$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa File: 00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa (raw, json) Hash identifier: mbsNx+MGrh62TeVZRKkzgCa8N1z+7DwmEZJqz1BwzNo= Subject key identifier: AC:54:E6:F9:69:7C:1D:07:86:42:EB:FB:E8:FC:42:8E:E6:41:3B:B5 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584A14655F11EF80B22C83D98D80 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 46450 IP address blocks: 64.112.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5f:11:ef:80:b2:2c:83:d9:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=81255e58-38a0-4d8e-9cda-666a9ee79861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:05:5f:ed:cb:33:c0:90:14:be:c6:98:b0: 9f:55:1a:c8:c6:c2:ef:dd:26:c2:e0:1b:1b:17:bc: 3a:b7:9d:19:58:a7:5c:26:83:f0:4c:f4:7e:8c:c0: 99:9d:12:59:52:42:5e:d3:65:82:29:58:b0:14:63: 0b:a5:4f:3c:63:7b:6e:cc:8c:de:a9:d6:74:3a:8a: af:0e:8e:0e:62:4e:59:c1:a5:c1:ad:5e:c0:15:50: d3:83:b9:34:52:c3:9a:6d:78:7d:68:68:9f:86:c3: 86:aa:30:1d:f9:ca:a3:8d:f3:e5:bf:72:dd:e5:c3: 57:11:3a:6a:7a:e9:45:ec:b5:2b:6d:9b:3e:52:48: 6a:d9:eb:35:bc:f6:97:48:70:8c:7b:90:14:f7:e0: ae:4c:c5:10:0a:98:6d:fd:22:3f:4e:a3:6f:89:10: ad:06:b2:86:62:d9:17:31:a5:7d:c4:dd:9e:31:f4: 62:93:79:7a:09:99:72:32:0f:26:80:18:8b:cf:9e: 7c:0b:29:7a:f9:44:95:50:d6:e7:0c:7a:5d:31:ed: 5a:7c:04:73:41:1f:f3:a9:f5:52:50:db:e3:65:5f: 93:77:4f:c5:c8:c9:50:37:67:e7:10:48:43:97:7b: eb:94:49:1e:b1:4a:56:3f:d8:71:1c:e4:df:a6:8f: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:54:E6:F9:69:7C:1D:07:86:42:EB:FB:E8:FC:42:8E:E6:41:3B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 64.112.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:5b:29:c8:26:7f:ea:29:7a:fb:8d:b9:66:72:21:ae:9d:90: 0a:8a:ce:f4:5e:86:54:3c:c9:9d:48:2b:89:06:62:41:4e:73: be:eb:e9:4e:8d:92:08:54:e1:11:65:9d:bd:e6:0b:ec:b5:12: a2:a8:09:3a:a6:66:c5:ec:b3:87:6f:5c:0d:9a:91:6d:9f:d6: ca:c5:9d:6d:32:e2:de:0f:ed:06:21:4d:78:ea:ba:64:e3:7e: c0:d3:a3:3a:5b:1e:d0:06:3a:1f:09:46:b9:c6:f1:f4:ab:75: ad:c7:ac:07:60:ee:4a:49:51:2e:d8:ed:a2:b9:05:c8:b3:ab: 51:e2:84:d2:8a:2c:de:7f:61:1e:fe:e9:b2:c9:e5:21:38:1b: fd:9d:5a:b9:27:e6:12:5c:89:fd:b8:98:a9:f4:ae:3a:be:de: f2:85:86:9f:f3:f0:13:65:ab:26:ee:b3:64:1f:61:e3:45:1c: 52:8b:00:c3:14:d2:7b:b6:0f:04:bd:3f:03:47:79:bb:e0:ab: f7:6b:90:af:d1:34:2a:35:67:65:cb:2a:8c:f1:a0:bc:61:6c: 80:02:72:d4:5f:1e:6a:a9:84:ff:63:80:c3:6d:e3:c1:cf:c0: 36:9a:a7:fe:ae:ac:84:2e:6c:7b:e5:88:a5:24:e4:cb:1c:26: fe:56:42:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZV8R74CyLIPZjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODEyNTVlNTgtMzhhMC00ZDhlLTljZGEtNjY2YTllZTc5ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb4FX+3LM8CQFL7GmLCfVRrIxsLv3SbC4Bsb F7w6t50ZWKdcJoPwTPR+jMCZnRJZUkJe02WCKViwFGMLpU88Y3tuzIzeqdZ0Ooqv Do4OYk5ZwaXBrV7AFVDTg7k0UsOabXh9aGifhsOGqjAd+cqjjfPlv3Ld5cNXETpq eulF7LUrbZs+Ukhq2es1vPaXSHCMe5AU9+CuTMUQCpht/SI/TqNviRCtBrKGYtkX MaV9xN2eMfRik3l6CZlyMg8mgBiLz558Cyl6+USVUNbnDHpdMe1afARzQR/zqfVS UNvjZV+Td0/FyMlQN2fnEEhDl3vrlEkesUpWP9hxHOTfpo+rtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxU5vlpfB0HhkLr++j8Qo7mQTu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDBhYjk5ODgtYjgzYS0z ZTQyLWFhZmYtNzJjNGYwNWY1YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpbKcgmf+opevuNuWZyIa6dkAqKzvRehlQ8yZ1IK4kGYkFOc77r6U6N kghU4RFlnb3mC+y1EqKoCTqmZsXss4dvXA2akW2f1srFnW0y4t4P7QYhTXjqumTj fsDTozpbHtAGOh8JRrnG8fSrda3HrAdg7kpJUS7Y7aK5Bcizq1HihNKKLN5/YR7+ 6bLJ5SE4G/2dWrkn5hJcif24mKn0rjq+3vKFhp/z8BNlqybus2QfYeNFHFKLAMMU 0nu2DwS9PwNHebvgq/drkK/RNCo1Z2XLKozxoLxhbIACctRfHmqphP9jgMNt48HP wDaap/6urIQubHvliKUk5MscJv5WQlI= -----END CERTIFICATE-----Generated at Mon Jun 30 04:39:48 2025 by rpki-client