$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa File: abf7b840-fd84-31f9-a0f2-6ad264acf865.roa (raw, json) Hash identifier: mDL4+ZYnOldpm41Z5bo0yahQI9/+ZMREfCGTdHdkDfM= Subject key identifier: 17:0E:4F:F0:21:2E:F1:B7:17:3D:44:0B:32:2F:55:01:2B:DF:46:26 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AC01641CD8D98013B6749BCC0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 20014 IP address blocks: 64.33.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:41:cd:8d:98:01:3b:67:49:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=d9806613-e650-42e9-81b0-30797d5ae23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:a6:55:9e:c2:9e:ca:99:c7:16:97:de:2b: 19:d1:c3:8d:c8:52:52:39:db:2d:df:ad:fe:28:b4: 76:e5:c6:25:5a:28:4e:de:57:27:eb:0b:df:f7:39: 1d:8e:dd:80:32:b8:0f:9d:0d:32:71:33:b6:ae:95: 3c:92:28:be:21:85:6d:26:74:7c:50:2f:12:92:c3: 1e:c9:d3:d9:0f:11:65:42:15:0f:16:40:84:9b:0d: 99:d4:5f:8f:51:fe:39:d5:47:c3:e2:c6:1e:a0:15: 47:a2:60:c7:88:4a:4f:95:51:7e:c1:a9:d2:50:12: 76:28:92:fe:d2:4e:fc:bb:3f:51:67:fa:c4:37:3c: 47:bb:fc:8f:87:7f:b6:43:42:ab:52:e1:32:38:2d: de:6f:9f:71:59:10:ad:71:46:f3:5e:f5:58:00:19: 5a:6d:d4:3a:2c:6c:95:9e:16:55:1e:f1:84:46:65: 71:a3:0e:3a:0a:00:b2:4a:21:42:2a:df:48:e6:20: e6:87:8f:84:a2:89:20:c7:e8:d6:d0:44:f0:a8:33: a0:ed:5a:b9:5a:d1:6d:d5:c6:74:82:d4:f5:e2:c3: 68:84:32:45:2a:ff:45:72:57:51:97:8c:b0:bd:fa: f1:32:04:25:4a:da:5e:41:1a:ce:d8:8d:b8:10:45: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0E:4F:F0:21:2E:F1:B7:17:3D:44:0B:32:2F:55:01:2B:DF:46:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:12:e8:bb:63:f4:e0:7e:79:19:43:10:8a:e4:e6:f8:87:fe: 72:4b:c6:a5:a1:34:5e:6d:87:95:cf:76:e9:5a:32:e3:cd:46: 2a:1f:34:df:6c:7b:1c:64:ac:34:fd:ed:2f:a4:9b:0a:d3:ef: c2:77:8f:7c:ea:86:5d:14:60:ab:67:84:72:ec:46:e0:c3:4c: 47:02:d4:55:28:35:39:c7:e4:12:21:fd:f3:90:34:86:15:8d: 5f:3e:63:15:09:3c:c1:c9:31:b1:be:d7:fb:97:e3:c5:0b:c1: cb:a0:20:75:96:3c:9b:2a:a3:51:3e:3c:f8:18:41:54:d7:87: 47:1e:c8:db:d0:99:75:33:ec:66:27:3a:66:9d:cd:47:77:9b: 63:66:35:18:57:5c:c5:52:62:8e:62:a7:18:6a:b0:74:44:dc: 19:c4:d2:db:13:98:bc:82:dc:ff:d7:f0:85:74:87:b6:1a:fd: 85:5b:60:4f:b5:f2:90:9e:7b:f6:18:3e:30:59:3b:b5:46:23: 9b:26:36:90:03:35:7b:87:31:30:84:f3:ad:6b:be:b3:2c:15: d4:8e:d2:d0:a7:ff:40:55:5d:f3:a9:07:da:38:06:3b:44:b3: 34:54:9b:c5:53:86:c1:71:29:d4:07:e2:fa:17:a9:22:83:55: 19:d9:6c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkHNjZgBO2dJvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZDk4MDY2MTMtZTY1MC00MmU5LTgxYjAtMzA3OTdkNWFlMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AumVZ7CnsqZxxaX3isZ0cONyFJSOdst363+ KLR25cYlWihO3lcn6wvf9zkdjt2AMrgPnQ0ycTO2rpU8kii+IYVtJnR8UC8SksMe ydPZDxFlQhUPFkCEmw2Z1F+PUf451UfD4sYeoBVHomDHiEpPlVF+wanSUBJ2KJL+ 0k78uz9RZ/rENzxHu/yPh3+2Q0KrUuEyOC3eb59xWRCtcUbzXvVYABlabdQ6LGyV nhZVHvGERmVxow46CgCySiFCKt9I5iDmh4+Eookgx+jW0ETwqDOg7Vq5WtFt1cZ0 gtT14sNohDJFKv9FcldRl4ywvfrxMgQlStpeQRrO2I24EEW1YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcOT/AhLvG3Fz1ECzIvVQEr30YmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWJmN2I4NDAtZmQ4NC0z MWY5LWEwZjItNmFkMjY0YWNmODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoS6Ltj9OB+eRlDEIrk5viH/nJLxqWhNF5th5XPdulaMuPNRiofNN9s exxkrDT97S+kmwrT78J3j3zqhl0UYKtnhHLsRuDDTEcC1FUoNTnH5BIh/fOQNIYV jV8+YxUJPMHJMbG+1/uX48ULwcugIHWWPJsqo1E+PPgYQVTXh0ceyNvQmXUz7GYn OmadzUd3m2NmNRhXXMVSYo5ipxhqsHRE3BnE0tsTmLyC3P/X8IV0h7Ya/YVbYE+1 8pCee/YYPjBZO7VGI5smNpADNXuHMTCE861rvrMsFdSO0tCn/0BVXfOpB9o4BjtE szRUm8VThsFxKdQH4voXqSKDVRnZbBE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:48:00 2025 by rpki-client