$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa File: 2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa (raw, json) Hash identifier: ZZcSRls3pjsyrMldzzKQmnEoqH6PircAPhslKNy/ldw= Subject key identifier: 04:B6:D8:9B:70:25:57:BB:96:0E:DB:E1:FB:EB:3E:5A:23:63:41:CC Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584A5E6063B6E255F15CD6E28F00 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 64.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:63:b6:e2:55:f1:5c:d6:e2:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=5cb6f6b4-c041-48d9-8294-443c15e4e900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:98:22:97:f2:2a:d2:d6:58:65:fc:8f:49: 09:6a:28:b8:48:08:c9:de:5a:eb:ea:d2:01:66:dc: 67:16:c6:73:7b:ca:5f:e8:09:80:e5:27:e2:b1:ae: b4:94:24:70:54:b8:58:42:84:bf:1e:b5:8c:e5:bf: 76:bd:92:87:be:be:69:07:ea:21:4b:b6:5d:63:a5: ea:09:4e:91:b9:72:4d:55:38:51:7b:21:1e:80:1d: 1d:70:65:50:d5:55:ff:bd:0d:39:47:f0:6e:ef:ea: 78:45:08:1b:84:b0:ea:0c:6b:cf:e0:32:56:48:30: 23:2e:f3:af:d0:68:61:20:24:a5:7e:46:64:81:f8: c6:a0:83:11:ea:dc:94:2b:6a:52:ce:ad:97:ac:a9: 2c:02:9d:11:52:1f:8b:6d:83:e9:18:33:32:b3:15: d4:38:f2:42:ef:24:97:17:51:84:47:b2:58:e4:99: 06:31:c8:98:e4:8e:07:98:0c:2b:0b:5d:65:36:3a: 37:d7:1d:ed:c4:f9:27:d5:fd:99:b2:3e:50:fb:bf: bd:8f:93:61:a2:ab:49:36:e2:4b:ec:66:de:82:2f: 49:1b:d0:a3:67:33:d1:3e:b9:2f:0a:5c:f5:8d:02: 52:3d:f9:dc:a9:bc:a9:f1:f9:45:67:33:46:97:fd: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B6:D8:9B:70:25:57:BB:96:0E:DB:E1:FB:EB:3E:5A:23:63:41:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:72:5e:09:65:e1:32:3a:ac:55:67:0b:a6:cf:87:94:db:62: ee:d1:33:9d:36:1c:43:ed:7a:93:c6:d0:7d:58:e7:8f:9f:45: f5:3c:10:48:14:31:5d:be:ae:ac:f2:7a:b2:79:28:ed:fb:d7: 5d:76:ff:3b:87:fe:c2:0b:fb:3e:e2:de:de:36:59:8b:4b:b5: 7a:2d:e3:98:69:0e:e3:0f:1e:e9:2f:15:19:7b:e3:02:3d:42: 58:2e:ea:5b:8b:f3:a9:38:0a:28:e3:3c:c1:09:fe:81:a3:9d: 56:43:45:a8:8d:75:16:51:e2:7a:bc:46:3b:fe:2b:09:51:e7: 5c:4b:44:5c:5c:05:b3:e5:ed:10:30:5a:9c:d6:78:90:3e:b3: 55:eb:75:e5:f0:ee:90:51:68:2e:84:4e:3b:af:00:b9:a2:a0: 9c:39:16:05:98:2e:ef:81:2a:7a:b2:f4:d9:19:62:c8:15:8e: 15:6c:e6:83:98:75:e8:5e:95:02:57:47:fa:c0:36:05:1c:ef: ff:cc:1e:2d:96:ca:bb:52:f7:7c:47:1f:86:96:63:c2:e6:54: c7:77:67:78:cc:80:99:42:1c:e8:23:e6:41:d4:86:3e:b4:40: e7:9a:4a:cc:2f:25:31:66:af:e8:67:64:5e:80:27:74:bd:a7: fc:ad:05:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGO24lXxXNbijwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NWNiNmY2YjQtYzA0MS00OGQ5LTgyOTQtNDQzYzE1ZTRlOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJeYIpfyKtLWWGX8j0kJaii4SAjJ3lrr6tIB ZtxnFsZze8pf6AmA5Sfisa60lCRwVLhYQoS/HrWM5b92vZKHvr5pB+ohS7ZdY6Xq CU6RuXJNVThReyEegB0dcGVQ1VX/vQ05R/Bu7+p4RQgbhLDqDGvP4DJWSDAjLvOv 0GhhICSlfkZkgfjGoIMR6tyUK2pSzq2XrKksAp0RUh+LbYPpGDMysxXUOPJC7ySX F1GER7JY5JkGMciY5I4HmAwrC11lNjo31x3txPkn1f2Zsj5Q+7+9j5NhoqtJNuJL 7Gbegi9JG9CjZzPRPrkvClz1jQJSPfncqbyp8flFZzNGl/24hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS22JtwJVe7lg7b4fvrPlojY0HMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMjE2MmFlNTctN2UyOC0z NGNiLWE2ZDEtNGM3ZWJkN2M2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxyXgll4TI6rFVnC6bPh5TbYu7RM502HEPtepPG0H1Y54+fRfU8EEgU MV2+rqzyerJ5KO371112/zuH/sIL+z7i3t42WYtLtXot45hpDuMPHukvFRl74wI9 Qlgu6luL86k4CijjPMEJ/oGjnVZDRaiNdRZR4nq8Rjv+KwlR51xLRFxcBbPl7RAw WpzWeJA+s1XrdeXw7pBRaC6ETjuvALmioJw5FgWYLu+BKnqy9NkZYsgVjhVs5oOY dehelQJXR/rANgUc7//MHi2WyrtS93xHH4aWY8LmVMd3Z3jMgJlCHOgj5kHUhj60 QOeaSswvJTFmr+hnZF6AJ3S9p/ytBTc= -----END CERTIFICATE-----Generated at Sun Jul 20 18:02:42 2025 by rpki-client