$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa File: 296474ca-9a2b-35f1-a900-62276c4b824d.roa (raw, json) Hash identifier: gripuJ5cF5LVFHwod/09DXNQpRJ/reOi6UX7MgMnr04= Subject key identifier: 3C:47:77:A2:5B:31:2A:96:6A:B8:C9:CE:44:A5:82:5B:5F:07:C5:39 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F4328584A5FC5DC9FE180E044A334C140 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 64.207.222.0/24 maxlen: 24 64.207.223.0/24 maxlen: 24 67.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:dc:9f:e1:80:e0:44:a3:34:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=df313ecd-8a52-4950-992c-ec86913fbd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:1d:98:ce:31:4c:7d:a1:f8:b7:70:db:53: e5:61:86:14:cb:ca:69:6f:53:77:c6:21:a6:4b:ed: f9:fc:64:90:ab:b0:ca:65:8e:0e:47:d4:5d:8b:42: a9:f9:98:17:a1:ed:fa:2a:9e:57:e1:fc:e3:51:fb: 2d:f6:54:56:76:ad:3c:c2:96:91:50:4a:73:21:20: 1c:ad:21:c1:09:3f:8b:7e:41:77:fc:71:4a:98:43: 2e:7d:6f:1b:a1:ad:45:38:26:89:13:ee:9c:29:69: 3b:94:50:e3:3a:c8:67:cd:d5:bc:65:88:02:aa:39: 19:1d:a8:bc:33:a6:71:56:25:ff:9e:9c:3b:91:8e: 90:60:54:af:ac:c5:cd:3a:71:1f:f9:f9:cb:9d:87: 40:ae:f0:e0:84:5d:0d:6a:98:e8:84:30:54:b3:ba: 0a:c1:0c:25:a0:69:57:f3:3a:5b:ed:af:43:7c:dd: 3d:e3:22:a5:0b:eb:35:78:94:87:b9:38:a0:f5:96: ce:51:c9:1b:18:37:e6:a6:2a:a2:bf:c4:d5:68:12: cb:cf:f0:19:42:7b:6f:92:fe:ac:12:ba:20:ad:05: 86:0b:7e:b0:dd:cd:fa:14:a7:6a:7e:e8:97:e9:ed: 8f:1e:09:03:bb:df:b4:e2:4e:fe:2d:5a:d6:48:99: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:47:77:A2:5B:31:2A:96:6A:B8:C9:CE:44:A5:82:5B:5F:07:C5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:de:ad:2f:6b:28:98:99:7f:a0:6b:19:d8:c5:00:bb:a3:cb: ff:98:a2:70:07:cb:e3:93:7a:ef:f2:8e:a3:e8:71:85:5b:15: ff:59:e3:2f:b8:27:d7:f7:3b:16:ba:5d:c8:8d:af:3c:74:38: bf:0a:31:31:95:23:e5:c1:28:5d:d1:3a:90:e3:c2:70:ee:44: ed:0b:59:6e:78:10:72:0c:ec:9c:cc:81:93:63:c1:b4:19:b2: 8e:23:54:cc:90:2a:14:89:63:65:b4:3b:7b:b4:e9:51:5f:95: f8:08:0c:a0:53:85:68:0e:b2:64:e7:b2:38:34:94:2a:a5:3a: b2:14:19:f8:5a:ea:19:b5:93:21:49:b5:05:4b:5c:49:93:91: bf:28:56:b7:53:9a:24:67:8d:fa:34:2b:1e:17:ef:d3:bc:23: 89:98:48:89:e1:aa:79:9d:fb:4f:dd:1f:26:f2:79:d9:7c:6c: 70:45:e5:c0:a7:06:66:a7:1b:c9:1c:08:a2:a0:7c:7b:f9:4f: f1:50:64:59:5a:04:af:16:52:8f:de:db:77:98:62:b5:f4:44: 28:02:94:2c:d1:06:6d:c3:f0:96:6d:de:ba:27:7e:86:c7:86: 73:c1:23:4b:6d:4b:ea:b7:38:1d:30:ad:63:12:41:00:4d:30: 59:6f:86:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpfxdyf4YDgRKM0wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZGYzMTNlY2QtOGE1Mi00OTUwLTk5MmMtZWM4NjkxM2ZiZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv4dmM4xTH2h+Ldw21PlYYYUy8ppb1N3xiGm S+35/GSQq7DKZY4OR9Rdi0Kp+ZgXoe36Kp5X4fzjUfst9lRWdq08wpaRUEpzISAc rSHBCT+LfkF3/HFKmEMufW8boa1FOCaJE+6cKWk7lFDjOshnzdW8ZYgCqjkZHai8 M6ZxViX/npw7kY6QYFSvrMXNOnEf+fnLnYdArvDghF0NapjohDBUs7oKwQwloGlX 8zpb7a9DfN094yKlC+s1eJSHuTig9ZbOUckbGDfmpiqiv8TVaBLLz/AZQntvkv6s ErogrQWGC36w3c36FKdqfuiX6e2PHgkDu9+04k7+LVrWSJk6KQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDxHd6JbMSqWarjJzkSlgltfB8U5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvMjk2NDc0Y2EtOWEyYi0z NWYxLWE5MDAtNjIyNzZjNGI4MjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQM/eAwQA Q97+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACzerS9rKJiZf6BrGdjFALujy/+YonAHy+OTeu/yjqPocYVb Ff9Z4y+4J9f3Oxa6XciNrzx0OL8KMTGVI+XBKF3ROpDjwnDuRO0LWW54EHIM7JzM gZNjwbQZso4jVMyQKhSJY2W0O3u06VFflfgIDKBThWgOsmTnsjg0lCqlOrIUGfha 6hm1kyFJtQVLXEmTkb8oVrdTmiRnjfo0Kx4X79O8I4mYSInhqnmd+0/dHybyedl8 bHBF5cCnBmanG8kcCKKgfHv5T/FQZFlaBK8WUo/e23eYYrX0RCgClCzRBm3D8JZt 3ronfobHhnPBI0ttS+q3OB0wrWMSQQBNMFlvhiw= -----END CERTIFICATE-----Generated at Thu Jul 10 10:37:59 2025 by rpki-client