$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa File: 225cf2de-ddc9-3faa-8f31-758be401c844.roa (raw, json) Hash identifier: hyrZy9adZYPszKGZ9QIqAWGSZarSveKq8MgWtay5Y5k= Subject key identifier: E5:13:36:F4:4B:75:16:4D:55:B4:AD:97:35:25:19:61:F9:6D:14:BC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5FC5E5F008CCCB916FE12DC0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16384 IP address blocks: 64.25.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e5:f0:08:cc:cb:91:6f:e1:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=196506c6-c1be-42bd-8c04-5c8478d9a7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3d:72:c4:ed:e3:74:0a:e9:9e:3f:8b:af:b0: a0:79:a1:56:f1:a9:cb:e0:84:35:4b:26:f1:0b:6f: e2:e2:47:13:4c:da:1f:eb:d7:92:67:db:9f:94:b9: dd:b4:99:2d:de:bc:5c:cb:61:1d:cf:c8:28:9f:fa: 12:34:6f:84:a8:37:c0:9c:bb:ac:78:27:ee:32:90: 87:8e:d4:93:97:25:ba:85:d5:e3:2d:30:72:64:ae: eb:de:98:0f:e4:24:bd:bd:81:91:6d:81:fc:07:01: 61:50:c4:ec:2d:93:30:32:e9:82:41:0f:00:a2:62: a7:6e:d0:eb:a6:f5:67:5f:ed:25:e2:bc:a1:65:94: 6b:8c:35:66:56:ba:fd:b6:36:09:be:7d:39:38:f7: ba:9c:08:af:c4:48:60:66:d9:db:27:cc:ba:77:63: 66:f9:3a:72:eb:2d:8a:66:3a:82:e3:16:4a:05:25: 54:3f:20:85:90:da:93:99:9b:b3:c7:33:77:46:2c: 43:fa:76:27:29:bd:af:c2:87:ab:f2:02:6b:71:b6: 61:92:50:70:54:b1:9d:f6:7e:e5:c5:50:db:9e:dd: d2:31:4b:f8:36:6e:55:6d:ab:7f:88:3d:fc:8b:40: 24:99:f5:6c:6a:6b:f2:70:8f:54:fd:0f:8f:ba:cc: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:13:36:F4:4B:75:16:4D:55:B4:AD:97:35:25:19:61:F9:6D:14:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.25.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:30:82:f4:41:c4:29:05:f0:b9:d5:c1:83:45:80:54:77:fa: 89:c3:fc:2d:40:a5:16:3c:9c:f8:93:0d:51:bf:25:cd:45:79: b3:7e:54:d2:e9:67:2e:b9:92:ec:7b:b6:23:cc:92:0a:ea:f6: ed:9b:07:b0:2d:34:86:77:fc:5d:83:ae:43:cb:08:cd:7b:a4: 1a:d5:1a:f8:2c:1e:84:ba:46:1b:62:1f:46:6f:8f:5e:23:52: b1:bb:0a:27:35:ad:e9:9e:a3:78:66:15:7c:0a:9f:c3:c6:46: db:15:d6:78:f2:ba:d4:60:67:28:c6:fd:7a:34:4f:b0:73:16: b9:30:ac:ef:cc:dd:1d:8a:8d:1b:05:c6:4f:c6:7e:6e:72:70: 20:1f:6c:99:30:85:62:37:ac:f6:9b:39:76:95:c9:89:98:63: 24:73:cd:a1:ea:67:3f:bf:ff:c8:da:1b:41:43:67:52:51:9f: e5:30:53:1a:54:59:66:50:9e:45:dc:ad:dc:98:54:d5:e6:4a: cd:88:8b:4c:c5:0f:f3:65:19:61:ae:11:7e:d7:92:46:15:73: d6:7f:09:48:12:35:29:95:5f:9f:37:90:fa:58:e0:3f:38:b6: bb:4d:98:e8:75:d5:e1:c7:20:3b:a9:4d:b7:9d:02:08:31:19: bb:e5:f5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeXwCMzLkW/hLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MTk2NTA2YzYtYzFiZS00MmJkLThjMDQtNWM4NDc4ZDlhN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj1yxO3jdArpnj+Lr7CgeaFW8anL4IQ1Sybx C2/i4kcTTNof69eSZ9uflLndtJkt3rxcy2Edz8gon/oSNG+EqDfAnLuseCfuMpCH jtSTlyW6hdXjLTByZK7r3pgP5CS9vYGRbYH8BwFhUMTsLZMwMumCQQ8AomKnbtDr pvVnX+0l4ryhZZRrjDVmVrr9tjYJvn05OPe6nAivxEhgZtnbJ8y6d2Nm+Tpy6y2K ZjqC4xZKBSVUPyCFkNqTmZuzxzN3RixD+nYnKb2vwoer8gJrcbZhklBwVLGd9n7l xVDbnt3SMUv4Nm5Vbat/iD38i0AkmfVsamvycI9U/Q+Pusy9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUTNvRLdRZNVbStlzUlGWH5bRS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjI1Y2YyZGUtZGRjOS0z ZmFhLThmMzEtNzU4YmU0MDFjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0wgvRBxCkF8LnVwYNFgFR3+onD/C1ApRY8nPiTDVG/Jc1FebN+VNLp Zy65kux7tiPMkgrq9u2bB7AtNIZ3/F2DrkPLCM17pBrVGvgsHoS6RhtiH0Zvj14j UrG7Cic1remeo3hmFXwKn8PGRtsV1njyutRgZyjG/Xo0T7BzFrkwrO/M3R2KjRsF xk/Gfm5ycCAfbJkwhWI3rPabOXaVyYmYYyRzzaHqZz+//8jaG0FDZ1JRn+UwUxpU WWZQnkXcrdyYVNXmSs2Ii0zFD/NlGWGuEX7XkkYVc9Z/CUgSNSmVX583kPpY4D84 trtNmOh11eHHIDupTbedAggxGbvl9Qs= -----END CERTIFICATE-----Generated at Wed Jul 9 21:45:22 2025 by rpki-client