$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa File: 4dd8305e-e04a-3ce1-a306-cad4284760dd.roa (raw, json) Hash identifier: WHf+0cyExGhIfcANb8sOuOx6VwHsmJhGfqioEFcO8e8= Subject key identifier: 4A:F6:49:ED:FE:9B:D3:F6:B9:8B:73:16:0B:27:7B:2B:EE:6E:45:0D Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584A5FC5DFE572BEC6D915C95980 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 14230 IP address blocks: 64.71.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:df:e5:72:be:c6:d9:15:c9:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=18574c55-7db5-4992-8c16-40b80eebc8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c4:ff:6c:50:ff:9c:18:b4:f2:5c:12:a5:a1: 13:2a:69:24:67:60:e9:39:7a:a1:39:4c:3f:f3:49: 41:4b:97:4b:83:e7:7d:2e:9a:b4:aa:34:80:94:06: c5:9d:3f:11:c7:cd:11:a1:54:89:ff:87:a7:37:16: ed:7a:ef:ca:bd:c7:d2:0a:e9:41:3a:74:a3:55:c0: 3e:a0:af:52:7b:73:ca:ca:2f:32:e2:31:97:0b:c7: 79:d0:17:c0:0d:06:50:a8:5b:9e:5c:35:32:7e:5c: dc:f0:87:df:04:4f:7a:f1:14:f4:7b:45:61:5b:96: c3:40:0b:49:03:1a:98:58:d7:ee:68:87:32:e0:3e: d0:84:f0:43:8e:2d:23:42:19:57:f3:b0:4c:01:88: 25:8a:f2:0f:0b:fa:35:bd:dd:1f:20:5c:c0:e3:00: 62:8f:8e:c4:39:37:06:54:15:07:6a:4d:89:d9:79: ad:2b:95:e8:c6:af:a1:59:05:ec:11:1c:b6:b4:16: 54:de:55:7f:b2:02:74:40:cf:ea:8e:e6:1f:00:f8: 9e:3b:8d:e3:e3:d3:f1:64:31:e8:4e:8f:e2:ca:7e: f6:f4:6c:2a:e2:83:d5:32:ec:ae:6a:55:65:d6:50: f8:25:e6:f4:41:14:54:91:a0:d4:fd:19:46:34:bc: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F6:49:ED:FE:9B:D3:F6:B9:8B:73:16:0B:27:7B:2B:EE:6E:45:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 64.71.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:df:c4:30:b3:dc:04:df:4a:f6:33:b3:51:13:49:4b:67:6a: 2f:e2:58:4f:6c:b5:92:68:38:4b:7f:95:ac:59:43:d2:5a:09: c8:c0:24:7a:b6:fc:c2:30:a1:f8:95:5e:48:fc:73:6d:04:c7: ca:f1:0e:db:78:cc:3c:6c:38:f6:a8:8d:b0:0e:6f:24:1b:ed: 87:fa:97:e2:bc:96:52:66:7f:b3:3a:93:40:26:71:e1:18:00: 02:55:43:71:c8:79:cc:e9:6a:52:09:75:70:e7:ce:e9:4e:1a: 3b:a8:64:fb:b1:5c:06:d0:ce:b2:c6:cf:c3:a8:1c:5a:b2:86: 06:e8:3b:df:b2:dc:07:9b:ec:4f:40:ae:77:df:15:12:b0:7b: ca:17:a5:13:a3:70:14:c7:94:33:7c:23:72:0e:a3:bf:8a:70: 56:ea:54:59:d8:d2:2c:81:70:b7:c4:4d:4e:b9:16:f9:41:a9: 3e:6c:4c:3f:92:d2:2d:8b:a3:dc:0c:16:f4:d6:f4:d4:03:7b: dc:3f:19:ad:c8:e3:80:67:d1:f0:e0:c2:c1:17:a7:60:12:36: a2:3d:e4:11:68:90:25:97:30:0c:41:42:d8:72:d5:4d:2c:00: 19:3d:aa:76:f7:22:b5:e1:cf:d5:20:25:80:fe:8c:4d:58:df: 3e:e1:74:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxd/lcr7G2RXJWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MTg1NzRjNTUtN2RiNS00OTkyLThjMTYtNDBiODBlZWJjOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMT/bFD/nBi08lwSpaETKmkkZ2DpOXqhOUw/ 80lBS5dLg+d9Lpq0qjSAlAbFnT8Rx80RoVSJ/4enNxbteu/KvcfSCulBOnSjVcA+ oK9Se3PKyi8y4jGXC8d50BfADQZQqFueXDUyflzc8IffBE968RT0e0VhW5bDQAtJ AxqYWNfuaIcy4D7QhPBDji0jQhlX87BMAYglivIPC/o1vd0fIFzA4wBij47EOTcG VBUHak2J2XmtK5Xoxq+hWQXsERy2tBZU3lV/sgJ0QM/qjuYfAPieO43j49PxZDHo To/iyn729Gwq4oPVMuyualVl1lD4Jeb0QRRUkaDU/RlGNLyhAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr2Se3+m9P2uYtzFgsneyvubkUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvNGRkODMwNWUtZTA0YS0z Y2UxLWEzMDYtY2FkNDI4NDc2MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrfxDCz3ATfSvYzs1ETSUtnai/iWE9stZJoOEt/laxZQ9JaCcjAJHq2 /MIwofiVXkj8c20Ex8rxDtt4zDxsOPaojbAObyQb7Yf6l+K8llJmf7M6k0AmceEY AAJVQ3HIeczpalIJdXDnzulOGjuoZPuxXAbQzrLGz8OoHFqyhgboO9+y3Aeb7E9A rnffFRKwe8oXpROjcBTHlDN8I3IOo7+KcFbqVFnY0iyBcLfETU65FvlBqT5sTD+S 0i2Lo9wMFvTW9NQDe9w/Ga3I44Bn0fDgwsEXp2ASNqI95BFokCWXMAxBQthy1U0s ABk9qnb3IrXhz9UgJYD+jE1Y3z7hdM0= -----END CERTIFICATE-----Generated at Wed Jul 23 12:04:19 2025 by rpki-client