$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa File: 3735a2b4-9557-32d4-99da-5348757f8b91.roa (raw, json) Hash identifier: l1ykRQ3CNEpmMgTYvGRU2FIM3PMqYKK6nQoGpW6mlfk= Subject key identifier: 5A:BB:00:2C:DE:93:8A:41:21:99:8C:00:79:C7:AF:1A:A8:A4:79:D6 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849C20A144E36D10658F6236340 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 11164 IP address blocks: 64.57.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:14:4e:36:d1:06:58:f6:23:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=4f220a2f-ee89-4dc3-a81d-6040302b07be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:c7:89:0a:1b:a1:ac:78:6a:97:ef:08:a0: 3f:35:74:a6:ed:4f:2f:84:e1:84:fe:d4:7c:ef:bf: 9c:78:2e:b4:59:b3:33:58:f6:21:04:d8:0e:36:0f: 35:3f:5f:83:85:fb:4d:ea:99:28:a8:b8:15:72:f1: 8c:29:c9:c2:ab:1d:41:f9:2b:0f:0c:1b:4a:a8:02: 02:57:01:17:bd:e5:a3:37:3f:c9:6d:d4:9c:05:86: ca:45:c0:f6:0b:8d:6a:65:fc:3a:1f:55:09:be:47: 6c:21:76:c3:20:78:bb:a8:e3:2b:cf:81:19:b7:23: ea:70:52:71:fa:3e:c0:2e:54:df:2d:e2:8f:fe:ba: 0a:59:b3:d1:dc:d8:82:ab:6d:ca:7f:df:68:70:56: 90:d4:03:f5:4d:c9:b8:6c:5f:82:89:15:3e:c3:87: 91:2b:0c:50:45:a2:f3:2d:a6:0d:41:bb:1d:6a:1f: 15:32:12:f2:d0:93:44:41:d1:cc:5a:79:f5:64:0a: 71:a2:1b:af:d7:24:fb:a5:c1:07:42:89:dd:bd:df: 6a:70:13:a4:56:e7:d9:7f:ff:66:cd:a1:c5:b7:da: 68:77:ec:94:eb:b5:ec:bd:e7:07:cd:dc:d5:40:08: 90:2b:f9:d5:ae:18:aa:81:9d:82:1f:85:c2:36:10: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BB:00:2C:DE:93:8A:41:21:99:8C:00:79:C7:AF:1A:A8:A4:79:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 64.57.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5a:65:ca:a1:6c:e4:c5:5f:8e:8d:31:66:56:53:f0:49:9d: c7:02:9e:5d:7b:9c:55:08:50:a7:58:8d:04:84:3d:54:7a:d8: 22:12:19:aa:e7:17:a9:a9:da:ac:2a:ce:c3:66:48:14:e4:11: 73:8f:56:93:af:d7:a7:69:50:e4:45:3f:a3:4e:74:2d:3e:b8: ef:38:91:93:a7:84:62:fe:02:b1:29:b9:86:f3:87:71:03:20: 4a:9c:ab:7c:0d:e0:fb:30:d2:17:be:45:a4:2f:b7:a1:a0:eb: 07:9b:79:cb:3c:3b:6f:60:c7:ac:ef:ad:c0:a4:3f:67:d9:f9: d6:8b:02:10:65:73:c2:d6:c1:ea:3b:22:94:53:a7:1b:c6:7e: 99:4a:a3:8d:9b:05:16:b8:5b:5a:b4:21:87:1f:21:a0:a2:dc: 44:5f:33:cc:40:cf:43:ad:74:58:90:40:b0:22:ce:ae:00:de: 1a:48:f0:47:1d:93:4e:fa:69:8d:a7:77:54:e7:e3:06:3a:64: 2d:10:e8:1d:0c:01:cc:b2:a9:b0:7a:5a:3c:85:fd:29:b9:23: 53:0a:ee:e0:24:32:1d:ca:6b:29:2b:c0:3a:f3:33:0c:23:d3: 6a:7c:68:3c:bf:1f:42:48:37:15:0f:66:9d:8f:66:c6:80:ef: fd:d5:a3:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChRONtEGWPYjY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NGYyMjBhMmYtZWU4OS00ZGMzLWE4MWQtNjA0MDMwMmIwN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa3HiQoboax4apfvCKA/NXSm7U8vhOGE/tR8 77+ceC60WbMzWPYhBNgONg81P1+DhftN6pkoqLgVcvGMKcnCqx1B+SsPDBtKqAIC VwEXveWjNz/JbdScBYbKRcD2C41qZfw6H1UJvkdsIXbDIHi7qOMrz4EZtyPqcFJx +j7ALlTfLeKP/roKWbPR3NiCq23Kf99ocFaQ1AP1Tcm4bF+CiRU+w4eRKwxQRaLz LaYNQbsdah8VMhLy0JNEQdHMWnn1ZApxohuv1yT7pcEHQondvd9qcBOkVufZf/9m zaHFt9pod+yU67XsvecHzdzVQAiQK/nVrhiqgZ2CH4XCNhBmxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq7ACzek4pBIZmMAHnHrxqopHnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMzczNWEyYjQtOTU1Ny0z MmQ0LTk5ZGEtNTM0ODc1N2Y4YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJaZcqhbOTFX46NMWZWU/BJnccCnl17nFUIUKdYjQSEPVR62CISGarn F6mp2qwqzsNmSBTkEXOPVpOv16dpUORFP6NOdC0+uO84kZOnhGL+ArEpuYbzh3ED IEqcq3wN4Psw0he+RaQvt6Gg6webecs8O29gx6zvrcCkP2fZ+daLAhBlc8LWweo7 IpRTpxvGfplKo42bBRa4W1q0IYcfIaCi3ERfM8xAz0OtdFiQQLAizq4A3hpI8Ecd k076aY2nd1Tn4wY6ZC0Q6B0MAcyyqbB6WjyF/Sm5I1MK7uAkMh3KaykrwDrzMwwj 02p8aDy/H0JINxUPZp2PZsaA7/3Vo3Y= -----END CERTIFICATE-----Generated at Sun Jun 8 12:03:53 2025 by rpki-client