$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa File: 472a87dc-5a34-3721-9aec-494ce65fdcb4.roa (raw, json) Hash identifier: p/j0pE4tAvsOJ4vyTQne/rXhe8NAg5f85dvnIlHU6Fo= Subject key identifier: B8:C1:66:8A:3F:33:1A:72:20:AF:04:37:9F:A4:E3:2B:56:2E:5E:72 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F43285849D85F906ABA5F0444355D7AC0 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 395035 IP address blocks: 64.239.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:90:6a:ba:5f:04:44:35:5d:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=e04c6a5b-6622-42fe-9492-883150131a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:dd:54:d3:8c:cc:73:dc:81:b2:dd:b2:9b: a2:3f:4c:0a:a5:2a:44:73:c1:4f:f1:01:f9:8e:51: 8b:be:fa:0d:62:55:81:33:d8:c1:bc:fc:ce:e3:8d: 24:c8:83:5b:1a:a7:f1:69:22:f8:b4:ac:23:21:d5: bf:10:69:0a:3e:97:eb:c4:d7:13:28:d5:a5:ee:a4: e5:df:35:01:91:a3:81:a8:a5:45:6c:6f:7a:2e:46: 52:cc:82:e6:12:41:6a:ce:e0:33:2e:fa:45:4f:6c: 93:d4:4c:cd:68:e2:65:db:72:3f:77:23:26:8e:5e: 96:23:9a:64:56:c3:8f:0c:08:3e:43:da:e0:0a:d5: d7:0b:56:9c:11:58:02:8c:9d:1e:e1:f8:ca:d8:3d: fa:f0:9f:43:a9:1a:c1:42:9c:ca:61:82:5a:ee:5d: 84:e7:96:76:0f:55:23:81:9a:4d:36:0f:40:b2:7b: d8:5f:c3:a4:27:24:91:5e:b7:c3:4b:7d:ca:75:6a: f4:29:ab:7a:62:9d:fe:b1:27:6e:74:3a:e7:2c:39: 85:af:d3:74:f0:50:2b:c6:2c:b4:88:ee:14:e9:d8: 77:c5:42:e5:f6:51:90:5b:7c:2e:2a:14:d4:94:be: 1f:cc:c5:2b:37:14:2b:a8:64:e6:e1:05:ba:f8:d0: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:66:8A:3F:33:1A:72:20:AF:04:37:9F:A4:E3:2B:56:2E:5E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f7:ec:bf:12:93:f3:a7:cc:f8:f2:30:b8:2a:3d:3b:ea:27: 1b:0b:46:f7:ed:a9:07:d9:0f:51:85:59:03:29:97:c7:b3:ad: a0:91:12:b8:63:7f:50:41:bd:9c:81:c3:89:24:d0:b5:b8:42: bd:bc:00:99:55:06:30:8e:54:d4:25:4f:27:cf:f7:3a:ef:cc: 9e:4c:54:43:13:8f:9f:60:23:a4:33:bc:ab:84:7d:ef:3c:85: 1a:e6:4f:81:ab:2f:b6:d8:4b:42:70:ce:37:49:17:9e:2d:3e: b4:20:34:7a:e1:1d:25:94:98:17:46:75:24:2c:20:b5:c8:bc: 34:29:3e:aa:31:13:19:c9:02:d6:f3:cd:52:35:f7:89:99:7d: 67:82:fa:d4:5f:53:29:98:b3:67:0a:eb:0c:5e:12:c9:1d:2e: 29:42:07:91:79:3a:3e:99:60:81:ba:78:1b:90:8d:44:18:58: 1e:c9:42:c3:f3:3c:ee:4f:bf:cb:9d:40:1a:99:77:57:85:fc: d1:6c:bc:66:85:c6:f6:c3:30:2a:4b:b2:a7:f1:ad:1f:ef:6f: 39:61:12:d4:de:04:65:5f:11:54:88:de:01:01:eb:03:c5:2f: 87:b7:95:0b:6e:65:bd:fa:53:9f:be:a3:19:c9:7b:44:d0:c0: 67:94:66:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5Bqul8ERDVdesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZTA0YzZhNWItNjYyMi00MmZlLTk0OTItODgzMTUwMTMxYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuDdVNOMzHPcgbLdspuiP0wKpSpEc8FP8QH5 jlGLvvoNYlWBM9jBvPzO440kyINbGqfxaSL4tKwjIdW/EGkKPpfrxNcTKNWl7qTl 3zUBkaOBqKVFbG96LkZSzILmEkFqzuAzLvpFT2yT1EzNaOJl23I/dyMmjl6WI5pk VsOPDAg+Q9rgCtXXC1acEVgCjJ0e4fjK2D368J9DqRrBQpzKYYJa7l2E55Z2D1Uj gZpNNg9AsnvYX8OkJySRXrfDS33KdWr0Kat6Yp3+sSdudDrnLDmFr9N08FArxiy0 iO4U6dh3xULl9lGQW3wuKhTUlL4fzMUrNxQrqGTm4QW6+NBWTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjBZoo/MxpyIK8EN5+k4ytWLl5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvNDcyYTg3ZGMtNWEzNC0z NzIxLTlhZWMtNDk0Y2U2NWZkY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv37L8Sk/OnzPjyMLgqPTvqJxsLRvftqQfZD1GFWQMpl8ezraCRErhj f1BBvZyBw4kk0LW4Qr28AJlVBjCOVNQlTyfP9zrvzJ5MVEMTj59gI6QzvKuEfe88 hRrmT4GrL7bYS0JwzjdJF54tPrQgNHrhHSWUmBdGdSQsILXIvDQpPqoxExnJAtbz zVI194mZfWeC+tRfUymYs2cK6wxeEskdLilCB5F5Oj6ZYIG6eBuQjUQYWB7JQsPz PO5Pv8udQBqZd1eF/NFsvGaFxvbDMCpLsqfxrR/vbzlhEtTeBGVfEVSI3gEB6wPF L4e3lQtuZb36U5++oxnJe0TQwGeUZvY= -----END CERTIFICATE-----Generated at Sun Jun 8 04:18:02 2025 by rpki-client