$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa File: df938649-fe0c-3f68-86dd-87b8933d0a23.roa (raw, json) Hash identifier: E0Jj1Zc+/H1aXGhREdj1RZ6AKhcAY5BOhuQvWU4mTVc= Subject key identifier: 6D:C0:3B:8D:64:9C:DF:EC:04:29:76:93:5D:FE:1B:04:79:89:C6:BE Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584A6DBB40B47C79BDE9667DCD00 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 36352 IP address blocks: 64.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:40:b4:7c:79:bd:e9:66:7d:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=05805fa3-d7f2-470a-a766-3a2a9e37d854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:a0:23:d1:24:1a:07:10:42:f1:10:5b:f9: df:cf:17:8c:fb:f7:d7:85:d8:cc:f3:f9:2c:b5:bf: 6a:a4:5d:40:31:ed:94:c7:a6:3d:8f:0a:17:cc:7e: dd:9a:a0:80:be:06:f8:56:a7:23:e5:46:b4:77:e8: b2:46:37:d9:eb:f3:6d:2c:4a:e6:f7:97:e4:29:bf: 3d:de:bf:91:a1:d0:5a:36:6b:eb:ae:2e:57:13:1f: 1d:0b:dc:cc:ba:49:fb:c1:a0:49:67:a6:f5:ff:19: 8c:c9:17:55:36:4f:ec:db:4a:f3:3c:3f:d9:b5:20: 12:17:5f:51:a2:f8:b4:2a:cd:e6:4f:75:4a:7e:79: f6:b9:39:39:aa:a8:fa:37:3c:66:76:78:ef:f0:d5: 54:93:c8:99:11:e2:bf:27:5c:34:ac:ba:a5:56:e5: 25:fb:81:11:cf:50:ce:57:78:f4:24:d2:e8:3e:b1: 69:cb:24:5f:a8:6e:44:48:f0:86:f2:93:a3:91:da: 03:91:18:c5:f5:c8:c5:5d:e2:18:fc:37:12:6b:5b: cb:52:76:a5:d7:e5:60:d3:21:34:aa:af:eb:0c:6e: a2:02:d8:df:85:57:4c:b5:61:cf:80:09:11:14:17: 62:c5:e7:b0:35:88:f7:22:7d:8a:05:e5:9d:b1:43: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C0:3B:8D:64:9C:DF:EC:04:29:76:93:5D:FE:1B:04:79:89:C6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c8:95:f0:53:fb:65:d4:3f:39:82:77:c0:22:ec:cc:02:63: e1:1a:3f:32:9c:1d:06:17:b7:f2:1f:14:a6:fd:5c:c6:8b:82: 67:de:38:55:48:60:e5:6f:8b:9c:6b:48:d4:6d:f0:70:22:a0: 7e:cd:ac:32:98:bb:80:5c:34:22:27:bd:b3:90:2c:4c:96:7e: d9:0f:21:6e:80:f0:b0:c3:ea:fd:17:f2:00:1d:3f:1a:e6:21: 07:fd:c3:9c:b3:91:08:f8:34:0e:bd:78:26:e6:0a:cd:6c:66: 78:17:e0:24:23:e1:04:da:4b:fa:fb:49:97:22:28:90:37:fe: 9e:4e:7d:77:29:86:b3:45:7f:26:6c:d2:17:66:9b:50:a8:57: 8c:19:4d:09:06:86:0f:97:6a:d9:f7:d0:15:06:34:ca:ca:a8: b1:6a:12:41:ce:b0:2a:0c:10:6d:7c:ad:df:29:53:6c:c9:bf: 81:72:1a:24:61:4a:41:c1:24:fb:8f:cf:96:50:dc:dc:4d:c6: a7:3e:aa:17:9d:fd:c3:ff:8b:bb:bc:3b:9d:ed:b6:eb:03:62: 5d:a9:f5:f0:16:5f:58:fe:7d:1f:33:f6:fe:e7:a6:89:43:6d: 86:e4:b6:8c:82:6a:02:65:1b:56:ee:d0:4b:16:41:ee:74:d3: ef:6c:ad:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0C0fHm96WZ9zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MDU4MDVmYTMtZDdmMi00NzBhLWE3NjYtM2EyYTllMzdkODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqGgI9EkGgcQQvEQW/nfzxeM+/fXhdjM8/ks tb9qpF1AMe2Ux6Y9jwoXzH7dmqCAvgb4Vqcj5Ua0d+iyRjfZ6/NtLErm95fkKb89 3r+RodBaNmvrri5XEx8dC9zMukn7waBJZ6b1/xmMyRdVNk/s20rzPD/ZtSASF19R ovi0Ks3mT3VKfnn2uTk5qqj6Nzxmdnjv8NVUk8iZEeK/J1w0rLqlVuUl+4ERz1DO V3j0JNLoPrFpyyRfqG5ESPCG8pOjkdoDkRjF9cjFXeIY/DcSa1vLUnal1+Vg0yE0 qq/rDG6iAtjfhVdMtWHPgAkRFBdixeewNYj3In2KBeWdsUPB3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3AO41knN/sBCl2k13+GwR5ica+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZGY5Mzg2NDktZmUwYy0z ZjY4LTg2ZGQtODdiODkzM2QwYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPIlfBT+2XUPzmCd8Ai7MwCY+EaPzKcHQYXt/IfFKb9XMaLgmfeOFVI YOVvi5xrSNRt8HAioH7NrDKYu4BcNCInvbOQLEyWftkPIW6A8LDD6v0X8gAdPxrm IQf9w5yzkQj4NA69eCbmCs1sZngX4CQj4QTaS/r7SZciKJA3/p5OfXcphrNFfyZs 0hdmm1CoV4wZTQkGhg+Xatn30BUGNMrKqLFqEkHOsCoMEG18rd8pU2zJv4FyGiRh SkHBJPuPz5ZQ3NxNxqc+qhed/cP/i7u8O53ttusDYl2p9fAWX1j+fR8z9v7npolD bYbktoyCagJlG1bu0EsWQe500+9srdQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:49 2025 by rpki-client