4b:89:35:5a:4c:ff: 3a:30:d1:7e:58:64:ba:20:d5:88:43:f0:9f:a2:76: 60:c8:6b:38:5c:26:14:ef:0a:8c:8e:5b:98:eb:02: 98:ac:8b:9d:90:af:16:7a:92:fe:53:7a:3a:bb:a6: 6e:99:10:47:80:89:f9:b0:b3:82:0f:cc:7c:78:56: 73:18:3e:b8:db:30:63:48:8f:fb:8a:ed:b9:f8:aa: ee:ad:c1:e3:23:50:a9:7b:f3:16:65:db:2c:e1:1d: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:02:D6:20:3B:51:61:9E:13:44:9C:7C:87:09:A1:FF:B9:49:30:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0eaa549b-8a19-35de-a478-3d2acd8ac037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.6.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a0:1c:86:ad:9c:64:d8:e7:62:06:9d:8f:f2:dd:cd:13:86: 12:6a:7a:31:e0:1c:39:09:0e:55:01:96:52:7c:d0:ba:56:31: 5f:5c:0c:ba:3a:fe:3d:38:f6:24:d7:af:1c:4c:b6:d1:bb:76: 28:71:73:7e:04:f0:a2:da:f9:0a:61:90:ab:0b:8e:c3:da:2e: 0f:0b:dc:9c:1f:a2:d7:82:8c:f4:bc:13:11:0b:30:dd:ef:fd: e7:8f:66:1d:eb:a4:a8:7b:0d:3b:27:c9:b1:f0:fd:2c:4d:a1: 51:3b:75:37:ba:20:09:79:16:85:e5:6d:e1:80:6d:a9:97:b4: da:5d:fa:05:2b:78:82:11:ba:84:89:39:2f:f2:f0:f4:2c:39: c4:22:86:e4:33:cc:96:19:53:2b:fc:78:71:0f:90:5f:18:45: 39:f3:8d:cc:f3:c7:32:33:90:c4:e6:4b:d6:01:a7:83:fb:63: 80:9d:ac:5d:1e:73:38:2b:91:27:a7:68:47:66:02:09:f1:3c: 2d:9d:9f:ea:6f:9b:c9:af:74:96:85:1d:0d:46:3f:c5:49:f6: 50:c1:de:f7:3a:b9:6d:41:70:bf:74:8f:e0:40:0d:1c:b0:0c: b8:bf:1d:b3:48:ff:6f:73:2c:73:08:57:92:29:0f:1c:b4:e5: 72:08:14:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplKoSwvd4ru90abggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcwMzExMjMwNFoXDTI1MTAwMTExMjMwNFowLzEtMCsGA1UEAxMk NGFjNDM1YzUtYjU4ZC00YzhlLThlNzMtMzlhNzJmMDU1NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrTxV3yqPLXAH8EsDkxRqhvgEZuKKjUl3s7h 3KJ66WYtow0o0+rExUu1N6u3Xgjnaq41CgTnsPuEXkTguOe0ekGEO+c6N8wMSSnQ sCCeOou+eojBBOeNRRv1K2SDKG+UNHxh9AIXV9E0vHCCijapls6XKDieMkv8aXtA wrM0BNolby5G3Htt6MVjMH6qgfzY2BGIeKUX6kc2TMgcgBFLiTVaTP86MNF+WGS6 INWIQ/CfonZgyGs4XCYU7wqMjluY6wKYrIudkK8WepL+U3o6u6ZumRBHgIn5sLOC D8x8eFZzGD642zBjSI/7iu25+KrurcHjI1Cpe/MWZdss4R2PqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUC1iA7UWGeE0ScfIcJof+5STDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGVhYTU0OWItOGExOS0z NWRlLWE0NzgtM2QyYWNkOGFjMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAatMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKygHIatnGTY52IGnY/y3c0ThhJqejHgHDkJDlUBllJ80LpWMV9cDLo6 /j049iTXrxxMttG7dihxc34E8KLa+QphkKsLjsPaLg8L3JwfoteCjPS8ExELMN3v /eePZh3rpKh7DTsnybHw/SxNoVE7dTe6IAl5FoXlbeGAbamXtNpd+gUreIIRuoSJ OS/y8PQsOcQihuQzzJYZUyv8eHEPkF8YRTnzjczzxzIzkMTmS9YBp4P7Y4CdrF0e czgrkSenaEdmAgnxPC2dn+pvm8mvdJaFHQ1GP8VJ9lDB3vc6uW1BcL90j+BADRyw DLi/HbNI/29zLHMIV5IpDxy05XIIFNw= -----END CERTIFICATE-----Generated at Fri Jul 4 17:57:06 2025 by rpki-client