$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa File: 33e552c1-7aab-3972-924b-9a4b94e54a0b.roa (raw, json) Hash identifier: D5N3j6S0Dkk79nCFiTRTYVlOqnfzbEn2VqQWhOf5tcc= Subject key identifier: E4:DA:54:D6:50:34:04:36:E3:1D:B1:6E:06:80:21:87:95:3B:AB:E6 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A093AA2878D37859F0F0B0080 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 13768 IP address blocks: 64.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a2:87:8d:37:85:9f:0f:0b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=d533cd23-fa69-4228-aa45-b08feae98b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:66:9b:5f:06:dd:c2:6d:76:3e:d1:46:7b:3c: 01:3c:87:8b:6f:4c:bc:ce:03:8b:09:f1:ac:36:39: 0c:48:3b:87:1a:55:d3:91:55:6f:bf:24:02:6c:2b: 36:60:85:18:5c:c5:04:18:fc:70:cd:4a:2d:c3:62: 31:52:a6:dc:bd:50:ca:5c:99:5f:54:d4:f2:69:fb: e3:9f:e6:6f:ab:94:f1:b4:d5:cf:6e:b8:44:4f:66: 7b:8f:31:d2:09:d6:ed:4e:cd:c4:81:88:63:f4:d8: 1b:bf:f9:3c:15:83:c5:08:ba:96:2f:dd:35:aa:09: 17:66:04:52:d2:15:59:1e:45:be:aa:9c:c0:b3:57: 86:3f:13:66:0b:8c:2a:19:f5:d0:08:03:68:7b:9e: c3:02:3e:0a:49:52:ee:1a:3a:c9:0f:51:5c:63:40: b7:bc:b2:46:44:e7:80:ae:76:4d:d6:f9:a3:18:98: 44:38:18:32:52:7d:55:3e:f7:12:da:a7:89:ad:84: 69:bd:5e:ae:0f:4f:24:54:bf:8d:c7:b6:6f:8c:80: 20:a3:50:05:08:6c:31:bf:5e:4e:db:48:4f:e8:11: 21:38:3c:f0:8b:71:11:c3:85:0d:4d:8b:38:09:77: 1d:68:da:7c:10:a8:cf:1a:66:49:13:0a:7c:37:24: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:54:D6:50:34:04:36:E3:1D:B1:6E:06:80:21:87:95:3B:AB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:35:c8:46:af:2e:1d:62:fa:39:0c:56:25:e5:65:0b:1f:61: 7f:9e:ec:2c:c5:09:b7:d5:31:0c:68:29:00:f3:c1:8c:d9:ac: e6:57:a0:1b:f6:e5:26:4c:64:41:35:31:cc:2b:cf:ef:1d:04: 78:9b:53:31:c0:08:d9:c7:48:c6:23:d7:ea:85:0a:27:cf:69: 17:88:66:7e:13:58:2d:dc:ea:cb:32:39:43:e3:4d:39:0d:e2: c7:c2:51:df:06:ca:11:cf:db:d4:93:c1:c7:98:63:c8:43:8b: 98:3b:4e:61:9c:8f:a8:87:0f:a1:9d:42:7b:73:ec:34:e7:13: 46:eb:6a:cc:00:f0:8b:36:bc:30:f8:90:84:c0:67:28:76:94: 45:c1:14:80:ff:75:a5:d1:af:3f:e8:dc:22:6f:6d:da:72:e8: 52:65:b1:b7:1a:1c:df:4c:58:5d:68:5e:b4:91:cc:9f:76:e3: 3d:e1:6e:84:79:2d:b2:aa:bb:57:a0:b4:6f:b4:4e:f2:8e:f1: 8f:af:b1:cd:af:73:ac:5c:37:d6:d4:63:22:e9:b9:4f:ae:be: d4:43:73:2c:a2:83:64:69:48:58:78:33:ff:c0:73:94:88:d3: 2f:ea:53:fe:46:7e:fa:b2:f7:5d:5b:f9:f7:da:26:f6:7b:e5: 50:89:09:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqKHjTeFnw8LAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZDUzM2NkMjMtZmE2OS00MjI4LWFhNDUtYjA4ZmVhZTk4YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2abXwbdwm12PtFGezwBPIeLb0y8zgOLCfGs NjkMSDuHGlXTkVVvvyQCbCs2YIUYXMUEGPxwzUotw2IxUqbcvVDKXJlfVNTyafvj n+Zvq5TxtNXPbrhET2Z7jzHSCdbtTs3EgYhj9Ngbv/k8FYPFCLqWL901qgkXZgRS 0hVZHkW+qpzAs1eGPxNmC4wqGfXQCANoe57DAj4KSVLuGjrJD1FcY0C3vLJGROeA rnZN1vmjGJhEOBgyUn1VPvcS2qeJrYRpvV6uD08kVL+Nx7ZvjIAgo1AFCGwxv15O 20hP6BEhODzwi3ERw4UNTYs4CXcdaNp8EKjPGmZJEwp8NyRmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTaVNZQNAQ24x2xbgaAIYeVO6vmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNlNTUyYzEtN2FhYi0z OTcyLTkyNGItOWE0Yjk0ZTU0YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA41yEavLh1i+jkMViXlZQsfYX+e7CzFCbfVMQxoKQDzwYzZrOZXoBv2 5SZMZEE1Mcwrz+8dBHibUzHACNnHSMYj1+qFCifPaReIZn4TWC3c6ssyOUPjTTkN 4sfCUd8GyhHP29STwceYY8hDi5g7TmGcj6iHD6GdQntz7DTnE0braswA8Is2vDD4 kITAZyh2lEXBFID/daXRrz/o3CJvbdpy6FJlsbcaHN9MWF1oXrSRzJ924z3hboR5 LbKqu1egtG+0TvKO8Y+vsc2vc6xcN9bUYyLpuU+uvtRDcyyig2RpSFh4M//Ac5SI 0y/qU/5Gfvqy911b+ffaJvZ75VCJCd4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:10 2025 by rpki-client