$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/5815aceb-897c-3337-bfa8-f646fc70f495.roa File: 5815aceb-897c-3337-bfa8-f646fc70f495.roa (raw, json) Hash identifier: 34GrAcHvoprfg+bn3TRB/MQckMoCqVCAggxPWkErUBM= Subject key identifier: FB:13:60:86:3B:55:66:82:68:14:74:D3:D1:5B:F0:24:D3:B2:03:A4 Certificate issuer: /CN=ea2bb73c-6f2f-4644-b33f-c7248e5f53b4 Certificate serial: 010D0C9F4328584A4AD58ACCB455282097DA63FC Authority key identifier: 40:C5:89:00:01:1C:25:5D:13:F2:94:67:C0:12:DC:00:CB:B8:A7:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/5815aceb-897c-3337-bfa8-f646fc70f495.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 401429 IP address blocks: 64.239.112.0/23 maxlen: 24 2607:ddc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:8a:cc:b4:55:28:20:97:da:63:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2bb73c-6f2f-4644-b33f-c7248e5f53b4 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=bef6fbd1-cedf-42bf-944b-f85b2f2efe19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:df:10:bd:69:9d:be:51:1a:9d:ef:09:77: d2:51:8f:d4:99:4e:22:b6:a8:c6:fc:95:a1:10:05: 1b:e5:22:a2:24:e8:9b:78:a5:ce:85:08:36:10:eb: e4:bf:24:39:e3:9a:33:29:e0:b6:f7:64:ff:79:a6: 13:71:b7:ed:51:29:65:a2:10:3e:cd:67:b7:90:2d: cb:fd:34:e9:49:7e:ea:0a:ce:bf:17:d0:38:3c:64: da:9d:06:5c:56:a9:0d:3e:21:88:c6:20:ae:7c:e3: 4c:4f:ea:61:e5:28:5c:82:e5:eb:c4:9d:47:16:b1: 7b:89:5d:26:49:80:ee:79:74:fa:39:a9:49:81:05: a5:15:39:31:42:99:bc:14:42:f2:af:66:a4:a3:02: ba:c5:6b:ca:bd:fc:55:78:fa:cc:69:4d:ae:40:98: b4:b9:58:dc:5a:82:4c:00:85:31:82:0e:a9:f4:38: a8:af:75:7d:4d:94:19:71:b9:30:a3:fc:c0:3e:9a: 5d:9d:ab:cf:47:42:46:a9:91:e3:c8:be:b3:d3:47: 47:ad:cf:d3:53:94:e0:16:64:86:b2:ac:b3:95:48: fe:e6:08:6e:cb:c6:e1:08:f0:d5:85:43:c9:9b:a1: c9:60:c2:d8:1c:58:11:2a:55:9b:32:98:e7:71:32: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:60:86:3B:55:66:82:68:14:74:D3:D1:5B:F0:24:D3:B2:03:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/5815aceb-897c-3337-bfa8-f646fc70f495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.crl X509v3 Authority Key Identifier: keyid:40:C5:89:00:01:1C:25:5D:13:F2:94:67:C0:12:DC:00:CB:B8:A7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.cer sbgp-ipAddrBlock: critical IPv4: 64.239.112.0/23 IPv6: 2607:ddc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8a:d6:71:7c:6e:23:d6:56:7b:53:27:48:79:fc:07:d0:b9: 4a:a9:3b:55:b6:c2:a3:63:18:42:e7:c5:18:d4:d9:29:c0:f9: 