$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa File: 376f1606-d35e-3cb6-b663-26b1e90c408b.roa (raw, json) Hash identifier: Tc29io8gwg9crqkKejv7ZGr49jA6fm9JG17i8vw+zCU= Subject key identifier: E6:3D:0D:52:2C:40:D5:B9:EB:4E:E0:F1:DE:12:BB:E9:11:5F:99:92 Certificate issuer: /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Certificate serial: 010D0C9F4328584A74B5E167CB812638275D6180 Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 55159 IP address blocks: 64.89.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:e1:67:cb:81:26:38:27:5d:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=8cd8aa3d-a253-405c-a421-81df61c5f675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:b5:3f:5f:b0:ee:f2:0b:8b:c4:bf:4c:8e: e3:27:02:6f:65:6c:95:17:e5:72:aa:43:5c:e7:d5: ae:83:c4:92:41:ff:fe:2b:b2:73:aa:d2:3e:1b:2c: e6:7d:53:68:fd:82:b3:36:51:09:e9:27:66:c2:72: a8:32:38:18:b4:df:8b:8d:f5:46:f1:fe:56:d2:44: e2:6d:96:0d:db:a9:91:f3:b5:d3:2f:79:82:ba:fa: de:11:54:7e:20:72:8f:f8:0b:1d:7b:eb:b1:35:2b: fa:73:89:24:1b:c3:de:fb:5a:af:09:17:5f:df:2c: 2c:9b:4c:73:a3:59:d1:e5:c1:ee:80:5f:a7:00:70: 48:6a:9b:6e:4e:27:46:73:90:09:fb:fe:b2:14:bd: ff:59:05:f6:47:9d:ff:8b:09:c4:7b:d8:73:56:5a: 74:b5:5f:d6:c4:4e:68:6b:78:d4:5e:ff:eb:a3:ee: ef:f8:32:c9:2f:f4:49:72:69:f0:9a:ca:88:b2:a0: ec:08:6b:3c:d4:95:94:90:55:a2:aa:74:2a:29:64: 1d:9a:3f:8a:f4:f7:ae:dc:40:eb:7f:5d:80:55:c6: d6:73:0b:9b:80:ba:5e:72:1f:2d:af:90:be:e7:fa: 6e:07:a6:ff:c9:f4:16:7b:03:cb:39:06:01:48:9d: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3D:0D:52:2C:40:D5:B9:EB:4E:E0:F1:DE:12:BB:E9:11:5F:99:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl X509v3 Authority Key Identifier: keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer sbgp-ipAddrBlock: critical IPv4: 64.89.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7c:91:56:61:b4:d9:5d:d8:ac:0b:bb:86:cd:c2:92:8a:fb: e9:10:c7:f8:0a:82:b6:d5:e9:64:58:f0:6c:a8:aa:21:4c:73: b1:ef:ea:3d:44:64:b6:3c:58:cd:f1:f2:8c:e7:7f:64:b4:05: 09:67:35:dd:cb:d5:74:08:98:bb:66:03:95:15:4d:59:f1:96: 61:0b:43:19:e8:50:d0:eb:98:a7:30:64:15:02:e6:2b:3d:a2: 25:10:54:22:a4:e2:82:d7:b2:11:7f:90:0c:68:0e:6d:f6:8d: 15:63:c0:cf:25:65:17:26:e1:93:e4:f1:8e:8c:ac:54:f1:3c: bb:a0:bc:6d:0e:a4:05:95:17:ba:5c:f6:c9:52:74:a8:90:ab: c9:28:c8:3b:2a:44:9a:8c:ab:f5:a8:16:e3:d5:7c:48:5f:65: b4:78:ed:35:3f:e7:5b:09:bb:79:49:72:c1:9c:43:ea:dc:db: 54:dd:0a:bf:d8:eb:34:00:64:06:4c:07:5a:be:b2:31:a0:68: 1b:64:51:da:db:83:cc:cf:42:77:c3:b5:3c:4b:f6:e6:51:f0: 40:08:c0:e8:f1:0e:38:16:f1:3c:a3:20:91:99:1d:0b:85:20: 64:df:25:8f:f5:2a:dc:46:2c:86:d8:f6:58:53:a2:69:f9:5d: af:e6:19:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0teFny4EmOCddYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE3MzNmZGEtYjQwNS00ZWIxLWFkYmUtODExZThmN2Vh Y2Q0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk OGNkOGFhM2QtYTI1My00MDVjLWE0MjEtODFkZjYxYzVmNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD+1P1+w7vILi8S/TI7jJwJvZWyVF+VyqkNc 59Wug8SSQf/+K7JzqtI+GyzmfVNo/YKzNlEJ6SdmwnKoMjgYtN+LjfVG8f5W0kTi bZYN26mR87XTL3mCuvreEVR+IHKP+Asde+uxNSv6c4kkG8Pe+1qvCRdf3ywsm0xz o1nR5cHugF+nAHBIaptuTidGc5AJ+/6yFL3/WQX2R53/iwnEe9hzVlp0tV/WxE5o a3jUXv/ro+7v+DLJL/RJcmnwmsqIsqDsCGs81JWUkFWiqnQqKWQdmj+K9Peu3EDr f12AVcbWcwubgLpech8tr5C+5/puB6b/yfQWewPLOQYBSJ1b2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY9DVIsQNW5607g8d4Su+kRX5mSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYTcz M2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFlOGY3ZWFjZDQvMzc2ZjE2MDYtZDM1ZS0z Y2I2LWI2NjMtMjZiMWU5MGM0MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGE3MzNmZGEtYjQwNS00ZWIxLWFk YmUtODExZThmN2VhY2Q0L2RhNzMzZmRhLWI0MDUtNGViMS1hZGJlLTgxMWU4Zjdl YWNkNC5jcmwwHwYDVR0jBBgwFoAUz5q/BMhCjz9Sqg1Q6Md70nVG5TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYTczM2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFl OGY3ZWFjZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR8kVZhtNld2KwLu4bNwpKK++kQx/gKgrbV6WRY8GyoqiFMc7Hv6j1E ZLY8WM3x8oznf2S0BQlnNd3L1XQImLtmA5UVTVnxlmELQxnoUNDrmKcwZBUC5is9 oiUQVCKk4oLXshF/kAxoDm32jRVjwM8lZRcm4ZPk8Y6MrFTxPLugvG0OpAWVF7pc 9slSdKiQq8koyDsqRJqMq/WoFuPVfEhfZbR47TU/51sJu3lJcsGcQ+rc21TdCr/Y 6zQAZAZMB1q+sjGgaBtkUdrbg8zPQnfDtTxL9uZR8EAIwOjxDjgW8TyjIJGZHQuF IGTfJY/1KtxGLIbY9lhTomn5Xa/mGXE= -----END CERTIFICATE-----Generated at Wed Jul 9 15:02:01 2025 by rpki-client