$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa File: a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa (raw, json) Hash identifier: U4mywcyqCabdJmZPwezBpBL8FGr3eL565Y6UsnQ0D50= Subject key identifier: 45:C8:7B:BB:22:78:FD:91:79:3A:46:BD:EE:0E:72:49:92:40:41:C6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B367126BC6C54116F7000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 64.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:36:71:26:bc:6c:54:11:6f:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=0ca2c48f-193f-4829-8553-f3385f6bd0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:d2:01:27:93:55:6b:05:e8:99:ee:ab:10: 80:ac:94:22:0a:c8:4a:84:77:a4:2b:43:bf:f4:60: 33:4a:71:3c:a5:af:d1:75:38:2d:d6:2a:30:3b:0e: 5a:f7:4c:5d:24:85:29:6d:45:ac:e5:fb:be:db:ae: 06:fd:78:64:98:bf:7a:d5:ba:95:80:ca:cc:1c:ca: bd:a2:c3:6b:a1:83:d1:06:67:52:06:04:20:dd:0e: 0b:9a:a1:c8:0f:ba:26:c8:a4:bf:7e:de:ee:dd:25: 5e:8f:e2:c6:42:65:9b:b6:34:c5:e4:f5:69:ff:45: 0a:c9:a4:8d:26:22:ba:ec:f9:6a:34:53:6f:97:24: 11:af:7d:34:26:6e:e9:40:17:50:92:f9:87:91:1c: 06:23:7f:33:a7:f5:c4:82:b8:c4:4e:54:31:78:33: 47:d1:20:d4:00:8c:f0:3a:12:2a:b3:e1:50:ed:13: df:b2:d2:0d:73:e7:73:ec:6c:d6:5c:9e:42:99:42: ed:60:6d:bf:96:00:a8:f9:68:8b:a1:85:d0:40:cb: a4:e8:25:91:d1:69:46:55:bc:65:73:52:64:0d:3a: f0:0c:c5:ac:bb:97:d6:ad:0c:b8:74:84:96:98:58: 12:14:54:ad:11:fe:a3:48:81:ff:65:2d:13:5b:02: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C8:7B:BB:22:78:FD:91:79:3A:46:BD:EE:0E:72:49:92:40:41:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:54:31:cd:48:7a:14:71:bc:7e:f9:c8:84:d4:b8:1d:2c:b1: 1a:69:a8:80:c1:3a:82:ff:e2:55:cb:e5:70:84:35:2d:e6:5e: c8:d2:f5:2e:5e:61:86:c2:49:51:02:f2:38:46:39:1b:08:da: 1f:d0:01:2d:fe:35:dd:82:93:69:71:55:d1:4a:6f:96:b1:d4: de:54:71:2f:ad:2d:52:55:e2:c4:cf:62:9e:2d:35:9e:0d:07: ab:38:dd:50:d2:e0:84:e1:56:83:61:bf:2c:6e:f3:96:b6:c9: e0:1f:83:68:12:bc:e5:c3:23:f6:79:82:81:93:a4:b9:1b:57: e0:a2:89:14:3d:ce:78:cc:17:9d:fb:cc:f2:a8:e0:17:1b:c3: f9:7a:d4:c8:13:09:be:e1:74:b4:e8:f0:71:10:06:18:af:21: d4:82:02:0f:eb:cf:65:77:40:be:91:c0:e3:eb:5c:90:17:82: 35:f5:2e:d5:d7:0f:e1:56:ff:f6:6a:b6:77:65:0b:17:4e:43: a8:1b:ab:3e:2f:db:5c:3a:ec:e9:62:3e:61:d3:06:09:61:07: 46:d1:a8:e1:e6:0d:46:e0:b2:0c:c2:ae:4b:08:0e:70:50:e3: 5c:c4:0e:81:86:96:bb:22:2d:e6:b7:84:6a:c5:ea:0b:cf:ff: b6:f8:ef:4d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp6SzZxJrxsVBFvcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MGNhMmM0OGYtMTkzZi00ODI5LTg1NTMtZjMzODVmNmJkMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/TSASeTVWsF6JnuqxCArJQiCshKhHekK0O/ 9GAzSnE8pa/RdTgt1iowOw5a90xdJIUpbUWs5fu+264G/XhkmL961bqVgMrMHMq9 osNroYPRBmdSBgQg3Q4LmqHID7omyKS/ft7u3SVej+LGQmWbtjTF5PVp/0UKyaSN JiK67PlqNFNvlyQRr300Jm7pQBdQkvmHkRwGI38zp/XEgrjETlQxeDNH0SDUAIzw OhIqs+FQ7RPfstINc+dz7GzWXJ5CmULtYG2/lgCo+WiLoYXQQMuk6CWR0WlGVbxl c1JkDTrwDMWsu5fWrQy4dISWmFgSFFStEf6jSIH/ZS0TWwLgNQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEXIe7sieP2ReTpGve4OckmSQEHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTAxMGI5NjctYzNlZS0z OWFkLTkwZTgtZWZhM2NiYzNiYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQHIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKFQxzUh6FHG8fvnIhNS4HSyxGmmogME6gv/iVcvlcIQ1LeZeyNL1Ll5h hsJJUQLyOEY5GwjaH9ABLf413YKTaXFV0UpvlrHU3lRxL60tUlXixM9ini01ng0H qzjdUNLghOFWg2G/LG7zlrbJ4B+DaBK85cMj9nmCgZOkuRtX4KKJFD3OeMwXnfvM 8qjgFxvD+XrUyBMJvuF0tOjwcRAGGK8h1IICD+vPZXdAvpHA4+tckBeCNfUu1dcP 4Vb/9mq2d2ULF05DqBurPi/bXDrs6WI+YdMGCWEHRtGo4eYNRuCyDMKuSwgOcFDj XMQOgYaWuyIt5reEasXqC8//tvjvTQ== -----END CERTIFICATE-----Generated at Fri Jul 25 19:23:49 2025 by rpki-client