$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa File: 3735a2b4-9557-32d4-99da-5348757f8b91.roa (raw, json) Hash identifier: eedNzVzhKe46S0PmWgv18CaBic/Q5YCq6Ssj9wGYNWA= Subject key identifier: 35:97:D0:F7:C2:D7:38:0B:A6:0C:C3:FA:49:75:EB:95:2F:67:44:1B Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160D3DB0B381659230DA300 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11164 IP address blocks: 64.57.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d3:db:0b:38:16:59:23:0d:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=4f6f3106-533a-4730-aa7b-74fbc24495b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:d0:a6:4a:52:24:c5:0f:71:a8:a2:ef:80: a4:91:ca:1d:b9:8f:30:11:64:f7:d4:53:01:86:c9: 5b:f7:9b:ef:3f:37:93:15:b9:4c:d0:08:d4:73:2c: cf:3b:96:b7:6f:c0:85:05:44:11:64:36:f3:da:56: f8:c0:95:9f:7f:19:92:ba:d1:35:94:b9:4a:dc:14: 22:28:58:67:ff:da:f2:0a:dc:92:ce:70:25:f7:65: e5:fd:e5:6d:3f:42:93:33:2a:93:73:9f:c0:0d:ef: 4e:f3:84:6e:83:9d:51:57:90:5d:3b:57:bb:62:1c: 4a:5b:e2:47:34:23:7d:b8:53:a1:d8:ef:e1:5b:40: 0e:5c:68:23:83:73:b5:18:7f:17:79:a6:86:36:18: 5c:b4:ca:16:1d:d2:e3:65:9c:7c:4a:81:46:25:b8: a4:90:c9:6c:a4:f1:77:09:64:57:a6:09:b6:b7:48: 4a:d3:e9:53:35:70:23:9f:70:09:88:b3:16:0f:ad: 7e:fa:aa:30:da:d1:48:e3:af:48:d4:36:25:39:da: af:01:2c:86:0f:0b:a1:72:bb:c7:92:a9:58:1e:31: e4:f6:1f:db:80:b9:60:7b:63:c8:d2:e2:31:b8:22: 96:a3:94:13:aa:60:34:d2:99:0a:ed:ae:65:1d:56: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:97:D0:F7:C2:D7:38:0B:A6:0C:C3:FA:49:75:EB:95:2F:67:44:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 64.57.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2b:d8:ef:9c:b5:19:e7:30:ef:f4:e4:a4:26:13:8d:09:9f: e6:6f:3d:dd:3f:b6:b1:5f:d7:bf:17:47:fe:a6:65:58:42:fa: 02:ec:ce:6c:ea:7c:23:71:f3:a8:e4:3f:df:a6:ee:84:e6:a7: a1:29:55:d9:d6:d1:86:79:f4:08:9f:18:58:bb:0c:89:41:01: e8:40:ee:1d:97:f3:25:e7:bb:7c:f6:d0:b6:0e:d8:c4:af:e2: 44:72:4e:45:eb:0e:18:bf:05:f2:bc:f7:38:91:48:ee:d8:b5: e4:bc:53:65:21:68:3c:59:04:60:d9:ce:84:f5:17:da:d1:3e: 1f:aa:6d:86:af:d7:8d:f1:cb:cf:c1:00:d5:fc:16:c7:cb:01: 36:43:b2:73:c7:7c:6e:f6:f5:70:4c:21:70:13:b1:ab:4c:2c: 93:10:c6:09:0d:5e:34:cc:9e:f1:76:15:21:3f:db:5e:5c:b4: 9d:ca:dc:d8:77:09:a6:7c:25:ce:8c:37:e9:6f:13:82:25:b6: 29:13:0e:3d:bf:a2:bd:ab:32:e4:ac:f4:60:03:09:5e:2f:fe: 62:f7:71:f3:7c:3a:fd:11:ca:4a:ce:34:84:69:0c:de:de:e1: 70:c7:65:f8:f6:f6:9f:48:c0:8a:8f:f6:d0:b8:dc:cc:dc:62: f2:d1:4d:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNPbCzgWWSMNowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NGY2ZjMxMDYtNTMzYS00NzMwLWFhN2ItNzRmYmMyNDQ5NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9nQpkpSJMUPcaii74CkkcoduY8wEWT31FMB hslb95vvPzeTFblM0AjUcyzPO5a3b8CFBUQRZDbz2lb4wJWffxmSutE1lLlK3BQi KFhn/9ryCtySznAl92Xl/eVtP0KTMyqTc5/ADe9O84Rug51RV5BdO1e7YhxKW+JH NCN9uFOh2O/hW0AOXGgjg3O1GH8XeaaGNhhctMoWHdLjZZx8SoFGJbikkMlspPF3 CWRXpgm2t0hK0+lTNXAjn3AJiLMWD61++qow2tFI469I1DYlOdqvASyGDwuhcrvH kqlYHjHk9h/bgLlge2PI0uIxuCKWo5QTqmA00pkK7a5lHVZI6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWX0PfC1zgLpgzD+kl165UvZ0QbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMzczNWEyYjQtOTU1Ny0z MmQ0LTk5ZGEtNTM0ODc1N2Y4YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsr2O+ctRnnMO/05KQmE40Jn+ZvPd0/trFf178XR/6mZVhC+gLszmzq fCNx86jkP9+m7oTmp6EpVdnW0YZ59AifGFi7DIlBAehA7h2X8yXnu3z20LYO2MSv 4kRyTkXrDhi/BfK89ziRSO7YteS8U2UhaDxZBGDZzoT1F9rRPh+qbYav143xy8/B ANX8FsfLATZDsnPHfG729XBMIXATsatMLJMQxgkNXjTMnvF2FSE/215ctJ3K3Nh3 CaZ8Jc6MN+lvE4IltikTDj2/or2rMuSs9GADCV4v/mL3cfN8Ov0RykrONIRpDN7e 4XDHZfj29p9IwIqP9tC43MzcYvLRTag= -----END CERTIFICATE-----Generated at Sun Jul 27 12:15:17 2025 by rpki-client