$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/91d96eca-aa01-3090-9aa3-e2154462c824.roa File: 91d96eca-aa01-3090-9aa3-e2154462c824.roa (raw, json) Hash identifier: RzMdkv/6lPCCo2ii1TP/jK33OjbRAZ0RC9Bc+TZ4F3A= Subject key identifier: 7B:BA:3B:24:D6:89:99:A8:A5:51:69:12:10:8D:60:25:92:9B:FA:60 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D9461F76A947E01C2F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/91d96eca-aa01-3090-9aa3-e2154462c824.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 64.114.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d9:46:1f:76:a9:47:e0:1c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=0d35b7f8-5259-44d1-a0f9-e6560a234bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:43:ac:5c:2f:ce:cb:e7:e2:c8:1a:ed:4f: a5:c7:a5:00:73:13:04:27:b2:3f:d3:02:30:ce:7c: 34:90:bb:63:12:6c:ae:7f:3c:a9:62:74:0c:45:03: e7:18:f3:7b:51:71:b3:81:b4:d7:13:19:da:7c:4b: cd:d4:25:a4:13:1f:3a:f6:a2:36:da:53:d7:29:0d: 8c:77:5a:1a:0c:3f:46:dd:2c:5d:c4:b2:3e:b2:cb: 17:8a:9f:4b:35:14:35:69:31:04:01:0c:dc:56:54: 76:b4:3c:3d:7f:ba:13:e5:30:39:a0:91:e9:f7:71: 80:cd:ee:a8:2e:b0:d1:71:88:fa:1e:e9:3c:f6:81: b0:ba:d7:4e:32:98:a9:89:c1:a9:ac:c6:52:db:0e: 79:0f:c3:41:22:84:f9:52:2e:59:98:00:4c:55:91: 71:5a:94:d8:bd:76:42:ee:bd:f4:c5:97:3a:66:93: bf:2d:22:31:0c:50:b6:88:f5:18:12:47:92:39:3d: a0:7d:b5:5f:de:65:a8:52:e9:84:ec:85:0e:50:73: 25:fa:5b:d2:32:1c:94:21:93:75:ba:72:bc:d4:41: ec:dd:d9:e0:ce:53:5a:8c:39:cb:58:0b:3f:7b:56: 21:1f:29:39:4f:02:94:a5:d6:1b:58:07:db:07:e0: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BA:3B:24:D6:89:99:A8:A5:51:69:12:10:8D:60:25:92:9B:FA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/91d96eca-aa01-3090-9aa3-e2154462c824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0c:32:55:c7:6a:44:e5:a5:94:83:f1:33:2d:37:31:19:ab: 77:3a:22:78:9e:19:44:65:57:04:e7:91:7f:f3:1a:11:15:cc: b6:ec:51:cb:d1:11:72:bc:fd:96:f5:77:0d:bb:66:e9:8d:6b: 77:c7:9e:dc:9a:89:8b:de:e8:03:42:99:0c:91:a0:a8:8f:b2: 9a:89:9b:a0:75:aa:fc:2f:59:73:dc:74:ce:f5:43:fb:49:af: ba:47:d8:87:c9:78:1a:54:7d:e8:01:b3:c4:7a:75:5c:fb:a1: 20:13:c6:47:55:c3:07:6e:1e:4c:76:cd:8e:e6:2c:0c:5f:6b: 28:2a:17:ae:22:0f:19:d2:dd:ac:6a:d3:fa:7a:3d:e4:7b:16: 25:27:19:1c:56:8d:97:11:4d:c4:eb:2e:e7:5b:3f:33:8a:63: 2a:af:77:36:23:52:f1:a1:3e:f4:77:11:e1:cb:25:9d:f9:b6: 79:58:04:b9:f5:c1:06:b4:f5:97:ce:d5:f8:70:99:c8:3c:06: 79:57:3a:bc:90:13:99:a6:8f:ff:f5:40:17:84:1d:d8:7e:b2: c4:1f:cb:1c:22:94:bb:2c:31:cf:49:6c:0a:f9:eb:2d:a0:6d: cf:f0:07:1a:0c:c0:c1:57:b6:1d:34:8c:8a:dd:9a:95:86:86: a0:2c:ff:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdlGH3apR+AcLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk MGQzNWI3ZjgtNTI1OS00NGQxLWEwZjktZTY1NjBhMjM0YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2ZDrFwvzsvn4sga7U+lx6UAcxMEJ7I/0wIw znw0kLtjEmyufzypYnQMRQPnGPN7UXGzgbTXExnafEvN1CWkEx869qI22lPXKQ2M d1oaDD9G3SxdxLI+sssXip9LNRQ1aTEEAQzcVlR2tDw9f7oT5TA5oJHp93GAze6o LrDRcYj6Huk89oGwutdOMpipicGprMZS2w55D8NBIoT5Ui5ZmABMVZFxWpTYvXZC 7r30xZc6ZpO/LSIxDFC2iPUYEkeSOT2gfbVf3mWoUumE7IUOUHMl+lvSMhyUIZN1 unK81EHs3dngzlNajDnLWAs/e1YhHyk5TwKUpdYbWAfbB+AkSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu6OyTWiZmopVFpEhCNYCWSm/pgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTFkOTZlY2EtYWEwMS0z MDkwLTlhYTMtZTIxNTQ0NjJjODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQMMlXHakTlpZSD8TMtNzEZq3c6InieGURlVwTnkX/zGhEVzLbsUcvR EXK8/Zb1dw27ZumNa3fHntyaiYve6ANCmQyRoKiPspqJm6B1qvwvWXPcdM71Q/tJ r7pH2IfJeBpUfegBs8R6dVz7oSATxkdVwwduHkx2zY7mLAxfaygqF64iDxnS3axq 0/p6PeR7FiUnGRxWjZcRTcTrLudbPzOKYyqvdzYjUvGhPvR3EeHLJZ35tnlYBLn1 wQa09ZfO1fhwmcg8BnlXOryQE5mmj//1QBeEHdh+ssQfyxwilLssMc9JbAr56y2g bc/wBxoMwMFXth00jIrdmpWGhqAs/9A= -----END CERTIFICATE-----Generated at Fri Jul 25 19:36:21 2025 by rpki-client