$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa File: 125998d1-5641-3c1f-8af4-69cb241cad63.roa (raw, json) Hash identifier: ZwsLUA7e7AaEfGXJ5qxiD8AUwkNGzZePrDHGAgnp1h4= Subject key identifier: 8D:4D:92:0F:54:77:DE:BC:A3:D8:D3:57:1A:75:80:D2:FA:3E:95:7F Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584A612B0DC52099863CA2038400 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 393336 IP address blocks: 64.40.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0d:c5:20:99:86:3c:a2:03:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=3cc3fb68-79a5-45c0-8bcf-3630a1913e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:f4:38:1a:5d:4e:8a:36:4d:04:ce:bd:e8: 8c:3a:1f:ab:92:01:0c:88:67:75:a5:ca:1e:f6:19: ab:9e:b3:4c:75:a7:42:1b:6e:dc:64:69:03:65:ef: 39:7c:b1:a3:5c:ba:aa:2b:68:22:6d:f0:f8:c2:f0: d0:c6:e8:e4:1c:5b:13:22:7f:b9:ee:19:27:88:59: 82:5a:43:19:b4:a1:9f:52:55:3e:db:87:22:d6:50: 03:71:69:87:89:86:40:09:2e:20:78:7a:59:9c:98: 4b:91:47:76:b9:64:be:8c:38:52:48:4b:f0:0a:77: 46:af:3a:04:29:7e:62:0b:42:06:c2:82:9a:46:fd: 91:93:87:66:2d:b9:b9:c3:64:24:59:36:7c:17:9b: 50:cc:c8:39:70:3e:62:4b:74:90:24:8e:04:7c:7d: db:7e:07:03:b4:42:8e:3a:8b:f1:48:e3:38:a5:5d: a3:35:0c:8a:87:7d:d9:7f:51:33:a4:c4:29:09:f4: c1:90:e2:66:f1:32:c4:d1:bd:4e:5d:6e:0c:73:97: 07:25:15:db:8c:bb:df:66:8e:cc:6d:a7:fe:b8:55: 9b:97:29:a4:e6:b8:f1:35:c9:d0:a5:06:00:0b:40: 54:c2:4f:f4:79:ef:31:96:22:5b:9a:b4:fc:60:f6: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:92:0F:54:77:DE:BC:A3:D8:D3:57:1A:75:80:D2:FA:3E:95:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 64.40.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:1b:bc:ee:ca:35:89:7b:a5:a4:63:46:92:be:3a:7c:d9:b3: 46:33:bf:a7:b1:a9:6b:d9:a2:8a:49:20:1f:3b:30:4a:e6:b7: 7e:ef:c4:14:33:de:66:1e:d9:12:b1:af:90:3a:6e:f6:45:d9: 00:a6:55:fa:d3:93:ac:8b:a5:84:f5:ad:94:12:62:00:dc:b5: 77:ce:de:e2:2f:1a:be:55:d8:6e:b9:60:f6:f2:74:b6:cc:7b: b3:86:24:7c:f9:72:59:7e:e2:cd:d1:47:61:f6:b1:3a:30:60: 1a:1e:c2:ff:bf:09:51:93:fa:96:88:c2:f0:91:84:ff:e3:3a: 49:a2:af:9e:7d:93:23:87:a3:13:f5:b4:e5:79:f0:09:9a:80: 94:cf:f4:ae:06:5c:07:eb:1c:d2:8b:be:66:ef:db:1c:95:ba: 52:46:71:0a:b8:01:84:67:0a:07:3e:97:0a:30:bd:00:16:b2: a6:27:c6:d0:61:d4:34:2a:4b:32:cb:04:60:bc:77:7e:23:09: a2:bc:f3:a5:7e:20:ae:3a:71:d5:4a:10:f8:66:22:9b:28:9d: 6e:50:cb:5a:3d:7a:84:02:42:37:f7:8c:79:59:03:94:16:c4: 2d:88:0f:73:63:33:c5:ae:66:4c:26:16:9f:d5:b7:b9:d5:e0: 89:cd:9f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKw3FIJmGPKIDhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk M2NjM2ZiNjgtNzlhNS00NWMwLThiY2YtMzYzMGExOTEzZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9H0OBpdToo2TQTOveiMOh+rkgEMiGd1pcoe 9hmrnrNMdadCG27cZGkDZe85fLGjXLqqK2gibfD4wvDQxujkHFsTIn+57hkniFmC WkMZtKGfUlU+24ci1lADcWmHiYZACS4geHpZnJhLkUd2uWS+jDhSSEvwCndGrzoE KX5iC0IGwoKaRv2Rk4dmLbm5w2QkWTZ8F5tQzMg5cD5iS3SQJI4EfH3bfgcDtEKO OovxSOM4pV2jNQyKh33Zf1EzpMQpCfTBkOJm8TLE0b1OXW4Mc5cHJRXbjLvfZo7M baf+uFWblymk5rjxNcnQpQYAC0BUwk/0ee8xliJbmrT8YPYtXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1Nkg9Ud968o9jTVxp1gNL6PpV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvMTI1OTk4ZDEtNTY0MS0z YzFmLThhZjQtNjljYjI0MWNhZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN0bvO7KNYl7paRjRpK+OnzZs0Yzv6exqWvZoopJIB87MErmt37vxBQz 3mYe2RKxr5A6bvZF2QCmVfrTk6yLpYT1rZQSYgDctXfO3uIvGr5V2G65YPbydLbM e7OGJHz5cll+4s3RR2H2sTowYBoewv+/CVGT+paIwvCRhP/jOkmir559kyOHoxP1 tOV58AmagJTP9K4GXAfrHNKLvmbv2xyVulJGcQq4AYRnCgc+lwowvQAWsqYnxtBh 1DQqSzLLBGC8d34jCaK886V+IK46cdVKEPhmIpsonW5Qy1o9eoQCQjf3jHlZA5QW xC2ID3NjM8WuZkwmFp/Vt7nV4InNn1A= -----END CERTIFICATE-----Generated at Sun Jul 20 20:18:05 2025 by rpki-client