$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/2fc23996-5b7e-31ad-91be-f227ef142d20.roa File: 2fc23996-5b7e-31ad-91be-f227ef142d20.roa (raw, json) Hash identifier: FW8ZlijpvKvOQ093x176/02MqD66H2bWN6THHGlDaTM= Subject key identifier: BE:A4:60:54:BE:66:37:BB:BC:E8:9D:45:6D:28:2F:3B:B4:D0:8D:14 Certificate issuer: /CN=646b4c8f-df71-430f-9338-67bba3a82c34 Certificate serial: 010D0C9F4328584A3F3691259BCAD350FD48F580 Authority key identifier: DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/2fc23996-5b7e-31ad-91be-f227ef142d20.roa Signing time: Thu 19 Jun 2025 21:06:38 +0000 ROA not before: Thu 19 Jun 2025 21:06:38 +0000 ROA not after: Wed 17 Sep 2025 21:06:38 +0000 asID: 6407 IP address blocks: 64.56.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:36:91:25:9b:ca:d3:50:fd:48:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646b4c8f-df71-430f-9338-67bba3a82c34 Validity Not Before: Jun 19 21:06:38 2025 GMT Not After : Sep 17 21:06:38 2025 GMT Subject: CN=b9a18450-13b5-4d59-972c-23c7f2ca9f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:20:9c:50:66:8b:ef:91:46:47:ba:ac:79: 76:39:33:9e:ee:96:f7:fa:12:2f:d8:81:8d:a6:ab: 70:26:6e:34:6a:0e:ad:dc:37:e9:c2:f5:9e:61:d2: 99:62:10:6e:f9:56:98:7c:d3:19:49:4b:e2:df:af: f4:05:68:f8:31:25:49:fa:15:67:e1:5a:2c:ab:1a: 95:c1:83:16:43:a3:b9:b5:48:cd:65:59:17:e0:15: 04:43:a6:9e:7e:cb:af:81:83:b8:b0:e1:85:37:7a: 2e:33:80:2f:7c:b4:51:0a:63:42:1c:39:d2:28:4f: be:b0:8b:eb:cd:66:0e:2f:11:11:65:89:35:3b:ee: fc:8d:30:01:6d:8f:37:e4:c1:65:61:ee:d6:2f:eb: 01:6c:58:5d:b3:ed:e8:34:c8:57:f9:d1:1e:9b:90: 09:c8:f6:35:64:13:1e:3d:28:41:50:bf:eb:12:80: 49:20:8f:03:6d:e3:45:aa:05:2b:b2:b6:63:3b:51: 51:b1:7b:68:f3:36:a5:19:3f:19:70:d4:9c:3c:c6: f9:5a:ec:cd:44:43:fb:3a:a3:59:7c:3b:8f:ee:c2: dc:6a:a0:be:c7:3c:58:e1:82:eb:f8:40:c6:72:f0: 75:cb:da:09:2a:9f:36:ca:d9:cc:11:f9:2f:b7:e4: 19:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A4:60:54:BE:66:37:BB:BC:E8:9D:45:6D:28:2F:3B:B4:D0:8D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/2fc23996-5b7e-31ad-91be-f227ef142d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.crl X509v3 Authority Key Identifier: keyid:DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer sbgp-ipAddrBlock: critical IPv4: 64.56.