$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa File: f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (raw, json) Hash identifier: Fjpdchh+3qbgMgvG72VMDZH3W9otigspkMegqxnCUs4= Subject key identifier: 1D:22:61:18:A8:E4:A5:E8:88:A5:79:31:1C:1D:45:D0:DA:C5:A9:E8 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F43285849D85F905B8AFA42B0E39D61C0 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 395035 IP address blocks: 64.239.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:90:5b:8a:fa:42:b0:e3:9d:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=b3cc5c51-15b7-4afc-9cbb-ad13f5976b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:31:b7:aa:36:72:60:2d:75:14:3a:c1:23: 07:9d:63:f1:ad:8f:93:c0:42:19:13:c2:01:6e:85: 52:ed:ce:64:5f:4b:96:90:60:dd:3c:6b:e3:64:ab: 72:e0:f3:2e:5d:b3:9b:e9:e0:ad:3d:a7:d5:6d:81: dc:c4:24:27:11:5c:36:c7:59:5e:42:22:cb:b7:c0: 86:08:9b:2d:ba:69:27:1b:90:81:9b:8c:4e:ac:63: 4e:fa:a3:6d:be:de:30:d1:df:fd:1d:d3:3f:81:2c: 67:e2:6b:36:36:1a:4f:d8:e0:56:cd:20:d6:4d:17: 20:a6:74:62:78:49:e9:84:99:13:8e:45:38:61:fe: c5:09:10:68:f3:41:fd:7f:b1:2b:a0:76:99:eb:dc: c5:01:c8:90:d1:8c:4a:8f:f5:ff:b6:5a:01:d4:cf: 39:fe:d9:3d:2d:a1:00:dc:38:af:7e:e4:56:f0:34: 1b:95:59:ed:82:26:4a:63:21:61:78:76:a0:57:26: 82:2b:e2:8c:44:0c:f8:39:79:ed:6c:13:d0:f0:ab: bc:b7:f9:47:cc:5a:a0:a6:62:f0:b9:4b:88:53:df: 89:29:73:c7:9c:92:15:f6:a7:f0:a7:11:6c:50:da: cf:10:2d:e2:60:d6:ac:aa:eb:fd:dc:36:b7:d2:cc: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:22:61:18:A8:E4:A5:E8:88:A5:79:31:1C:1D:45:D0:DA:C5:A9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d3:15:03:94:87:2e:6b:51:51:07:55:5c:1b:d8:84:8f:1e: 64:16:e3:09:1e:34:7c:af:55:71:d5:1d:11:b0:df:0a:aa:c6: 95:b7:4f:89:6b:49:8f:67:e3:d6:ad:a2:36:ad:cd:5a:14:fd: 4b:7d:85:2a:8e:a2:fc:e9:e0:19:26:bf:7f:e4:fb:6b:71:ba: 0c:f2:f8:5f:67:91:8c:d9:d7:32:da:c7:74:6b:36:9f:60:1c: 08:e6:0e:d7:ee:5e:f5:db:04:88:42:32:83:7a:4a:25:b1:fe: 25:8b:1d:83:2a:02:2d:0d:dd:86:88:e9:e4:30:c7:35:8c:7a: b1:36:29:3e:91:13:eb:0d:be:dd:ca:6e:56:8d:1f:af:d2:19: 60:c6:98:c4:b4:b8:5a:3e:57:cf:b6:bc:5b:e8:86:b2:73:19: 80:9d:31:bd:ec:20:85:07:5f:37:91:b4:23:ca:30:e2:30:69: f7:32:99:bf:ac:f1:6c:4a:bf:23:f9:4f:b3:39:a6:f5:65:ef: 10:fe:42:74:85:44:b7:6f:4a:76:07:bc:9a:8e:9a:cc:18:98: 47:8e:eb:33:53:95:c7:9a:cf:d6:95:69:08:8f:c9:d1:81:78: e9:52:12:50:4c:37:ad:32:90:84:f7:89:0a:68:df:df:cd:b3: 62:ee:08:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5BbivpCsOOdYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YjNjYzVjNTEtMTViNy00YWZjLTljYmItYWQxM2Y1OTc2YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Ixt6o2cmAtdRQ6wSMHnWPxrY+TwEIZE8IB boVS7c5kX0uWkGDdPGvjZKty4PMuXbOb6eCtPafVbYHcxCQnEVw2x1leQiLLt8CG CJstumknG5CBm4xOrGNO+qNtvt4w0d/9HdM/gSxn4ms2NhpP2OBWzSDWTRcgpnRi eEnphJkTjkU4Yf7FCRBo80H9f7EroHaZ69zFAciQ0YxKj/X/tloB1M85/tk9LaEA 3DivfuRW8DQblVntgiZKYyFheHagVyaCK+KMRAz4OXntbBPQ8Ku8t/lHzFqgpmLw uUuIU9+JKXPHnJIV9qfwpxFsUNrPEC3iYNasquv93Da30swt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0iYRio5KXoiKV5MRwdRdDaxanoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZjc5NDA1N2EtNmFjYi0z ZTBjLWFmYWMtYWIyM2I0ZDJhMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/TFQOUhy5rUVEHVVwb2ISPHmQW4wkeNHyvVXHVHRGw3wqqxpW3T4lr SY9n49atojatzVoU/Ut9hSqOovzp4Bkmv3/k+2txugzy+F9nkYzZ1zLax3RrNp9g HAjmDtfuXvXbBIhCMoN6SiWx/iWLHYMqAi0N3YaI6eQwxzWMerE2KT6RE+sNvt3K blaNH6/SGWDGmMS0uFo+V8+2vFvohrJzGYCdMb3sIIUHXzeRtCPKMOIwafcymb+s 8WxKvyP5T7M5pvVl7xD+QnSFRLdvSnYHvJqOmswYmEeO6zNTlceaz9aVaQiPydGB eOlSElBMN60ykIT3iQpo39/Ns2LuCLY= -----END CERTIFICATE-----Generated at Sat Jun 7 22:11:15 2025 by rpki-client