$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa File: 507729c2-e423-364b-9ad4-8254769227ae.roa (raw, json) Hash identifier: tWqAaLeJCGJjh4ZajyBlj2b8ZEJuFfO+xUR6h3eEzFE= Subject key identifier: 44:00:9F:71:92:25:AD:6F:06:AC:EA:DB:11:93:2D:DD:C7:22:90:78 Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F4328584A3480204182C685945268DE80 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 54004 IP address blocks: 64.84.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:20:41:82:c6:85:94:52:68:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=99ef9e3c-44c6-4ac9-be2b-0d1ab33c1e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:dc:1d:39:5f:e3:b5:ab:6d:9f:74:68:1b: be:20:a1:a4:3e:a7:8e:f2:dc:15:e3:23:23:64:78: 51:e1:be:d2:6f:59:e9:80:b7:53:d6:e5:66:e4:0f: 43:d2:ba:59:ad:42:7f:f3:08:c0:ad:51:db:09:20: 38:a6:6f:58:7d:21:e4:a8:95:f1:df:c0:98:bd:74: b9:e7:c1:58:4a:a5:e0:7d:58:84:34:be:00:c7:99: 40:af:97:92:4f:32:2a:ff:16:e5:2a:3c:25:17:3c: 7b:6e:91:34:0f:37:39:33:c7:c6:c8:fb:79:f6:03: 68:79:90:58:66:1e:dd:14:58:24:a5:9c:e3:a0:6f: f2:2a:ae:5f:a4:64:77:ec:48:2f:19:23:3a:94:02: 0f:04:59:b2:c4:d2:52:d1:39:e2:2c:1e:88:79:99: e3:f8:d3:71:bb:63:5d:ee:2c:ec:03:ba:10:4e:7d: 41:8a:97:fb:fd:a2:b7:35:a3:44:d9:0b:f7:39:48: 79:07:a6:91:b2:8a:1d:77:69:bf:d1:d1:50:14:27: 22:c1:1c:5c:9a:57:4a:84:e6:fa:31:fb:4f:6b:8f: 59:9d:d9:38:1a:05:ac:bc:06:1f:ba:0c:50:12:3c: 7a:91:c4:3e:d3:3d:e1:f7:d8:b6:4a:9a:a5:dc:56: c1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:00:9F:71:92:25:AD:6F:06:AC:EA:DB:11:93:2D:DD:C7:22:90:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:59:8f:bc:f9:0a:38:d0:8f:58:07:58:ef:af:91:5b:53:fd: cb:bf:9f:0c:5b:04:43:5b:93:16:88:4f:4d:2d:41:66:75:80: c0:62:04:d7:03:ca:5a:3d:3e:98:37:83:38:52:e9:f5:f4:55: 09:c2:9c:c3:ec:47:44:ee:73:25:dc:7c:8e:8a:3c:b4:7e:06: 81:4d:73:24:6e:cb:d0:60:7c:38:48:13:c8:6f:c2:44:ec:9a: ee:79:65:20:66:de:20:29:b7:60:a6:bf:f9:47:e6:48:0a:10: f5:52:c1:fa:8d:6e:2d:5c:41:76:73:f0:43:eb:7f:b1:39:77: 8b:26:01:4c:33:7c:23:72:40:2e:70:d5:db:ad:37:a4:86:8b: ab:54:a7:22:87:fc:7f:74:17:64:10:f7:88:c7:4a:29:a2:1f: f5:7c:4c:6f:69:d0:f8:d4:2b:41:8f:f0:b6:88:85:da:09:53: f5:4f:73:ef:46:eb:f7:81:5f:89:7e:6a:c4:ac:a6:87:89:cf: d6:ef:dc:db:7a:bc:8b:bb:f2:d4:ac:11:1b:26:4f:8c:a8:3b: a4:b5:9f:d8:34:6e:f9:cc:21:7c:ce:e5:86:59:52:47:79:2c: f9:b3:b5:f0:e5:7d:5b:07:81:cb:12:88:1c:f8:10:29:ea:9d: 43:32:a4:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gCBBgsaFlFJo3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk OTllZjllM2MtNDRjNi00YWM5LWJlMmItMGQxYWIzM2MxZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1bcHTlf47WrbZ90aBu+IKGkPqeO8twV4yMj ZHhR4b7Sb1npgLdT1uVm5A9D0rpZrUJ/8wjArVHbCSA4pm9YfSHkqJXx38CYvXS5 58FYSqXgfViENL4Ax5lAr5eSTzIq/xblKjwlFzx7bpE0Dzc5M8fGyPt59gNoeZBY Zh7dFFgkpZzjoG/yKq5fpGR37EgvGSM6lAIPBFmyxNJS0TniLB6IeZnj+NNxu2Nd 7izsA7oQTn1Bipf7/aK3NaNE2Qv3OUh5B6aRsoodd2m/0dFQFCciwRxcmldKhOb6 MftPa49Zndk4GgWsvAYfugxQEjx6kcQ+0z3h99i2Spql3FbBywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQAn3GSJa1vBqzq2xGTLd3HIpB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvNTA3NzI5YzItZTQyMy0z NjRiLTlhZDQtODI1NDc2OTIyN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdZj7z5CjjQj1gHWO+vkVtT/cu/nwxbBENbkxaIT00tQWZ1gMBiBNcD ylo9Ppg3gzhS6fX0VQnCnMPsR0TucyXcfI6KPLR+BoFNcyRuy9BgfDhIE8hvwkTs mu55ZSBm3iApt2Cmv/lH5kgKEPVSwfqNbi1cQXZz8EPrf7E5d4smAUwzfCNyQC5w 1dutN6SGi6tUpyKH/H90F2QQ94jHSimiH/V8TG9p0PjUK0GP8LaIhdoJU/VPc+9G 6/eBX4l+asSspoeJz9bv3Nt6vIu78tSsERsmT4yoO6S1n9g0bvnMIXzO5YZZUkd5 LPmztfDlfVsHgcsSiBz4ECnqnUMypOs= -----END CERTIFICATE-----Generated at Tue Jul 1 10:41:25 2025 by rpki-client