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d4:6d:75:44:4f:d3:a5:b8:83:af:aa:91:c2:bb:d6:2e:5a: 1f:55:6b:09:5b:32:bf:11:71:bf:a5:71:1d:67:51:c2:eb:58: f8:8f:43:3d:de:ae:e7:51:04:70:70:90:bf:e1:ac:26:e5:bb: 08:c0:52:6b:d2:09:b6:8a:45:20:72:08:00:6e:76:bb:06:77: a9:88:bd:68:4d:6f:2c:59:3a:5b:72:52:d8:34:95:36:23:f9: 4c:97:32:d9:ba:0d:f5:1b:e1:cb:55:0e:79:86:19:8a:0c:5a: c0:ea:77:be:a8:94:75:e4:a9:d1:0e:a8:b6:ea:48:17:ed:de: 9a:7a:e3:4e:3d:7f:26:85:86:92:64:85:67:78:c5:b1:84:91: 42:4e:42:09:e0:a3:60:0f:ef:10:49:08:30:0b:b6:6c:7d:c8: 83:27:26:60:a3:83:fa:c9:4f:22:b7:d1:8f:0d:72:cd:dd:9b: d4:0b:d4:a9:99:8b:f2:12:8a:8e:22:5e:82:ff:a6:d8:bb:48: e1:15:51:8f:1b:06:09:e4:46:c7:be:20:b9:86:99:10:90:c5: ea:d7:41:bc:47:31:95:6e:d1:3d:07:2e:ad:55:ae:91:b0:fb: f5:64:e9:a9:a7:28:5c:03:65:c4:34:21:af:3a:49:b9:59:66: a9:be:cd:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/NpElm8rTUP1I9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ2YjRjOGYtZGY3MS00MzBmLTkzMzgtNjdiYmEzYTgy YzM0MB4XDTI1MDYxOTIxMDYzOFoXDTI1MDkxNzIxMDYzOFowLzEtMCsGA1UEAxMk YjlhMTg0NTAtMTNiNS00ZDU5LTk3MmMtMjNjN2YyY2E5ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5AgnFBmi++RRke6rHl2OTOe7pb3+hIv2IGN pqtwJm40ag6t3DfpwvWeYdKZYhBu+VaYfNMZSUvi36/0BWj4MSVJ+hVn4VosqxqV wYMWQ6O5tUjNZVkX4BUEQ6aefsuvgYO4sOGFN3ouM4AvfLRRCmNCHDnSKE++sIvr zWYOLxERZYk1O+78jTABbY835MFlYe7WL+sBbFhds+3oNMhX+dEem5AJyPY1ZBMe PShBUL/rEoBJII8DbeNFqgUrsrZjO1FRsXto8zalGT8ZcNScPMb5WuzNREP7OqNZ fDuP7sLcaqC+xzxY4YLr+EDGcvB1y9oJKp82ytnMEfkvt+QZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6kYFS+Zje7vOidRW0oLzu00I0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDZi NGM4Zi1kZjcxLTQzMGYtOTMzOC02N2JiYTNhODJjMzQvMmZjMjM5OTYtNWI3ZS0z MWFkLTkxYmUtZjIyN2VmMTQyZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQ2YjRjOGYtZGY3MS00MzBmLTkz MzgtNjdiYmEzYTgyYzM0LzY0NmI0YzhmLWRmNzEtNDMwZi05MzM4LTY3YmJhM2E4 MmMzNC5jcmwwHwYDVR0jBBgwFoAU3avuK8aKiMoQ96Gp9SFZwqV5LjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDZiNGM4Zi1kZjcxLTQzMGYtOTMzOC02N2Ji YTNhODJjMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQDjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrUbXVET9OluIOvqpHCu9YuWh9VawlbMr8Rcb+lcR1nUcLrWPiPQz3e rudRBHBwkL/hrCbluwjAUmvSCbaKRSByCABudrsGd6mIvWhNbyxZOltyUtg0lTYj +UyXMtm6DfUb4ctVDnmGGYoMWsDqd76olHXkqdEOqLbqSBft3pp64049fyaFhpJk hWd4xbGEkUJOQgngo2AP7xBJCDALtmx9yIMnJmCjg/rJTyK30Y8Ncs3dm9QL1KmZ i/ISio4iXoL/pti7SOEVUY8bBgnkRse+ILmGmRCQxerXQbxHMZVu0T0HLq1VrpGw +/Vk6amnKFwDZcQ0Ia86SblZZqm+zdM= -----END CERTIFICATE-----Generated at Fri Jul 4 07:12:43 2025 by rpki-client