$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa File: 0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa (raw, json) Hash identifier: ufv71KaMmFW1+14FjYCFdqHpYSRSFG/hWwIGWEujjSM= Subject key identifier: 73:9E:DC:83:D2:27:D2:13:B7:6B:7C:9E:2C:C7:7E:1D:5A:4E:E4:7F Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5FC5E9B4763BC65146D02B00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 21547 IP address blocks: 64.140.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e9:b4:76:3b:c6:51:46:d0:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=af1e8ab3-398e-4750-b9c1-c8cff0f16b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:4c:58:54:e3:53:2d:45:12:b4:b4:c1:2a: a0:ac:56:ad:80:fc:99:d3:37:d8:9e:05:6f:c1:1b: cd:06:94:60:36:ac:8c:a4:0d:a8:35:b9:ba:d2:53: 50:cd:1a:92:b1:5b:86:75:4c:d1:16:c1:39:43:a9: 6b:6d:d3:0c:4d:87:61:a4:00:98:0d:3c:f5:06:5a: e9:57:f4:ce:74:47:77:df:12:9e:8c:b6:3b:f9:7f: fb:97:a0:22:dd:bd:c6:ab:e1:8c:dc:be:41:1e:97: b9:29:33:6b:b6:f6:c4:24:e6:14:13:be:a4:ef:eb: d4:fd:6c:45:aa:d5:80:e5:f1:5f:f3:2c:61:1c:ad: 4d:c2:2c:6c:27:75:64:f5:52:04:37:4d:91:c0:e5: 9f:09:3d:8f:f8:8d:ac:c7:9e:07:db:88:94:36:7e: c9:f1:c8:ce:fb:7e:5f:be:1d:6b:41:e6:38:0c:03: c8:84:54:67:d2:73:55:46:0c:12:c4:d4:18:16:15: e7:fb:56:69:d3:12:b8:e8:75:b3:2e:a9:a4:6f:37: ce:42:35:2d:f8:92:7a:fc:f1:c7:3d:de:01:19:3a: 0a:29:3c:64:6e:c9:5d:fe:cf:ae:66:2c:b3:f2:01: b6:e6:c0:ca:dd:20:1c:de:76:a0:e2:72:04:c1:f3: 59:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9E:DC:83:D2:27:D2:13:B7:6B:7C:9E:2C:C7:7E:1D:5A:4E:E4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.140.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bc:aa:83:cb:76:22:f4:b7:12:e2:67:16:30:de:9c:52:56: 93:cc:b0:58:a7:44:2a:47:09:f3:a5:14:b1:32:b2:8b:cb:a1: 59:f6:77:bd:e5:8a:cc:56:42:48:b5:1c:2c:6d:34:5c:df:10: 63:b6:bf:eb:e5:fa:29:b3:33:1b:17:d5:a0:fd:f5:c7:26:35: 39:3e:c7:35:cd:7a:11:04:8c:dc:54:97:09:0e:46:d7:3e:b0: ac:93:4a:ca:7f:a6:24:08:26:3a:d9:bd:a8:f4:2c:5b:bc:ba: cc:ac:32:6c:b9:cb:82:c8:f8:f1:2d:2c:1b:e2:4d:c9:2c:ec: 60:47:7e:93:0f:11:ec:c4:09:b1:02:6b:64:80:a0:e9:a5:18: e4:82:62:bd:ee:90:72:d6:65:4b:9b:5f:0c:13:85:2b:3b:34: 99:c4:a2:18:24:99:25:88:a3:0c:30:47:71:2d:e8:5f:b2:2d: ca:2e:12:d3:8e:0a:0d:b6:88:bc:ec:07:c9:21:4b:e7:c6:2a: 36:31:1f:b8:44:f1:e5:bc:0e:22:6d:17:58:8e:8d:22:a6:c4: e7:a9:af:0f:0a:d5:18:d5:8a:e8:4f:ab:b1:04:24:1a:2d:62: 9b:4f:ad:38:14:93:e7:90:90:44:17:9e:f5:56:68:67:7e:d2: 48:d2:59:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxem0djvGUUbQKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YWYxZThhYjMtMzk4ZS00NzUwLWI5YzEtYzhjZmYwZjE2YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35hMWFTjUy1FErS0wSqgrFatgPyZ0zfYngVv wRvNBpRgNqyMpA2oNbm60lNQzRqSsVuGdUzRFsE5Q6lrbdMMTYdhpACYDTz1Blrp V/TOdEd33xKejLY7+X/7l6Ai3b3Gq+GM3L5BHpe5KTNrtvbEJOYUE76k7+vU/WxF qtWA5fFf8yxhHK1NwixsJ3Vk9VIEN02RwOWfCT2P+I2sx54H24iUNn7J8cjO+35f vh1rQeY4DAPIhFRn0nNVRgwSxNQYFhXn+1Zp0xK46HWzLqmkbzfOQjUt+JJ6/PHH Pd4BGToKKTxkbsld/s+uZiyz8gG25sDK3SAc3nag4nIEwfNZSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOe3IPSJ9ITt2t8nizHfh1aTuR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRiZDAzYTAtNWVkYS0z YmY1LWI5MDItYmQyZmEzZTMxNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQIzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa8qoPLdiL0txLiZxYw3pxSVpPMsFinRCpHCfOlFLEysovLoVn2d73l isxWQki1HCxtNFzfEGO2v+vl+imzMxsX1aD99ccmNTk+xzXNehEEjNxUlwkORtc+ sKyTSsp/piQIJjrZvaj0LFu8usysMmy5y4LI+PEtLBviTcks7GBHfpMPEezECbEC a2SAoOmlGOSCYr3ukHLWZUubXwwThSs7NJnEohgkmSWIowwwR3Et6F+yLcouEtOO Cg22iLzsB8khS+fGKjYxH7hE8eW8DiJtF1iOjSKmxOeprw8K1RjViuhPq7EEJBot YptPrTgUk+eQkEQXnvVWaGd+0kjSWTw= -----END CERTIFICATE-----Generated at Wed Jul 9 20:39:36 2025 by rpki-client