7c:48:67:a3:36:6a:a1:bb:1b:7f:00:b6:8e:e9:13:d0:00:bd: 4b:67:2a:23:ca:ac:f4:3e:61:35:8a:3e:54:bd:92:74:a6:a0: 65:b5:d2:59:4e:1e:f0:b4:1a:68:41:36:c5:36:13:fb:eb:f1: 9b:ed:49:ba:74:ac:d7:d7:ae:6e:dd:0d:da:04:63:31:18:75: ec:08:32:8f:69:07:c6:26:53:43:c7:28:f5:98:7d:7b:ed:46: d7:34:26:bc:f6:21:2c:32:8f:2c:d7:9e:01:b1:24:9c:ba:c6: d3:a7:67:2d:e8:18:7e:1e:4a:40:06:d1:91:95:d4:bd:3c:92: 90:2e:9a:50:e1:c3:f2:22:9f:25:86:1d:fd:62:25:2c:c3:f7: 57:c8:38:5c:08:52:f2:db:76:59:2b:b2:e5:a8:8c:18:55:36: 75:4a:5d:64:2d:61:22:b0:65:e6:5f:de:f2:16:84:c5:78:12: 87:75:2d:ef:ee:78:41:52:9f:01:8b:6f:1c:19:5f:ff:c8:b4: b3:f3:42:7f:74:53:b9:b4:01:56:e2:e9:4b:c7:63:67:02:3a: f1:44:36:87 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEpK1YrMtFUoIJfaY/wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWEyYmI3M2MtNmYyZi00NjQ0LWIzM2YtYzcyNDhlNWY1 M2I0MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YmVmNmZiZDEtY2VkZi00MmJmLTk0NGItZjg1YjJmMmVmZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPLfEL1pnb5RGp3vCXfSUY/UmU4itqjG/JWh EAUb5SKiJOibeKXOhQg2EOvkvyQ545ozKeC292T/eaYTcbftUSllohA+zWe3kC3L /TTpSX7qCs6/F9A4PGTanQZcVqkNPiGIxiCufONMT+ph5ShcguXrxJ1HFrF7iV0m SYDueXT6OalJgQWlFTkxQpm8FELyr2akowK6xWvKvfxVePrMaU2uQJi0uVjcWoJM AIUxgg6p9Dior3V9TZQZcbkwo/zAPppdnavPR0JGqZHjyL6z00dHrc/TU5TgFmSG sqyzlUj+5ghuy8bhCPDVhUPJm6HJYMLYHFgRKlWbMpjncTIRrwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPsTYIY7VWaCaBR009Fb8CTTsgOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTJi YjczYy02ZjJmLTQ2NDQtYjMzZi1jNzI0OGU1ZjUzYjQvNTgxNWFjZWItODk3Yy0z MzM3LWJmYTgtZjY0NmZjNzBmNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWEyYmI3M2MtNmYyZi00NjQ0LWIz M2YtYzcyNDhlNWY1M2I0L2VhMmJiNzNjLTZmMmYtNDY0NC1iMzNmLWM3MjQ4ZTVm NTNiNC5jcmwwHwYDVR0jBBgwFoAUQMWJAAEcJV0T8pRnwBLcAMu4py8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTJiYjczYy02ZjJmLTQ2NDQtYjMzZi1jNzI0 OGU1ZjUzYjQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBQO9wMA0E AgACMAcDBQAmB93AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADiK1nF8biPWVntTJ0h5/AfQuUqpO1W2wqNj GELnxRjU2SnA+XxIZ6M2aqG7G38Ato7pE9AAvUtnKiPKrPQ+YTWKPlS9knSmoGW1 0llOHvC0GmhBNsU2E/vr8ZvtSbp0rNfXrm7dDdoEYzEYdewIMo9pB8YmU0PHKPWY fXvtRtc0Jrz2ISwyjyzXngGxJJy6xtOnZy3oGH4eSkAG0ZGV1L08kpAumlDhw/Ii nyWGHf1iJSzD91fIOFwIUvLbdlkrsuWojBhVNnVKXWQtYSKwZeZf3vIWhMV4Eod1 Le/ueEFSnwGLbxwZX//ItLPzQn90U7m0AVbi6UvHY2cCOvFENoc= -----END CERTIFICATE-----Generated at Thu Jul 3 22:52:02 2025 by rpki-client