$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cbecae29-380d-31ed-a347-201bb4b0682d.roa File: cbecae29-380d-31ed-a347-201bb4b0682d.roa (raw, json) Hash identifier: oyRVM5HcSh7Kz4KNXDz5/zjA/RsARI3QbdgzJz8KyoM= Subject key identifier: DB:CB:4C:13:2E:D4:B5:A3:A6:B0:C8:04:FF:FC:47:70:2E:B0:A1:97 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584A86DBD7748FA759C757771140 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cbecae29-380d-31ed-a347-201bb4b0682d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 64.9.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d7:74:8f:a7:59:c7:57:77:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2b45bd25-1721-4687-a10a-1b1f89b0bc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:f8:49:ff:03:88:80:1e:26:6a:c9:77:07: 4f:72:9a:83:e3:52:b4:2e:ba:6d:37:52:93:91:9a: 4e:86:ca:70:bf:ec:f5:74:69:26:79:35:32:c9:6a: 78:03:ea:aa:12:89:18:01:5c:49:0a:d1:3c:42:44: 29:f1:14:84:92:ba:4f:e6:0d:a8:e5:ae:29:2a:c0: 6a:11:a9:3d:60:0d:e7:5c:5f:52:4b:fc:e5:e0:a9: 2e:e3:9e:41:f8:5f:ec:9e:5d:52:9e:f0:38:c1:b5: 2c:c4:c8:9f:1e:6b:fe:b2:e3:94:62:07:4d:33:56: df:31:95:30:18:46:86:40:b0:30:dd:57:de:ca:ba: ed:bf:22:58:3b:69:8a:d4:1f:eb:1e:a2:59:96:9d: 3e:dd:1f:08:b1:96:c6:a8:39:48:9a:4a:a1:26:1d: 23:4b:fe:1b:f3:4f:ef:d7:38:29:c0:b9:49:5e:1b: 1e:78:67:0c:9f:10:8c:2f:71:f3:63:48:e2:97:ec: 75:0f:9b:5b:09:02:d2:0c:f1:9d:16:df:66:12:e1: 00:e0:28:48:b5:84:6d:2c:9f:27:ec:d6:0c:dd:f8: 81:84:00:26:28:b8:b9:45:4f:c9:79:7c:36:9c:f0: 16:52:5b:dd:46:62:b7:d1:f6:2d:ce:7b:23:a6:9d: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CB:4C:13:2E:D4:B5:A3:A6:B0:C8:04:FF:FC:47:70:2E:B0:A1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cbecae29-380d-31ed-a347-201bb4b0682d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0a:6c:cf:5d:21:a2:ac:49:78:f5:12:d4:ff:6b:36:7a:82: 93:16:95:90:6a:49:02:06:1e:02:b6:f0:d3:5d:e1:4a:cf:e9: 88:e0:26:21:71:1a:17:50:ad:82:d6:96:73:b7:4b:28:72:54: b0:9c:5e:a4:af:7e:12:8e:5d:29:c5:7a:a3:60:3e:c8:9e:9a: 89:1b:02:57:33:4b:ef:7e:0a:ba:2f:ec:9a:4f:4f:82:30:34: 83:ee:de:5f:ab:31:ae:23:f3:8b:4c:09:c8:7c:63:a8:18:69: 1c:5b:5b:a6:dd:44:ef:69:4b:11:13:dd:fd:4e:ad:3a:07:75: 1c:97:17:8e:7b:52:3f:a9:f1:dc:a1:06:dd:99:40:30:99:07: 3a:22:3b:5c:69:0f:3a:b4:af:d0:55:fb:ef:f6:33:2b:ad:a5: da:84:88:59:c8:d8:ac:0b:aa:5f:4d:8e:cd:1a:86:f3:5b:5a: d0:9f:b1:d5:10:f5:1e:0f:fb:ce:96:7e:c3:04:8d:9a:ba:46: c6:05:95:ef:12:13:f5:0b:33:ac:2b:54:60:b3:6b:ec:a1:71: f0:56:87:82:45:4f:9f:1e:19:d3:20:46:12:58:67:66:5e:bd: ca:94:12:37:d4:5a:0f:d1:2b:bc:3f:a3:f1:9e:75:c2:e9:2a: 7a:e4:ff:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29d0j6dZx1d3EUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmI0NWJkMjUtMTcyMS00Njg3LWExMGEtMWIxZjg5YjBiYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQj4Sf8DiIAeJmrJdwdPcpqD41K0LrptN1KT kZpOhspwv+z1dGkmeTUyyWp4A+qqEokYAVxJCtE8QkQp8RSEkrpP5g2o5a4pKsBq Eak9YA3nXF9SS/zl4Kku455B+F/snl1SnvA4wbUsxMifHmv+suOUYgdNM1bfMZUw GEaGQLAw3VfeyrrtvyJYO2mK1B/rHqJZlp0+3R8IsZbGqDlImkqhJh0jS/4b80/v 1zgpwLlJXhseeGcMnxCML3HzY0jil+x1D5tbCQLSDPGdFt9mEuEA4ChItYRtLJ8n 7NYM3fiBhAAmKLi5RU/JeXw2nPAWUlvdRmK30fYtznsjpp0AOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvLTBMu1LWjprDIBP/8R3AusKGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvY2JlY2FlMjktMzgwZC0z MWVkLWEzNDctMjAxYmI0YjA2ODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEKbM9dIaKsSXj1EtT/azZ6gpMWlZBqSQIGHgK28NNd4UrP6YjgJiFx GhdQrYLWlnO3SyhyVLCcXqSvfhKOXSnFeqNgPsiemokbAlczS+9+Crov7JpPT4Iw NIPu3l+rMa4j84tMCch8Y6gYaRxbW6bdRO9pSxET3f1OrToHdRyXF457Uj+p8dyh Bt2ZQDCZBzoiO1xpDzq0r9BV++/2MyutpdqEiFnI2KwLql9Njs0ahvNbWtCfsdUQ 9R4P+86WfsMEjZq6RsYFle8SE/ULM6wrVGCza+yhcfBWh4JFT58eGdMgRhJYZ2Ze vcqUEjfUWg/RK7w/o/GedcLpKnrk/98= -----END CERTIFICATE-----Generated at Sat Jul 26 07:24:12 2025 by rpki-client