$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa File: 829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa (raw, json) Hash identifier: uqndgH+RxIw7nXAWT2RKDZ0hFAq7wQSw5wetekmMQZ4= Subject key identifier: 37:33:FD:C2:0D:25:05:9F:79:36:D4:91:43:D3:DA:08:18:7A:22:5B Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1 Certificate serial: 010D0C9F4328584A96369CC94C1C71BA85B0B700 Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 8987 IP address blocks: 64.190.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:9c:c9:4c:1c:71:ba:85:b0:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=34d852f9-7500-46c6-b955-24d195621c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:3a:a4:93:c6:88:62:55:1e:1f:61:d6:b1: 0b:f9:9d:d4:56:6c:c6:a6:03:5e:af:29:a1:93:4d: d8:88:d9:91:e9:54:1f:b2:cd:f0:c8:94:fc:b9:9f: 72:15:04:2c:47:8c:ea:03:e6:9d:48:4d:94:88:ec: d5:71:e3:35:43:a8:a5:1b:e9:ee:b1:76:df:a5:61: 16:08:e9:f8:e3:aa:47:7d:5e:f9:81:63:97:1b:3d: a9:95:bb:f8:86:ba:cf:fa:32:1f:e4:72:fa:54:e1: b0:9a:c2:a8:af:2d:ca:10:bf:63:7e:6b:af:96:4b: d8:8c:29:35:d4:2d:b5:14:f2:b5:b9:4f:d5:ca:6e: df:44:27:bf:95:bb:88:57:ab:ab:8c:e4:45:c7:c0: e2:be:4a:83:29:33:4d:59:0c:22:95:40:70:e2:86: 80:82:8b:eb:9c:68:71:c3:80:0f:a7:7f:90:b8:ce: 6f:a1:6d:8e:af:02:fd:71:17:c7:74:fc:66:c3:34: a5:c8:98:0b:48:ff:28:87:97:f0:38:1a:53:b4:da: ad:e0:24:52:72:53:a6:d3:00:52:90:9f:85:f7:09: 0e:2a:4e:0d:94:af:44:df:61:e0:f8:14:68:cf:70: c0:86:43:2f:47:52:5b:32:b9:6e:29:6a:25:b0:69: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:33:FD:C2:0D:25:05:9F:79:36:D4:91:43:D3:DA:08:18:7A:22:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl X509v3 Authority Key Identifier: keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer sbgp-ipAddrBlock: critical IPv4: 64.190.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:06:2b:c0:45:6d:c4:5b:3e:a0:17:71:e9:68:08:b7:61:4d: 40:a5:2d:c6:4b:3f:cf:c3:2f:f3:63:91:96:01:f0:b3:40:7d: c3:98:f2:0b:89:f5:68:66:54:7c:c3:ba:27:00:92:3d:38:06: 5a:b1:a5:f6:28:35:0b:c9:bb:e7:fe:4c:a8:c9:fe:70:7c:06: b7:64:59:1a:d0:55:b2:a8:cc:f0:ed:eb:fc:7f:8f:3e:cf:ed: fa:e8:a5:59:97:29:39:73:c4:94:74:08:b8:61:1a:38:b3:62: c1:36:0f:dc:a6:30:a9:0e:08:c8:5c:ba:a0:72:e7:0c:e9:84: 35:65:6f:0f:83:9e:fd:c2:a6:1b:6c:48:c0:48:ed:57:d4:5f: 36:0c:79:c0:b2:5a:cc:41:5f:8c:ed:99:7c:0c:6e:76:2d:5d: da:9d:fd:38:1f:db:6b:fb:08:9d:15:04:ad:c6:85:62:9a:49: fc:51:c9:81:f3:7b:7c:ec:52:44:ad:b3:77:55:f0:3a:30:fe: 25:3a:09:c8:d4:30:fd:81:99:9c:bf:83:46:f1:e0:e7:0b:fb: 82:d4:99:8b:a8:9d:65:4e:83:ae:3f:b2:b0:50:b1:4d:bd:5a: 73:0e:f4:24:58:55:51:78:ed:95:13:cd:61:aa:98:80:9d:83: 15:5d:26:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpzJTBxxuoWwtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3 NmUxMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzRkODUyZjktNzUwMC00NmM2LWI5NTUtMjRkMTk1NjIxYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4I6pJPGiGJVHh9h1rEL+Z3UVmzGpgNerymh k03YiNmR6VQfss3wyJT8uZ9yFQQsR4zqA+adSE2UiOzVceM1Q6ilG+nusXbfpWEW COn446pHfV75gWOXGz2plbv4hrrP+jIf5HL6VOGwmsKory3KEL9jfmuvlkvYjCk1 1C21FPK1uU/Vym7fRCe/lbuIV6urjORFx8DivkqDKTNNWQwilUBw4oaAgovrnGhx w4APp3+QuM5voW2OrwL9cRfHdPxmwzSlyJgLSP8oh5fwOBpTtNqt4CRSclOm0wBS kJ+F9wkOKk4NlK9E32Hg+BRoz3DAhkMvR1JbMrluKWolsGmw+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcz/cINJQWfeTbUkUPT2ggYeiJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0 ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvODI5MTIxYmItYWQ2Yy0z YmRiLWE4YTQtZWJhNGEyYjk1MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0 MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0 YzgxZTc2ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8GK8BFbcRbPqAXceloCLdhTUClLcZLP8/DL/NjkZYB8LNAfcOY8guJ 9WhmVHzDuicAkj04BlqxpfYoNQvJu+f+TKjJ/nB8BrdkWRrQVbKozPDt6/x/jz7P 7fropVmXKTlzxJR0CLhhGjizYsE2D9ymMKkOCMhcuqBy5wzphDVlbw+Dnv3Cphts SMBI7VfUXzYMecCyWsxBX4ztmXwMbnYtXdqd/Tgf22v7CJ0VBK3GhWKaSfxRyYHz e3zsUkSts3dV8Dow/iU6CcjUMP2BmZy/g0bx4OcL+4LUmYuonWVOg64/srBQsU29 WnMO9CRYVVF47ZUTzWGqmICdgxVdJsI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:18:15 2025 by rpki-client