$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa File: d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa (raw, json) Hash identifier: H5pfM2IMdzgD9OHRwoOBBJDh6G95pTDzbXVFIiYazCg= Subject key identifier: 17:68:88:2F:BC:EC:D4:3D:23:03:A3:67:84:A9:1F:56:35:AA:76:C5 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584A814658BD08C3561499610500 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 6079 IP address blocks: 64.53.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:58:bd:08:c3:56:14:99:61:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2bd82810-0e54-4ac2-8dec-5f7df6e83b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:85:8c:3a:5d:81:d3:d2:46:6e:8e:32:64: 74:bd:f4:1e:f8:61:69:9d:de:39:09:35:dc:94:e9: 5b:e0:c6:47:9a:f5:c3:ab:a6:53:67:3c:89:3c:7f: a0:b9:c6:f2:b3:43:ac:ed:5a:09:b3:a1:d7:c1:ec: b9:83:10:5f:fe:b6:2f:90:61:e7:01:8e:76:6b:51: dc:eb:a8:d1:4d:37:aa:e2:7d:df:fb:a1:fc:ce:38: cf:3d:d8:8a:31:fd:b2:72:d6:ac:b4:d8:22:0c:cb: 89:9a:23:e9:ed:b6:a2:7d:71:aa:e2:d0:dc:d3:79: 70:1b:fb:db:06:51:25:88:5a:e1:fb:d0:93:64:ef: 20:58:44:53:bc:fe:61:fa:d5:a8:6e:fc:d8:48:fe: 61:1a:20:1b:32:eb:fb:c3:57:27:aa:3c:55:cb:82: a5:b2:f2:5a:4e:8d:3c:a3:61:13:a0:01:19:99:c9: 3e:7e:9f:44:08:98:50:d5:0d:9c:58:b6:df:5c:41: 56:4e:be:42:3e:92:c6:0e:ba:41:2b:e6:e8:b2:5d: 68:2e:23:10:6c:54:d4:19:7b:0c:06:74:c3:a8:12: 12:97:30:df:80:6d:b4:04:af:27:ab:84:39:78:ab: 57:fb:34:f9:b7:3f:82:67:9c:bf:21:16:82:c3:c6: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:68:88:2F:BC:EC:D4:3D:23:03:A3:67:84:A9:1F:56:35:AA:76:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 64.53.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:10:8e:ef:29:55:94:c5:2a:c0:bb:91:f6:cf:9e:13:c0:da: c1:a9:09:c2:54:9c:3a:2f:33:22:08:5a:15:f3:c6:8a:e7:7a: be:ba:2f:53:df:12:ab:d4:88:e6:62:e5:b8:c0:ef:3f:c3:8d: 87:de:2c:db:73:df:f4:3c:84:d5:cb:33:7d:c5:b3:82:d6:03: 8d:08:ac:37:bf:ed:43:bc:94:65:f4:77:9f:5d:45:33:ee:5c: a5:77:1d:9a:5c:f5:cc:85:d1:6f:01:0a:b5:83:aa:68:9b:53: 6e:40:ce:19:9c:9f:18:4e:90:90:55:b8:ef:c7:57:58:35:d5: c9:b5:32:26:e8:b7:17:96:75:6d:c6:88:d2:e4:fa:ed:dc:e5: a2:f7:1a:c1:3e:7d:c4:0d:96:a5:a8:f5:91:99:51:f0:1a:cd: 80:0c:56:de:41:ee:aa:ae:42:e1:bb:2d:60:69:0f:00:94:21: dc:7a:14:06:d6:ae:cc:43:9b:35:c9:8d:12:ba:c1:5e:cf:e1: b0:42:e8:6e:6e:fd:13:77:89:c8:cd:95:1f:f4:41:de:6b:51: 02:0a:5b:00:46:fd:d8:37:e8:bf:9b:df:dd:a7:e6:81:e1:53: af:08:ef:f9:6e:b0:58:56:05:22:34:14:77:37:0c:1c:11:c6: ce:aa:c1:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRli9CMNWFJlhBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmJkODI4MTAtMGU1NC00YWMyLThkZWMtNWY3ZGY2ZTgzYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooiFjDpdgdPSRm6OMmR0vfQe+GFpnd45CTXc lOlb4MZHmvXDq6ZTZzyJPH+gucbys0Os7VoJs6HXwey5gxBf/rYvkGHnAY52a1Hc 66jRTTeq4n3f+6H8zjjPPdiKMf2yctastNgiDMuJmiPp7baifXGq4tDc03lwG/vb BlEliFrh+9CTZO8gWERTvP5h+tWobvzYSP5hGiAbMuv7w1cnqjxVy4KlsvJaTo08 o2EToAEZmck+fp9ECJhQ1Q2cWLbfXEFWTr5CPpLGDrpBK+bosl1oLiMQbFTUGXsM BnTDqBISlzDfgG20BK8nq4Q5eKtX+zT5tz+CZ5y/IRaCw8YPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdoiC+87NQ9IwOjZ4SpH1Y1qnbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvZDVmOGU1NTYtYjIzZi0z OTdmLThhYmMtODEyYThmYTdlYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0Qju8pVZTFKsC7kfbPnhPA2sGpCcJUnDovMyIIWhXzxorner66L1Pf EqvUiOZi5bjA7z/DjYfeLNtz3/Q8hNXLM33Fs4LWA40IrDe/7UO8lGX0d59dRTPu XKV3HZpc9cyF0W8BCrWDqmibU25AzhmcnxhOkJBVuO/HV1g11cm1MibotxeWdW3G iNLk+u3c5aL3GsE+fcQNlqWo9ZGZUfAazYAMVt5B7qquQuG7LWBpDwCUIdx6FAbW rsxDmzXJjRK6wV7P4bBC6G5u/RN3icjNlR/0Qd5rUQIKWwBG/dg36L+b392n5oHh U68I7/lusFhWBSI0FHc3DBwRxs6qwVE= -----END CERTIFICATE-----Generated at Tue Jul 29 04:24:22 2025 by rpki-client