$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa File: bc43eb96-6422-380c-9f25-98a56512ac46.roa (raw, json) Hash identifier: 838tuQ5XGw34kuaWhTnRW1LflLiZ6fmxNBWyZuhyiuE= Subject key identifier: D7:4D:7A:6A:B7:8F:C9:9F:7D:00:DB:15:8B:0B:F3:D1:05:34:87:A9 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160D423A9EC0897E463B140 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11537 IP address blocks: 64.57.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d4:23:a9:ec:08:97:e4:63:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=affacaa2-e69f-4f34-b3be-e18f766ffec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:c0:16:33:ba:7a:71:23:2a:05:ed:2e:ba: e7:1d:71:de:4c:f0:c3:42:1e:47:e6:e2:3a:bf:b6: a6:07:89:dc:8c:71:4b:04:9a:ae:27:86:01:a2:1d: cf:0c:e4:e9:f8:81:76:18:9f:21:46:b7:eb:79:19: f1:b2:aa:10:02:d9:60:18:ca:e7:1f:3b:2b:37:1b: 77:a4:b4:c6:70:71:48:44:b1:e0:f1:1b:6a:c2:63: 4b:9f:b6:17:3f:50:fc:83:75:e3:0b:86:c9:80:34: 49:3d:70:47:32:08:0b:c2:fa:72:7d:c2:f3:5b:66: bf:f4:02:e8:b7:fd:78:29:e7:0f:e6:3f:b2:79:46: 00:8d:87:07:c8:d2:66:d8:3d:ce:1c:f0:04:c7:55: c7:06:cb:bf:37:7d:5e:93:9f:d2:ff:22:b3:c7:c4: cc:b1:9a:bf:d2:3f:18:5e:48:97:27:b7:61:7b:ff: 20:1d:da:5d:97:bc:4f:15:61:5f:c4:d0:59:08:65: bf:64:bd:07:31:d7:d9:ae:aa:ad:70:3c:04:9e:43: da:eb:cd:cc:d4:d3:85:30:e6:87:25:ce:5a:23:04: cd:9d:bd:12:8c:d7:c8:cd:a0:cf:29:bf:24:4e:de: 4e:61:8d:ed:57:3c:00:e3:c3:ae:01:bb:7c:b4:3c: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4D:7A:6A:B7:8F:C9:9F:7D:00:DB:15:8B:0B:F3:D1:05:34:87:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 64.57.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9e:6d:44:a7:ef:27:4c:44:ba:b2:83:cf:6c:f1:d3:0a:75: 4a:7a:25:7c:86:1e:70:24:70:8b:12:18:af:d1:ec:59:a9:00: 08:2c:72:a3:c0:ac:03:9d:7a:75:e1:91:d5:80:0f:66:7d:49: 0f:08:52:6b:32:03:94:ea:a0:b4:ed:c1:e8:33:9b:fe:84:02: d7:c5:09:5e:1a:5f:e7:c1:65:3d:37:9a:d5:48:4b:36:14:ad: 5a:bb:26:bc:c4:0b:57:9b:ed:45:7c:59:2a:36:dd:2c:e2:e8: 11:55:bf:60:d1:8e:d3:11:c4:de:d4:b3:70:fa:d3:a3:24:d9: 0d:ff:45:a9:72:d0:d7:99:58:22:2a:9f:d5:0c:a1:43:39:e6: e2:e9:e6:17:27:fa:90:ab:16:3b:7b:db:53:0b:72:93:99:13: 1f:19:3a:81:7f:1e:9d:4f:e5:da:70:d1:76:42:a9:3b:fc:1e: d2:de:db:04:23:e9:b8:7f:9f:8e:6f:6e:2e:1f:88:35:41:9a: 07:87:e2:28:30:85:62:0b:c9:c7:ea:c2:9d:c5:1d:3e:63:41: 05:ea:ed:49:70:aa:4b:09:e6:cd:e5:74:19:e0:38:11:1f:96: 4b:af:35:ca:9d:71:93:cf:a6:00:68:a2:df:ed:58:c6:79:36: 83:e5:11:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNQjqewIl+RjsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YWZmYWNhYTItZTY5Zi00ZjM0LWIzYmUtZTE4Zjc2NmZmZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4vAFjO6enEjKgXtLrrnHXHeTPDDQh5H5uI6 v7amB4ncjHFLBJquJ4YBoh3PDOTp+IF2GJ8hRrfreRnxsqoQAtlgGMrnHzsrNxt3 pLTGcHFIRLHg8RtqwmNLn7YXP1D8g3XjC4bJgDRJPXBHMggLwvpyfcLzW2a/9ALo t/14KecP5j+yeUYAjYcHyNJm2D3OHPAEx1XHBsu/N31ek5/S/yKzx8TMsZq/0j8Y XkiXJ7dhe/8gHdpdl7xPFWFfxNBZCGW/ZL0HMdfZrqqtcDwEnkPa683M1NOFMOaH Jc5aIwTNnb0SjNfIzaDPKb8kTt5OYY3tVzwA48OuAbt8tDwjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdNemq3j8mffQDbFYsL89EFNIepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYmM0M2ViOTYtNjQyMi0z ODBjLTlmMjUtOThhNTY1MTJhYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiebUSn7ydMRLqyg89s8dMKdUp6JXyGHnAkcIsSGK/R7FmpAAgscqPA rAOdenXhkdWAD2Z9SQ8IUmsyA5TqoLTtwegzm/6EAtfFCV4aX+fBZT03mtVISzYU rVq7JrzEC1eb7UV8WSo23Szi6BFVv2DRjtMRxN7Us3D606Mk2Q3/Raly0NeZWCIq n9UMoUM55uLp5hcn+pCrFjt721MLcpOZEx8ZOoF/Hp1P5dpw0XZCqTv8HtLe2wQj 6bh/n45vbi4fiDVBmgeH4igwhWILycfqwp3FHT5jQQXq7UlwqksJ5s3ldBngOBEf lkuvNcqdcZPPpgBoot/tWMZ5NoPlEfI= -----END CERTIFICATE-----Generated at Sun Jul 27 12:17:31 2025 by rpki-client