$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/132e1031-be60-3037-bb0a-4e82bac5d28e.roa File: 132e1031-be60-3037-bb0a-4e82bac5d28e.roa (raw, json) Hash identifier: 8AJaK+hqjC5bhRHP6RYBfXLIbvYfWUu3td//LcWaFHo= Subject key identifier: 1E:54:1D:96:08:60:5B:FF:37:DB:AC:AA:36:D4:34:64:C2:7D:D9:E2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FD9BD7F9D71465B783FA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/132e1031-be60-3037-bb0a-4e82bac5d28e.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 394996 IP address blocks: 64.71.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d9:bd:7f:9d:71:46:5b:78:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=36b04d9e-b3f0-46cb-8bf1-af164a375054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:d7:72:56:a1:1e:21:4e:59:15:07:86:e7: 5a:df:92:f9:e0:8e:38:0b:33:41:e1:08:f6:e0:b7: b2:a9:1e:48:e9:9f:4e:e6:b9:18:c6:00:47:b4:72: 46:c2:ab:0b:74:29:8f:44:35:5b:41:8a:25:3d:fc: b8:01:35:fe:c4:c5:2b:fc:30:a5:fa:e1:de:86:b0: fd:6e:ec:db:65:9f:eb:f6:91:ce:77:f6:83:a6:30: 68:0b:ee:d1:9c:94:64:d2:22:84:8e:e6:ca:57:d9: 26:8b:d2:b0:b4:98:54:3d:4e:7a:2d:6e:7a:a1:f7: 00:bf:83:bf:e8:68:3e:60:85:ee:d5:0e:83:b2:19: 52:ee:25:4d:b3:9b:9d:29:7c:2a:12:d3:f2:f9:e3: 6b:b7:ee:93:1c:13:18:79:7c:95:6e:89:e7:08:3f: 34:24:00:93:18:6a:eb:c3:19:b1:1a:57:8c:dd:7e: d0:d6:85:b4:c4:0e:cf:71:95:e5:d0:c4:69:c4:73: cb:92:7c:74:ac:ff:8f:f9:6e:71:0c:40:90:e7:68: 78:32:88:98:5d:fd:db:33:03:51:17:d5:52:0c:26: 9d:ab:68:e9:fb:27:63:ef:b4:1a:97:d1:61:f5:83: 35:30:a3:95:25:8a:00:c9:4d:d9:f0:fc:8f:9a:f3: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:1D:96:08:60:5B:FF:37:DB:AC:AA:36:D4:34:64:C2:7D:D9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/132e1031-be60-3037-bb0a-4e82bac5d28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:18:16:80:c7:58:5f:24:01:7b:bb:ff:33:c3:77:91:dc:44: c3:84:0a:0b:96:4c:69:06:d8:56:e4:84:27:cb:81:34:6e:d8: 74:bb:61:f3:69:4d:81:3f:34:47:d0:31:6f:80:e6:0c:79:e7: 8d:36:c3:ef:84:56:e7:d0:87:0f:23:57:b6:d0:1c:06:59:11: b9:f4:e1:86:23:50:d2:ee:e3:49:64:df:52:27:b9:ed:1e:6c: ff:d4:cd:12:dd:bf:74:44:5e:a4:4f:34:8b:aa:99:3e:8d:55: 25:e0:69:90:3a:48:72:e0:42:fb:e5:67:1f:62:a9:58:13:f9: 4e:25:bb:25:50:e6:33:5c:3b:de:fb:a0:d5:7a:65:ed:bd:1a: 6e:ae:32:37:2a:f4:31:63:23:60:53:49:4e:27:51:d5:af:5b: fd:ae:b8:34:bc:22:e0:a3:c6:4b:25:5c:a6:01:3f:36:cd:ae: 20:b4:37:c3:94:14:2e:78:2c:36:af:c9:7c:4c:20:99:a6:77: a4:57:f3:c2:a1:ff:73:bb:e8:a7:4a:c4:7b:b8:00:4e:c7:ab: be:2d:15:fc:1e:a7:f7:4e:ac:77:36:e3:4a:63:85:17:1e:0b: 5d:ce:61:35:5d:bc:d3:7f:81:16:b9:c7:5b:65:44:99:08:3c: d4:f8:a1:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX9m9f51xRlt4P6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzZiMDRkOWUtYjNmMC00NmNiLThiZjEtYWYxNjRhMzc1MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXzXclahHiFOWRUHhuda35L54I44CzNB4Qj2 4LeyqR5I6Z9O5rkYxgBHtHJGwqsLdCmPRDVbQYolPfy4ATX+xMUr/DCl+uHehrD9 buzbZZ/r9pHOd/aDpjBoC+7RnJRk0iKEjubKV9kmi9KwtJhUPU56LW56ofcAv4O/ 6Gg+YIXu1Q6DshlS7iVNs5udKXwqEtPy+eNrt+6THBMYeXyVbonnCD80JACTGGrr wxmxGleM3X7Q1oW0xA7PcZXl0MRpxHPLknx0rP+P+W5xDECQ52h4MoiYXf3bMwNR F9VSDCadq2jp+ydj77Qal9Fh9YM1MKOVJYoAyU3Z8PyPmvNN6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5UHZYIYFv/N9usqjbUNGTCfdniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTMyZTEwMzEtYmU2MC0z MDM3LWJiMGEtNGU4MmJhYzVkMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8YFoDHWF8kAXu7/zPDd5HcRMOECguWTGkG2FbkhCfLgTRu2HS7YfNp TYE/NEfQMW+A5gx55402w++EVufQhw8jV7bQHAZZEbn04YYjUNLu40lk31Inue0e bP/UzRLdv3REXqRPNIuqmT6NVSXgaZA6SHLgQvvlZx9iqVgT+U4luyVQ5jNcO977 oNV6Ze29Gm6uMjcq9DFjI2BTSU4nUdWvW/2uuDS8IuCjxkslXKYBPzbNriC0N8OU FC54LDavyXxMIJmmd6RX88Kh/3O76KdKxHu4AE7Hq74tFfwep/dOrHc240pjhRce C13OYTVdvNN/gRa5x1tlRJkIPNT4ob4= -----END CERTIFICATE-----Generated at Sun Jun 8 04:08:42 2025 by rpki-client