$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa File: cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa (raw, json) Hash identifier: fsEdMGKcfmMKeRIPYBTFykjzgpmsgmyQqmrjEcIxTbk= Subject key identifier: CE:B3:7B:A3:4A:7E:08:7A:E6:3C:DD:57:03:DC:A6:26:7E:BB:63:90 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160CD378C98F5D2E941E400 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11537 IP address blocks: 64.57.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:cd:37:8c:98:f5:d2:e9:41:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=81a4318a-97f7-47bf-a4ca-e3f172f24609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:91:92:ce:2a:68:f9:97:12:cc:1d:b8:bc: 97:20:b0:71:a0:9a:15:ad:d8:ed:31:ee:8e:d5:0a: 25:d4:fa:4e:8f:50:3f:e9:0a:6f:e1:c4:cb:70:cf: 16:6d:8a:f9:43:b1:f2:87:52:3d:ad:9c:76:ec:14: 6e:6b:76:25:90:1c:db:18:6c:5b:b8:84:98:6c:e9: ee:97:dd:7d:c8:ff:9c:cf:0e:ef:8f:8f:55:11:e2: 14:97:f4:8e:f4:5e:d2:b8:02:58:eb:2b:f0:16:20: 97:2d:c4:45:2b:1b:e3:5a:5e:54:b1:f9:21:22:42: fa:56:17:99:68:c4:10:2a:9b:81:14:a4:27:63:b1: 28:5b:3a:59:b4:cf:4c:5b:e3:00:41:10:d3:84:f5: cf:f4:cc:30:c7:06:e0:0e:28:c6:b5:f0:fc:bc:6d: 4a:9c:23:52:47:92:31:04:d2:b1:8f:0f:d6:ef:68: 87:b4:30:83:7e:a3:d2:7c:9d:75:9b:94:f2:8a:6c: d4:b4:ca:07:f1:78:7b:5d:44:ba:14:ea:21:44:39: dd:49:cf:4b:3d:0b:c8:21:63:28:89:38:40:a6:2e: a7:37:a1:76:76:c1:c4:d4:2f:1b:22:ae:8d:65:0f: 94:85:c8:14:e1:4b:ce:68:1b:a0:e0:f1:c5:45:be: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B3:7B:A3:4A:7E:08:7A:E6:3C:DD:57:03:DC:A6:26:7E:BB:63:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 64.57.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7e:d6:86:47:b1:ee:be:4c:b8:d3:29:c1:6a:a3:fb:67:05: 35:f8:f4:98:b5:e2:82:9c:4f:df:c2:a8:4c:14:df:f9:f3:a5: 97:29:3d:77:16:dd:7b:a0:98:19:db:42:80:36:a2:9e:db:b1: f4:bd:06:e0:a1:d1:74:2d:80:7f:b5:a5:91:5c:65:ca:c7:60: 58:6c:3d:4b:fa:fc:00:77:98:2d:c6:e2:a6:a6:88:da:e1:62: bd:9a:d4:8e:ea:fd:90:43:d4:51:7a:23:30:ad:f0:b0:3c:a8: 12:bc:7c:67:a0:d5:cd:89:b8:66:3c:d4:cf:6b:4d:6e:d0:4a: 92:6a:d0:ce:e1:05:bc:94:e9:63:30:c5:10:8c:95:dd:e0:82: 91:e5:6b:47:fc:30:4f:6e:f5:44:70:bf:4b:6b:68:4e:b5:5e: 4d:3b:d6:01:53:43:4f:94:e1:d8:39:85:b0:96:ab:52:6a:e7: 1b:2b:bd:c7:30:9a:df:d5:7f:ff:45:4b:8d:67:44:3a:90:a0: a1:d9:50:1f:58:6c:34:91:eb:6e:cd:78:8f:25:a9:f5:bb:c7: 6c:14:a3:f5:04:6f:24:4c:55:8f:57:0a:12:56:70:e2:db:71: 90:93:1f:38:c6:d0:86:d8:ab:73:ce:e9:ae:a6:cf:01:67:25: 13:4d:7b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM03jJj10ulB5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ODFhNDMxOGEtOTdmNy00N2JmLWE0Y2EtZTNmMTcyZjI0NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyKRks4qaPmXEswduLyXILBxoJoVrdjtMe6O 1Qol1PpOj1A/6Qpv4cTLcM8WbYr5Q7Hyh1I9rZx27BRua3YlkBzbGGxbuISYbOnu l919yP+czw7vj49VEeIUl/SO9F7SuAJY6yvwFiCXLcRFKxvjWl5UsfkhIkL6VheZ aMQQKpuBFKQnY7EoWzpZtM9MW+MAQRDThPXP9MwwxwbgDijGtfD8vG1KnCNSR5Ix BNKxjw/W72iHtDCDfqPSfJ11m5TyimzUtMoH8Xh7XUS6FOohRDndSc9LPQvIIWMo iThApi6nN6F2dsHE1C8bIq6NZQ+UhcgU4UvOaBug4PHFRb7iCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6ze6NKfgh65jzdVwPcpiZ+u2OQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvY2Q2ZTRmODgtZGM5OC0z YzAxLWE0YjQtMzY3MTNkNjJmMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF+1oZHse6+TLjTKcFqo/tnBTX49Ji14oKcT9/CqEwU3/nzpZcpPXcW 3XugmBnbQoA2op7bsfS9BuCh0XQtgH+1pZFcZcrHYFhsPUv6/AB3mC3G4qamiNrh Yr2a1I7q/ZBD1FF6IzCt8LA8qBK8fGeg1c2JuGY81M9rTW7QSpJq0M7hBbyU6WMw xRCMld3ggpHla0f8ME9u9URwv0traE61Xk071gFTQ0+U4dg5hbCWq1Jq5xsrvccw mt/Vf/9FS41nRDqQoKHZUB9YbDSR627NeI8lqfW7x2wUo/UEbyRMVY9XChJWcOLb cZCTHzjG0IbYq3PO6a6mzwFnJRNNe4c= -----END CERTIFICATE-----Generated at Sun Jul 27 12:06:08 2025 by rpki-client