$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json) Hash identifier: G8OWwogqQyudR/9mPTSAxF4vO7NiOappZSUUZeiE8VY= Subject key identifier: FE:5F:DD:6D:97:D0:5E:2B:45:CA:4D:EB:BE:5B:A4:05:AD:FF:46:74 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A66C095088E654ABA251DE440 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 21949 IP address blocks: 65.97.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:95:08:8e:65:4a:ba:25:1d:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=34ac2e0e-b433-46bb-bd04-86937cfd82e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:c3:7a:24:72:f3:28:51:a0:4d:c7:1a:80: 5b:c6:4a:bf:9e:64:e4:ec:31:7f:65:79:41:4f:54: aa:49:a6:ad:3f:8d:c7:c1:28:ca:05:d6:48:38:c4: 0d:18:69:d6:f2:84:c1:c0:a9:74:e2:f6:8e:96:1e: bc:5c:2a:da:d5:f3:ca:14:6f:aa:35:ad:e0:30:03: af:cf:44:2a:e3:5e:fd:79:f8:71:92:2f:8c:e5:a1: f1:7c:59:a6:1f:0f:de:b4:bb:27:df:c2:87:23:c7: 59:db:f6:66:ae:39:02:56:82:f0:24:c5:66:6c:49: 81:52:86:39:4d:ff:33:28:58:4c:ce:0c:6f:76:ef: 43:02:d3:d9:67:28:6e:be:74:fc:b0:17:d6:7d:c3: 5d:a6:23:d6:3d:de:5a:49:44:da:9d:d1:85:d0:51: f0:b9:9f:98:e4:b3:89:86:88:46:d4:9c:9c:f1:b6: 04:6c:06:ab:f1:9b:50:65:b3:55:53:1b:00:48:18: ff:72:e3:66:09:d6:7e:9e:90:b2:87:db:0d:33:9c: 39:bf:f8:35:b1:aa:0d:b6:93:41:b1:28:b0:58:d5: 67:82:85:94:9b:6a:31:e7:3d:4e:6c:74:85:19:3b: 63:c6:2a:d1:59:ef:3a:34:11:a6:e6:48:0c:8e:01: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5F:DD:6D:97:D0:5E:2B:45:CA:4D:EB:BE:5B:A4:05:AD:FF:46:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:98:4e:21:a4:2a:93:9e:d6:2d:af:f3:63:e3:5c:95:85:5e: c3:73:92:66:1f:0e:07:d4:8e:45:e4:f3:19:28:e9:8e:8f:2a: 8d:06:23:9c:26:97:60:c6:34:3b:f1:35:e9:c5:b5:91:ce:14: 60:d3:c0:c4:47:c4:7f:17:29:38:2c:f5:df:95:d1:58:34:64: fc:de:98:a9:d2:dd:24:95:26:8b:f9:93:f2:a0:49:f7:b1:21: 89:ff:7b:94:eb:11:b4:c2:e2:df:71:4c:86:be:fe:91:c7:77: 24:c2:d0:95:9c:49:ca:97:1d:fe:a8:e6:1a:cd:d2:82:fe:39: fa:ef:ec:82:20:37:cb:94:f2:87:1b:64:c3:e6:55:ac:34:9d: e7:b8:b8:fa:5e:f1:22:69:fb:3b:be:fb:21:12:47:e3:86:f3: 1b:53:51:0c:c5:4c:cb:e2:ab:ea:be:df:a5:a1:7a:c6:17:88: 1e:2f:35:62:a0:22:77:1c:e8:99:bf:0b:43:af:2d:3a:cb:b9: 5e:27:b2:b8:8d:07:35:14:6c:9d:5d:c1:f8:5c:05:92:ba:7f: de:97:5c:b1:ba:fd:96:05:2e:d5:df:4d:ae:59:ad:9f:88:ea: 11:c8:7e:aa:40:2f:86:70:92:5b:3a:b0:3c:ab:c1:4b:83:d5: 11:44:4f:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwJUIjmVKuiUd5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk MzRhYzJlMGUtYjQzMy00NmJiLWJkMDQtODY5MzdjZmQ4MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2jDeiRy8yhRoE3HGoBbxkq/nmTk7DF/ZXlB T1SqSaatP43HwSjKBdZIOMQNGGnW8oTBwKl04vaOlh68XCra1fPKFG+qNa3gMAOv z0Qq4179efhxki+M5aHxfFmmHw/etLsn38KHI8dZ2/ZmrjkCVoLwJMVmbEmBUoY5 Tf8zKFhMzgxvdu9DAtPZZyhuvnT8sBfWfcNdpiPWPd5aSUTandGF0FHwuZ+Y5LOJ hohG1Jyc8bYEbAar8ZtQZbNVUxsASBj/cuNmCdZ+npCyh9sNM5w5v/g1saoNtpNB sSiwWNVngoWUm2ox5z1ObHSFGTtjxirRWe86NBGm5kgMjgGDEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5f3W2X0F4rRcpN675bpAWt/0Z0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYzFhZjdmODMtNTRkMS0z NjM3LWIyM2EtMWZhYzE4MjNmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQWEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKYTiGkKpOe1i2v82PjXJWFXsNzkmYfDgfUjkXk8xko6Y6PKo0GI5wm l2DGNDvxNenFtZHOFGDTwMRHxH8XKTgs9d+V0Vg0ZPzemKnS3SSVJov5k/KgSfex IYn/e5TrEbTC4t9xTIa+/pHHdyTC0JWcScqXHf6o5hrN0oL+Ofrv7IIgN8uU8ocb ZMPmVaw0nee4uPpe8SJp+zu++yESR+OG8xtTUQzFTMviq+q+36WhesYXiB4vNWKg Incc6Jm/C0OvLTrLuV4nsriNBzUUbJ1dwfhcBZK6f96XXLG6/ZYFLtXfTa5ZrZ+I 6hHIfqpAL4Zwkls6sDyrwUuD1RFET10= -----END CERTIFICATE-----Generated at Thu Jul 31 15:00:13 2025 by rpki-client