$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa File: 8484361b-712c-3a89-ad3e-849ce795eb08.roa (raw, json) Hash identifier: dBgNQIoCc3jw6ov/myxsrtCjCsZcmpEkgtO5UuebZss= Subject key identifier: C0:60:DF:42:06:35:16:29:BD:58:C6:19:06:84:F0:C2:70:00:68:8C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5FC5E5DF395F20A157087A90 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 12055 IP address blocks: 64.25.213.0/24 maxlen: 24 64.25.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e5:df:39:5f:20:a1:57:08:7a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=823c1261-af31-4395-b8f0-aea7b4bb3eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:14:17:29:c1:79:09:93:1d:6b:56:d5:32: 54:e4:da:b7:3f:a2:e4:bf:a8:a9:8c:d2:6a:06:56: 31:6c:c5:e5:48:cf:a2:62:22:57:b9:b8:2e:87:c3: 3b:00:96:e5:dd:ea:f2:cc:db:20:10:70:f9:8b:39: 97:c2:ff:c7:0a:19:c1:e4:06:e7:30:85:c7:19:c7: 38:00:24:a3:ff:56:96:29:90:19:7e:96:de:67:a8: 72:6d:6f:e9:08:96:6c:79:d3:3e:47:0c:46:32:7a: bc:dd:88:6c:f9:5c:99:04:d4:13:6b:9d:a0:aa:54: d2:7d:66:39:48:0e:e8:f0:8b:55:b2:72:e4:40:3e: 32:ed:62:66:84:cb:0c:e7:f5:81:5d:2d:c5:88:f0: 65:8d:e7:90:04:22:e6:aa:ca:25:10:64:b8:85:45: 41:25:95:46:17:26:ff:7a:dd:5e:0d:35:68:e3:cd: df:bd:c5:aa:d4:dd:30:f9:b6:5a:24:b5:53:1a:44: ba:c9:9b:e0:50:2e:59:b7:4f:a7:72:09:cf:ac:30: 00:80:b7:19:df:1c:d7:df:00:7c:d0:8a:48:e9:17: a4:f0:82:ca:ec:07:2c:b9:c3:8a:d6:06:fd:b7:39: 1a:c5:7b:23:15:48:6f:40:b7:db:c9:b7:7e:4e:a3: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:60:DF:42:06:35:16:29:BD:58:C6:19:06:84:F0:C2:70:00:68:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.25.213.0-64.25.214.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0d:e7:68:fb:49:68:7d:1f:49:3f:4b:10:d7:30:5c:2f:7a: b3:b2:96:6f:9e:d2:43:85:c1:46:dc:49:58:bf:ce:e0:46:e2: a1:eb:a4:f9:9b:2f:41:85:27:12:7f:ca:81:64:7b:91:bb:dc: 43:c5:0a:4c:e4:c3:51:f3:aa:5a:08:0b:4c:45:f1:f5:04:92: cc:ec:31:ad:48:2f:32:65:2b:74:04:ad:2e:0b:a2:85:e3:a6: 34:f8:2a:e3:86:f1:a6:28:b6:18:c5:8a:d9:6c:32:46:a8:c8: 15:01:bf:1c:3d:52:74:64:4c:1c:d6:65:0b:42:8a:70:bf:48: 83:db:e4:78:22:9a:c4:39:06:2f:5d:a1:54:eb:6a:fe:a8:c5: e1:a5:58:b4:21:5d:9f:d0:c8:d8:1a:08:c5:53:c7:03:8d:a5: 38:ce:a1:19:ff:40:e5:62:42:16:95:4f:0c:e0:b4:6b:11:85: a3:af:1b:49:1a:5a:f4:6f:cd:00:0b:6d:54:e6:61:a0:e5:ce: b8:11:10:57:23:f3:bf:ca:27:42:63:7a:f5:56:c9:64:a4:e1: 2e:c4:d7:2c:9e:ca:18:82:e4:45:28:65:13:da:a0:7c:a6:07: 8c:96:b0:fc:3b:91:0a:97:01:9e:ec:f7:7b:51:4b:62:5f:33: 70:65:25:e8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEpfxeXfOV8goVcIepAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ODIzYzEyNjEtYWYzMS00Mzk1LWI4ZjAtYWVhN2I0YmIzZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhwUFynBeQmTHWtW1TJU5Nq3P6Lkv6ipjNJq BlYxbMXlSM+iYiJXubguh8M7AJbl3eryzNsgEHD5izmXwv/HChnB5AbnMIXHGcc4 ACSj/1aWKZAZfpbeZ6hybW/pCJZsedM+RwxGMnq83Yhs+VyZBNQTa52gqlTSfWY5 SA7o8ItVsnLkQD4y7WJmhMsM5/WBXS3FiPBljeeQBCLmqsolEGS4hUVBJZVGFyb/ et1eDTVo483fvcWq1N0w+bZaJLVTGkS6yZvgUC5Zt0+ncgnPrDAAgLcZ3xzX3wB8 0IpI6Rek8ILK7AcsucOK1gb9tzkaxXsjFUhvQLfbybd+TqMybwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMBg30IGNRYpvVjGGQaE8MJwAGiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvODQ4NDM2MWItNzEyYy0z YTg5LWFkM2UtODQ5Y2U3OTVlYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAGdUD BABAGdYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPg3naPtJaH0fST9LENcwXC96s7KWb57SQ4XBRtxJWL/O 4Ebioeuk+ZsvQYUnEn/KgWR7kbvcQ8UKTOTDUfOqWggLTEXx9QSSzOwxrUgvMmUr dAStLguiheOmNPgq44bxpii2GMWK2WwyRqjIFQG/HD1SdGRMHNZlC0KKcL9Ig9vk eCKaxDkGL12hVOtq/qjF4aVYtCFdn9DI2BoIxVPHA42lOM6hGf9A5WJCFpVPDOC0 axGFo68bSRpa9G/NAAttVOZhoOXOuBEQVyPzv8onQmN69VbJZKThLsTXLJ7KGILk RShlE9qgfKYHjJaw/DuRCpcBnuz3e1FLYl8zcGUl6A== -----END CERTIFICATE-----Generated at Wed Jul 9 20:41:49 2025 by rpki-client