$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa File: 42ad508a-1d9b-3416-b900-7d41869eb2b5.roa (raw, json) Hash identifier: gyXvDquXQqcOzz1wCC3GvFdgTRKYgRiaDsUs/9gTCzs= Subject key identifier: DE:F4:8D:25:7B:CF:94:C8:A7:FC:65:7C:E6:E0:39:6F:7D:4F:6A:AF Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F4328584A89A620E1A77BF50E89582E80 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 14217 IP address blocks: 64.21.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:20:e1:a7:7b:f5:0e:89:58:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=b75b3e2e-5627-478b-94f9-b084defaf3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:75:d7:1d:04:a4:3b:e3:6d:0e:91:fe:78: 77:03:8c:d4:59:76:5a:27:45:5f:35:26:13:a7:46: b8:4f:df:a9:b5:16:0e:ce:94:87:e7:b0:6f:ee:31: dc:89:40:46:a3:b6:2a:67:7e:3e:03:c3:85:ab:e9: 51:1b:e5:e6:08:5e:75:c5:d4:7d:36:05:6c:3e:71: 69:61:6d:c5:30:f3:40:21:39:ac:ee:66:aa:ad:d6: 49:21:11:83:f8:88:b4:75:6e:28:d6:d9:fc:8a:e3: e4:79:31:72:d0:00:7e:02:dc:cd:9b:72:d2:ce:68: 83:d9:95:74:7c:86:7a:5e:5a:33:4d:50:22:19:53: 9f:4d:b9:79:30:99:3f:ce:dc:59:ed:8d:f9:c4:52: 93:0a:c7:09:3b:d8:8f:5d:15:6a:30:90:1d:25:3a: f7:3a:12:63:80:c8:cc:b9:0b:7a:17:ea:9b:8b:c1: c3:63:d9:bb:77:86:99:58:c7:27:9e:4a:09:68:ba: 9d:7b:ec:6b:cb:79:6e:b2:c1:a4:e7:4d:13:89:8f: de:fb:a0:0d:4b:1b:d2:15:d2:56:fa:b1:0a:b2:1e: 49:3a:e9:1a:50:c9:4f:8e:36:a8:b1:40:53:6f:29: 6e:c6:6d:b4:58:17:4f:65:8e:a7:f5:d4:d2:ae:91: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F4:8D:25:7B:CF:94:C8:A7:FC:65:7C:E6:E0:39:6F:7D:4F:6A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 64.21.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:15:9a:3c:0a:47:2d:9c:d3:9d:47:e0:fd:25:45:45:fd:3c: 6c:11:5f:7e:89:c6:ba:f9:25:28:d0:14:d1:8b:d3:f7:a4:87: d2:b7:62:73:49:eb:13:c3:b6:14:96:68:8b:0c:1e:eb:b8:93: 31:e3:70:a7:62:a0:f6:49:22:bc:38:c4:7d:ec:63:36:82:fc: 23:e1:3c:f0:74:f5:cb:1e:99:f6:6c:e3:6e:02:db:b3:5a:95: 3b:9a:36:54:9c:ed:28:82:ce:d8:44:b3:c5:ee:27:61:09:c1: f2:a9:e9:cb:54:82:4b:ba:e5:da:03:69:61:72:64:e0:61:3c: 13:96:0e:b3:57:ab:cf:4e:a6:de:03:40:a5:1f:68:6a:c3:94: d3:8a:fe:1f:b1:30:92:c8:22:f5:78:6b:aa:d2:f8:46:5f:ed: cc:a0:46:ff:6c:2f:b6:50:bf:2c:11:e3:13:e2:f0:6d:7e:b0: a8:ef:b4:57:16:a1:48:02:e4:9e:c2:03:5b:3f:36:3e:8d:e1: 17:fc:22:a5:66:6a:cf:70:e7:b4:dd:74:0f:b7:6a:ca:c8:52: cc:65:fc:fe:d8:cd:b6:a7:74:6f:b6:24:ba:1f:41:77:80:5a: 62:3b:75:3f:b1:8d:32:17:6a:97:c9:d1:81:83:91:cf:55:15: ac:36:e2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpiDhp3v1DolYLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk Yjc1YjNlMmUtNTYyNy00NzhiLTk0ZjktYjA4NGRlZmFmM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEV11x0EpDvjbQ6R/nh3A4zUWXZaJ0VfNSYT p0a4T9+ptRYOzpSH57Bv7jHciUBGo7YqZ34+A8OFq+lRG+XmCF51xdR9NgVsPnFp YW3FMPNAITms7maqrdZJIRGD+Ii0dW4o1tn8iuPkeTFy0AB+AtzNm3LSzmiD2ZV0 fIZ6XlozTVAiGVOfTbl5MJk/ztxZ7Y35xFKTCscJO9iPXRVqMJAdJTr3OhJjgMjM uQt6F+qbi8HDY9m7d4aZWMcnnkoJaLqde+xry3lussGk500TiY/e+6ANSxvSFdJW +rEKsh5JOukaUMlPjjaosUBTbyluxm20WBdPZY6n9dTSrpGAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN70jSV7z5TIp/xlfObgOW99T2qvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvNDJhZDUwOGEtMWQ5Yi0z NDE2LWI5MDAtN2Q0MTg2OWViMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkVmjwKRy2c051H4P0lRUX9PGwRX36Jxrr5JSjQFNGL0/ekh9K3YnNJ 6xPDthSWaIsMHuu4kzHjcKdioPZJIrw4xH3sYzaC/CPhPPB09csemfZs424C27Na lTuaNlSc7SiCzthEs8XuJ2EJwfKp6ctUgku65doDaWFyZOBhPBOWDrNXq89Opt4D QKUfaGrDlNOK/h+xMJLIIvV4a6rS+EZf7cygRv9sL7ZQvywR4xPi8G1+sKjvtFcW oUgC5J7CA1s/Nj6N4Rf8IqVmas9w57TddA+3asrIUsxl/P7YzbandG+2JLofQXeA WmI7dT+xjTIXapfJ0YGDkc9VFaw24tI= -----END CERTIFICATE-----Generated at Mon Jul 28 17:34:43 2025 by rpki-client