$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/8a03e8d4-831e-366d-a62e-47143f16085b.roa File: 8a03e8d4-831e-366d-a62e-47143f16085b.roa (raw, json) Hash identifier: yJtzuvNGkYEglZmqJpcOP6qURkJhJ6mPsf2IeCD8GyQ= Subject key identifier: 5B:7E:76:E5:45:64:91:10:28:0A:69:13:85:EC:7F:C4:79:1C:65:DA Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F43285849E22526F9D6B48F3E57ED8520 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/8a03e8d4-831e-366d-a62e-47143f16085b.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 22302 IP address blocks: 64.246.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:26:f9:d6:b4:8f:3e:57:ed:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=e219dd97-475a-4924-b69c-4310ea95d203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:2b:a0:59:49:ed:b9:c9:89:86:0e:25:85: aa:9c:57:43:08:74:cb:25:28:ed:bc:3f:b0:34:05: 24:72:1d:e9:2e:45:02:43:ad:89:aa:ef:45:16:5f: b9:02:a9:21:4f:f5:39:28:6b:03:66:a3:2a:72:12: d1:9d:98:eb:ea:d9:fa:4b:0e:77:97:f3:de:4e:3d: 76:95:d3:71:f6:80:9d:06:a0:23:f9:26:4f:65:4b: b9:9e:94:ce:0d:de:4d:e6:6e:cb:ee:ce:96:47:11: 93:df:b7:30:31:51:19:4d:60:52:05:b3:67:e7:1f: cc:08:69:75:72:de:65:28:29:9f:81:bb:36:8b:f7: 84:9b:48:46:3b:52:18:49:b0:dd:c7:e0:63:44:8b: 2d:49:02:1c:82:66:81:e7:14:cf:03:5c:05:53:3a: 42:d8:78:80:b8:e8:4c:62:db:23:d6:38:34:70:9d: 23:55:e4:59:d3:08:9b:48:9e:41:7b:5c:e7:49:ee: 35:90:7b:be:9e:4b:68:14:64:8d:91:f4:e4:cd:dd: 19:18:07:d4:a1:b3:90:d4:b7:57:c8:16:2a:e5:30: 22:68:74:4a:61:14:38:35:8d:a0:45:6d:b4:fe:09: 0b:9e:1f:c4:33:4d:6e:e9:6c:c2:45:51:33:0a:ac: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:76:E5:45:64:91:10:28:0A:69:13:85:EC:7F:C4:79:1C:65:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/8a03e8d4-831e-366d-a62e-47143f16085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 64.246.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ad:dd:ad:24:e4:19:6b:49:dc:ee:c8:17:72:bc:0e:e7:c2: 67:90:e2:8e:ab:98:18:d6:4e:06:b3:32:d5:84:29:66:e5:0e: 29:e8:ae:cf:70:4d:08:76:28:e8:d6:2e:4a:76:75:84:96:4b: 86:a2:bd:81:ab:a1:0b:92:28:35:8a:cf:33:c9:d8:63:09:7e: d1:57:7d:cb:14:c1:1f:14:ee:02:21:fb:fe:16:8c:1f:e5:19: be:ca:c8:2e:6b:b5:4b:de:83:db:3f:6e:29:24:b9:85:06:a0: 0c:da:fa:72:e9:cd:68:a7:71:2c:d5:b1:5b:b1:8f:a7:b3:ad: 6e:da:e2:1d:0f:ac:54:7b:67:ea:e5:39:20:ce:0b:e9:91:da: 9b:38:47:5e:3b:f9:42:ed:c3:33:8b:bb:2d:a3:2f:57:24:25: a0:df:bf:c8:fa:d1:ca:b1:57:fb:a9:ee:b6:83:35:00:0b:ee: 5a:e0:d0:03:29:01:61:be:a4:20:ea:6c:c5:6b:6b:22:5b:ba: ff:d7:0a:12:0d:17:f6:5d:e7:1f:2d:ad:dc:d4:21:48:53:3d: 23:95:52:f6:52:e8:0d:25:61:02:3a:e2:b1:32:d9:36:92:03: 16:cf:36:77:13:24:f9:32:ab:c3:fb:b3:54:5f:48:1a:ce:29: 9d:04:9f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSb51rSPPlfthSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZTIxOWRkOTctNDc1YS00OTI0LWI2OWMtNDMxMGVhOTVkMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18croFlJ7bnJiYYOJYWqnFdDCHTLJSjtvD+w NAUkch3pLkUCQ62Jqu9FFl+5AqkhT/U5KGsDZqMqchLRnZjr6tn6Sw53l/PeTj12 ldNx9oCdBqAj+SZPZUu5npTODd5N5m7L7s6WRxGT37cwMVEZTWBSBbNn5x/MCGl1 ct5lKCmfgbs2i/eEm0hGO1IYSbDdx+BjRIstSQIcgmaB5xTPA1wFUzpC2HiAuOhM Ytsj1jg0cJ0jVeRZ0wibSJ5Be1znSe41kHu+nktoFGSNkfTkzd0ZGAfUobOQ1LdX yBYq5TAiaHRKYRQ4NY2gRW20/gkLnh/EM01u6WzCRVEzCqyaTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt+duVFZJEQKAppE4Xsf8R5HGXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvOGEwM2U4ZDQtODMxZS0z NjZkLWE2MmUtNDcxNDNmMTYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQPaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECt3a0k5BlrSdzuyBdyvA7nwmeQ4o6rmBjWTgazMtWEKWblDinors9w TQh2KOjWLkp2dYSWS4aivYGroQuSKDWKzzPJ2GMJftFXfcsUwR8U7gIh+/4WjB/l Gb7KyC5rtUveg9s/bikkuYUGoAza+nLpzWincSzVsVuxj6ezrW7a4h0PrFR7Z+rl OSDOC+mR2ps4R147+ULtwzOLuy2jL1ckJaDfv8j60cqxV/up7raDNQAL7lrg0AMp AWG+pCDqbMVrayJbuv/XChINF/Zd5x8trdzUIUhTPSOVUvZS6A0lYQI64rEy2TaS AxbPNncTJPkyq8P7s1RfSBrOKZ0En1w= -----END CERTIFICATE-----Generated at Sat Jun 7 22:20:53 2025 by rpki-client