$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa File: bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa (raw, json) Hash identifier: 8VsfzaQRQFxTzQjbK7QeB6ta3/9w+08gtjEP3nLArF4= Subject key identifier: 8B:1F:48:60:98:DB:CA:8E:BC:6A:55:32:E1:55:46:43:67:3B:94:7F Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F4328584A11E431A4CA772368EDB63200 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa Signing time: Tue 03 Jun 2025 15:29:17 +0000 ROA not before: Tue 03 Jun 2025 15:29:17 +0000 ROA not after: Mon 01 Sep 2025 15:29:17 +0000 asID: 2711 IP address blocks: 64.84.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:e4:31:a4:ca:77:23:68:ed:b6:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Jun 3 15:29:17 2025 GMT Not After : Sep 1 15:29:17 2025 GMT Subject: CN=eac0a9e7-8065-45b0-89ac-f14f2ca3d07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:93:60:ab:c7:dc:f9:ed:13:e1:05:ec:f4: ee:8f:e1:3c:96:ad:94:a0:e9:3b:87:e8:49:4b:69: 8a:91:b6:a9:dd:c1:33:e1:a0:7f:6e:c1:79:f9:8e: c8:e6:f4:49:3c:9d:41:1b:f7:50:f2:8e:bd:0d:ae: 83:0d:f4:8c:2a:24:c4:d7:6f:32:df:0c:87:79:b5: c4:67:a3:49:1b:9b:12:86:5a:71:b4:77:d4:1c:ff: 82:ca:69:3e:84:61:82:f7:3b:f6:ab:d6:63:dd:1c: eb:b3:16:9a:6e:18:d3:24:d4:08:28:e0:f8:1d:15: 71:92:f4:95:84:72:d9:7e:af:63:cd:3a:98:a3:39: 2e:7d:f2:47:25:96:f5:4e:26:ca:e6:e9:51:8e:d6: 80:61:d5:58:8c:53:78:ae:c9:90:8a:1b:ec:c4:69: bf:5a:49:6a:a5:f4:ac:3e:49:69:e0:13:03:4a:db: b5:58:6d:4f:35:bb:b4:f5:77:97:b0:10:5a:fe:9a: 16:b7:f1:55:05:9e:ef:ab:46:bf:29:40:4f:1b:04: 9b:a3:ee:0d:bc:18:e4:ff:2d:23:00:a6:f7:7e:37: c9:fb:04:61:6e:07:09:73:92:82:d6:29:27:12:23: d0:e7:3f:5f:53:ae:45:2b:60:f0:eb:22:77:aa:36: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1F:48:60:98:DB:CA:8E:BC:6A:55:32:E1:55:46:43:67:3B:94:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:31:bd:24:9e:12:66:a9:c3:94:6e:5a:45:eb:a4:ef:ad:ab: 78:0f:ff:0b:f9:76:70:57:16:10:75:6d:f9:4c:34:a6:57:e9: d1:f4:d6:95:6a:ff:d1:1b:fd:d8:ba:68:3a:1e:6a:03:93:84: f7:4b:25:8a:93:e6:1c:b1:e3:d1:f4:5c:67:f6:05:90:0f:26: 4d:6c:10:90:25:fa:d7:87:c3:47:5f:dd:5c:73:21:08:84:86: 20:3c:16:e2:c7:f0:64:c1:d6:55:cd:60:72:99:69:0f:79:ea: 5b:bc:2a:0d:11:e6:ff:42:b1:cd:e2:61:a8:75:c3:fe:fb:58: 90:f9:67:bd:b4:a6:5c:78:16:97:30:53:65:4e:39:dd:fc:ad: 17:21:16:a6:4f:ea:d1:d4:30:ee:b8:e0:5f:13:69:b1:b4:ae: f2:ee:38:c0:2b:a9:93:b0:4a:cf:fa:38:f1:d0:4a:92:68:da: b5:71:c7:fa:7d:ea:da:53:a7:47:fa:b6:9a:d4:de:6f:bd:14: 98:fd:21:28:a7:87:16:c9:f6:e9:94:75:26:9b:96:b3:84:87: d7:26:d2:3e:75:9d:b8:ed:50:07:54:ec:2a:37:36:b5:6f:c9: bd:c0:af:4f:99:07:5b:01:23:90:9e:4c:85:f5:b2:be:dc:f3: bd:92:0a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoR5DGkyncjaO22MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI1MDYwMzE1MjkxN1oXDTI1MDkwMTE1MjkxN1owLzEtMCsGA1UEAxMk ZWFjMGE5ZTctODA2NS00NWIwLTg5YWMtZjE0ZjJjYTNkMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfmTYKvH3PntE+EF7PTuj+E8lq2UoOk7h+hJ S2mKkbap3cEz4aB/bsF5+Y7I5vRJPJ1BG/dQ8o69Da6DDfSMKiTE128y3wyHebXE Z6NJG5sShlpxtHfUHP+Cymk+hGGC9zv2q9Zj3RzrsxaabhjTJNQIKOD4HRVxkvSV hHLZfq9jzTqYozkuffJHJZb1TibK5ulRjtaAYdVYjFN4rsmQihvsxGm/WklqpfSs Pklp4BMDStu1WG1PNbu09XeXsBBa/poWt/FVBZ7vq0a/KUBPGwSbo+4NvBjk/y0j AKb3fjfJ+wRhbgcJc5KC1iknEiPQ5z9fU65FK2Dw6yJ3qjZd2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsfSGCY28qOvGpVMuFVRkNnO5R/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvYmY0N2EwYTAtMjg3YS0z M2U4LWJkZjUtZTJmNjMyNDdhMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMxvSSeEmapw5RuWkXrpO+tq3gP/wv5dnBXFhB1bflMNKZX6dH01pVq /9Eb/di6aDoeagOThPdLJYqT5hyx49H0XGf2BZAPJk1sEJAl+teHw0df3VxzIQiE hiA8FuLH8GTB1lXNYHKZaQ956lu8Kg0R5v9Csc3iYah1w/77WJD5Z720plx4Fpcw U2VOOd38rRchFqZP6tHUMO644F8TabG0rvLuOMArqZOwSs/6OPHQSpJo2rVxx/p9 6tpTp0f6tprU3m+9FJj9ISinhxbJ9umUdSablrOEh9cm0j51nbjtUAdU7Co3NrVv yb3Ar0+ZB1sBI5CeTIX1sr7c872SCv0= -----END CERTIFICATE-----Generated at Sun Jun 8 07:35:28 2025 by rpki-client