$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa File: 67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa (raw, json) Hash identifier: Dj+W7v6sUS0DrKcoZ/8LGh88Na3DrNRX1j4UWcxPkDU= Subject key identifier: 09:AB:A4:9D:8B:C9:C3:65:CC:7A:13:B7:D2:39:91:D3:F8:9A:BA:5A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5FC5E5C1690479F493D357C0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 5738 IP address blocks: 64.17.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e5:c1:69:04:79:f4:93:d3:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=ddce2371-373c-4bd2-9625-e5f651efcdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:5a:9d:ed:ce:ca:a5:e8:da:f6:da:02:4a: de:41:9a:00:3e:f8:35:11:f9:d3:3b:af:fe:56:36: 70:b3:d5:bc:eb:d0:7d:a7:a3:5c:c6:e5:56:56:a6: 66:3b:1f:63:39:33:e2:19:00:51:d1:2d:a9:04:64: ee:29:61:50:22:ec:33:6b:88:1a:95:2b:8d:f6:74: 25:31:8b:ac:28:18:a3:b4:c3:40:ca:f3:88:1c:37: 19:ea:10:c5:64:93:9d:e6:82:de:db:1b:22:60:f5: f4:0d:97:cc:f8:20:09:25:8c:0f:10:1b:3d:c5:75: 67:ff:28:c6:5c:72:80:4d:b3:79:b5:65:92:ae:f9: 30:2e:4f:d2:df:3d:5e:34:f7:7d:df:40:19:da:b4: 49:e9:21:d6:2d:7a:50:ce:0f:74:aa:36:cb:96:0f: 00:20:95:62:a0:e8:67:c2:1d:6e:e8:5e:de:c2:d3: 9b:a6:d7:26:47:de:24:43:0b:63:11:fb:20:e4:42: 4c:7c:5e:33:c8:24:5e:63:47:a9:c0:e0:aa:c5:b8: 5b:13:35:5e:7d:8e:15:e2:67:c5:e9:a2:fc:13:cb: 60:a1:ce:7d:a3:55:88:53:41:39:9b:43:02:ea:87: 19:5a:5b:60:07:3d:89:75:bf:f2:52:cd:bd:a1:b3: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:A4:9D:8B:C9:C3:65:CC:7A:13:B7:D2:39:91:D3:F8:9A:BA:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.17.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6f:a3:a9:8a:02:54:d4:fa:4d:6a:30:c4:f8:37:54:f5:a0: ce:ca:b9:0f:2d:b3:ea:37:a0:68:2b:b6:85:78:8e:25:22:f6: 15:9f:3b:10:f0:b8:f6:fd:ac:4f:29:87:6a:4f:6f:c0:b9:0a: 15:b7:d3:da:0f:20:dd:a3:43:d7:6b:7e:9c:34:02:67:bf:5c: af:3b:c6:27:3f:d4:7d:1d:15:69:e4:21:32:df:9e:60:b6:ad: 39:2d:cc:89:b2:79:6e:89:69:0b:25:d6:46:e2:59:3a:33:46: 9e:11:f3:39:d4:10:73:b2:e5:8c:8e:f4:e6:5d:ed:78:3f:d6: c8:7f:e4:86:22:30:7b:9e:10:c5:9b:0f:37:01:f0:e0:48:74: 4d:c0:6e:04:95:9b:c2:74:e5:5b:45:72:07:37:43:30:9f:70: f2:8a:23:dd:a5:57:de:9c:4f:69:48:2e:4b:1a:8a:a4:cf:7d: eb:79:a4:b0:0c:48:e8:31:6f:c9:89:02:c8:23:1c:b7:09:ae: 73:c6:39:0e:c6:8a:2f:25:cd:0b:7a:b6:8f:6f:fb:47:e5:06: 16:b5:8e:9f:e1:0e:5e:21:06:3c:a5:29:31:ac:90:99:7f:f9: 27:6c:f5:9a:02:a0:3d:b0:87:f0:55:fb:bb:db:ec:99:91:68: 73:f7:4e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeXBaQR59JPTV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZGRjZTIzNzEtMzczYy00YmQyLTk2MjUtZTVmNjUxZWZjZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBRane3OyqXo2vbaAkreQZoAPvg1EfnTO6/+ VjZws9W869B9p6NcxuVWVqZmOx9jOTPiGQBR0S2pBGTuKWFQIuwza4galSuN9nQl MYusKBijtMNAyvOIHDcZ6hDFZJOd5oLe2xsiYPX0DZfM+CAJJYwPEBs9xXVn/yjG XHKATbN5tWWSrvkwLk/S3z1eNPd930AZ2rRJ6SHWLXpQzg90qjbLlg8AIJVioOhn wh1u6F7ewtObptcmR94kQwtjEfsg5EJMfF4zyCReY0epwOCqxbhbEzVefY4V4mfF 6aL8E8tgoc59o1WIU0E5m0MC6ocZWltgBz2Jdb/yUs29obO/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmrpJ2LycNlzHoTt9I5kdP4mrpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjdjMmRhZDgtZjYzZi0z ZmNiLWEzMGUtMzNjMWI4OTg1MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZvo6mKAlTU+k1qMMT4N1T1oM7KuQ8ts+o3oGgrtoV4jiUi9hWfOxDw uPb9rE8ph2pPb8C5ChW309oPIN2jQ9drfpw0Ame/XK87xic/1H0dFWnkITLfnmC2 rTktzImyeW6JaQsl1kbiWTozRp4R8znUEHOy5YyO9OZd7Xg/1sh/5IYiMHueEMWb DzcB8OBIdE3AbgSVm8J05VtFcgc3QzCfcPKKI92lV96cT2lILksaiqTPfet5pLAM SOgxb8mJAsgjHLcJrnPGOQ7Gii8lzQt6to9v+0flBha1jp/hDl4hBjylKTGskJl/ +Sds9ZoCoD2wh/BV+7vb7JmRaHP3Tgo= -----END CERTIFICATE-----Generated at Wed Jul 9 20:22:03 2025 by rpki-client