$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa File: c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa (raw, json) Hash identifier: fA1dhEzhvAcdsGdVnyySIEqep30FUlEjGfNycXzEwjo= Subject key identifier: 30:8D:AE:B1:77:70:5E:B6:62:49:81:A6:8A:29:57:9C:0A:4F:2B:3B Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5FC5E5AF908F807E68B6B180 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 54989 IP address blocks: 64.17.97.0/24 maxlen: 24 64.17.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e5:af:90:8f:80:7e:68:b6:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=b044f890-4bfd-4571-8846-32aacf6d5783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:6e:b3:39:fb:6e:9e:c2:58:e6:87:41:78: 3a:43:3e:28:6b:ae:06:06:56:e7:f0:57:8b:29:55: 9b:2b:36:91:d5:e1:68:81:3f:34:c3:ab:48:bf:87: ba:a1:03:21:d7:d2:a6:70:9b:2a:48:30:91:ca:32: 3d:90:92:9b:28:77:9d:dc:11:29:22:5b:9a:90:ce: 2a:4a:9c:09:1c:5b:25:b6:f4:92:53:3d:2b:44:5b: 13:fb:a8:8e:3f:3e:cb:77:8d:b2:ad:d9:c7:13:93: 2f:46:7b:0d:95:5d:59:39:75:a1:d4:65:34:44:4d: 05:b4:e0:4c:ae:c4:2b:56:bb:e0:08:55:31:67:73: 83:c7:ec:e8:9a:ba:eb:e2:09:11:32:5a:bb:88:47: 97:b5:55:77:f0:00:64:a0:89:e0:f0:30:f1:eb:56: 1f:73:36:e9:ad:e2:cb:02:2c:32:54:12:94:e0:98: 44:06:5e:68:84:94:aa:32:df:13:b5:cc:7c:ba:55: d5:2a:36:f3:0d:b2:bb:04:e3:9b:ac:eb:ce:fc:8d: 4f:ae:4c:a5:da:de:a1:0d:84:7d:67:50:5b:78:36: 41:27:e3:98:81:99:33:b8:31:5f:8f:6a:ce:59:67: 08:2c:e0:dc:d9:3d:29:fa:76:21:d0:4a:97:66:25: 22:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:AE:B1:77:70:5E:B6:62:49:81:A6:8A:29:57:9C:0A:4F:2B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.17.97.0/24 64.17.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:20:f3:33:cf:a7:8a:a7:90:98:12:d9:67:6f:09:82:3d:65: f0:b1:02:e6:21:1c:de:9a:72:14:72:f5:6f:c9:ef:03:8f:04: 91:35:9b:da:69:f9:8f:da:a4:67:93:c4:3d:79:f4:07:b2:09: b6:7b:9b:40:47:01:d3:5f:d7:73:05:d4:c8:ec:01:7d:c9:54: 74:de:e7:e3:44:88:1f:7f:7e:25:ad:0f:47:27:39:e5:21:61: 74:54:85:17:b4:c0:ee:01:b0:e1:32:8a:4e:47:36:60:f5:e5: ac:ef:23:f7:60:7c:84:85:85:5b:40:21:0d:c6:40:a7:29:e3: 4a:06:bb:42:e0:50:52:f9:65:03:e3:81:0b:f3:1f:bb:2f:ee: 31:86:4f:1e:09:d5:12:00:3f:5d:dd:b5:51:c2:1e:89:50:ed: 70:dc:ae:2c:ca:03:52:b3:c8:de:e7:20:f7:91:35:76:fb:40: eb:0d:f1:2b:82:07:41:13:c2:a7:6a:b5:a9:73:0d:f7:36:6a: 09:a6:93:cd:0e:9b:2d:6e:a5:0d:3e:07:78:a2:f6:8a:82:6e: 0f:09:52:99:ff:91:ff:c4:d4:6d:8b:eb:ee:b2:7e:5c:f2:61: 13:89:c4:99:aa:14:5c:82:e6:6f:f6:73:c2:81:96:83:a3:b0: 60:14:eb:09 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpfxeWvkI+Afmi2sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YjA0NGY4OTAtNGJmZC00NTcxLTg4NDYtMzJhYWNmNmQ1NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/9uszn7bp7CWOaHQXg6Qz4oa64GBlbn8FeL KVWbKzaR1eFogT80w6tIv4e6oQMh19KmcJsqSDCRyjI9kJKbKHed3BEpIluakM4q SpwJHFsltvSSUz0rRFsT+6iOPz7Ld42yrdnHE5MvRnsNlV1ZOXWh1GU0RE0FtOBM rsQrVrvgCFUxZ3ODx+zomrrr4gkRMlq7iEeXtVV38ABkoIng8DDx61YfczbpreLL AiwyVBKU4JhEBl5ohJSqMt8Ttcx8ulXVKjbzDbK7BOObrOvO/I1Prkyl2t6hDYR9 Z1BbeDZBJ+OYgZkzuDFfj2rOWWcILODc2T0p+nYh0EqXZiUiYQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDCNrrF3cF62YkmBpoopV5wKTys7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYzgxYjRlOWQtNmIyNS0z NTNmLWIyMWMtZjA3NThlM2EzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBFhAwQA QBF3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABIg8zPPp4qnkJgS2WdvCYI9ZfCxAuYhHN6achRy9W/J7wOP BJE1m9pp+Y/apGeTxD159AeyCbZ7m0BHAdNf13MF1MjsAX3JVHTe5+NEiB9/fiWt D0cnOeUhYXRUhRe0wO4BsOEyik5HNmD15azvI/dgfISFhVtAIQ3GQKcp40oGu0Lg UFL5ZQPjgQvzH7sv7jGGTx4J1RIAP13dtVHCHolQ7XDcrizKA1KzyN7nIPeRNXb7 QOsN8SuCB0ETwqdqtalzDfc2agmmk80Omy1upQ0+B3ii9oqCbg8JUpn/kf/E1G2L 6+6yflzyYROJxJmqFFyC5m/2c8KBloOjsGAU6wk= -----END CERTIFICATE-----Generated at Wed Jul 9 20:13:48 2025 by rpki-client