$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21fadce9-af41-3162-a003-b584e038e418.roa File: 21fadce9-af41-3162-a003-b584e038e418.roa (raw, json) Hash identifier: Wlv8J9qhpqhlvRMyTTJokFUpEtiPobZ7Ln2I9p7lIZU= Subject key identifier: A3:D9:F4:FA:26:7B:FC:24:3C:60:AF:97:CF:B8:30:23:2D:96:7D:88 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB59A8BDB7C38A10C8140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21fadce9-af41-3162-a003-b584e038e418.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 394996 IP address blocks: 64.62.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b5:9a:8b:db:7c:38:a1:0c:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d2750101-d174-487b-a8a6-ebd76da78942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:92:08:9b:9f:cd:29:8f:65:df:4e:ea:85:30: 35:ff:9d:e5:27:67:db:e2:38:29:84:a4:2a:22:b7: c4:12:bc:a1:ff:79:ee:9a:92:a7:7f:ab:0b:d1:0d: 4a:eb:5d:47:7e:fa:37:3e:5e:4e:df:d9:cd:68:7c: 1e:ac:9c:c0:a6:9e:d7:78:4c:5b:d3:b4:c4:05:8a: 6c:b2:c4:ed:44:a0:68:ae:c3:cc:a2:bb:bd:9d:31: b1:ae:3f:45:10:df:5e:66:df:68:20:f2:0b:e3:48: c7:ff:63:1b:4e:06:64:2d:85:6e:1d:5a:f1:13:3d: 92:32:0b:f7:36:38:d6:dd:77:9f:43:5d:10:68:8a: 74:e5:bf:1e:8c:ea:dd:8d:df:9e:79:28:02:93:34: 27:d4:29:ea:7f:c0:b5:da:1a:c2:d0:9c:ce:a7:e2: ee:a2:d0:ac:50:77:11:d5:5b:78:97:6c:3f:e6:2c: 31:0b:27:f7:9f:d7:80:d5:1f:b1:d7:4d:a2:2f:0a: 38:0d:64:65:69:cd:57:3a:17:c1:12:a6:94:80:31: 42:54:1a:23:db:ac:f0:56:d0:ce:03:ad:e5:5c:7d: 4b:e7:4f:a8:38:85:cf:33:0a:24:8c:7e:76:e9:fa: 98:48:3b:81:08:3f:ac:ce:be:1f:d6:48:74:72:10: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:F4:FA:26:7B:FC:24:3C:60:AF:97:CF:B8:30:23:2D:96:7D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21fadce9-af41-3162-a003-b584e038e418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:08:9c:78:f3:b0:2d:47:8b:0c:b0:bd:8a:16:fc:33:13:93: 67:ea:69:00:e4:33:36:c3:11:f8:6c:23:fa:8b:3a:1f:04:02: 8c:a7:87:f3:63:89:d3:93:ee:18:84:7e:41:71:a0:eb:c5:ce: 2c:aa:49:76:5c:77:d4:e3:d7:84:2f:aa:2b:1f:82:eb:71:1e: 1e:5f:ab:da:bb:3c:95:1e:46:18:9b:d1:47:68:9e:e9:f5:7b: 7e:a5:44:23:32:ad:82:95:21:cb:49:fb:04:ae:8f:33:2e:f8: 7f:ae:8a:37:ef:2d:ea:7e:bb:78:9e:c3:dc:d7:0c:fb:f3:d1: 0b:1a:df:ad:0a:25:79:68:e0:d6:de:c6:67:56:6e:bf:11:74: 70:e6:6b:a1:44:14:75:95:43:5f:b0:93:86:bb:1b:42:e1:90: 2f:16:b5:a9:fc:bb:bc:2e:9d:1b:49:10:7c:77:d2:b6:41:91: d9:ba:23:89:18:36:04:12:d6:1b:99:13:da:d9:fd:16:b0:45: 95:42:08:3f:f7:59:d6:2a:60:2f:18:f1:c7:bd:a5:1f:b9:59: 19:65:53:2e:df:67:8c:35:41:62:62:36:a3:7d:65:2e:5d:3f: d7:1c:f9:24:be:cf:da:63:dc:e1:1e:b2:a3:43:31:70:11:94: 96:38:77:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX7Wai9t8OKEMgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDI3NTAxMDEtZDE3NC00ODdiLWE4YTYtZWJkNzZkYTc4OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55IIm5/NKY9l307qhTA1/53lJ2fb4jgphKQq IrfEEryh/3numpKnf6sL0Q1K611Hfvo3Pl5O39nNaHwerJzApp7XeExb07TEBYps ssTtRKBorsPMoru9nTGxrj9FEN9eZt9oIPIL40jH/2MbTgZkLYVuHVrxEz2SMgv3 NjjW3XefQ10QaIp05b8ejOrdjd+eeSgCkzQn1Cnqf8C12hrC0JzOp+LuotCsUHcR 1Vt4l2w/5iwxCyf3n9eA1R+x102iLwo4DWRlac1XOhfBEqaUgDFCVBoj26zwVtDO A63lXH1L50+oOIXPMwokjH526fqYSDuBCD+szr4f1kh0chC3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPZ9Pome/wkPGCvl8+4MCMtln2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFmYWRjZTktYWY0MS0z MTYyLWEwMDMtYjU4NGUwMzhlNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQInHjzsC1HiwywvYoW/DMTk2fqaQDkMzbDEfhsI/qLOh8EAoynh/Nj idOT7hiEfkFxoOvFziyqSXZcd9Tj14QvqisfgutxHh5fq9q7PJUeRhib0Udonun1 e36lRCMyrYKVIctJ+wSujzMu+H+uijfvLep+u3iew9zXDPvz0Qsa360KJXlo4Nbe xmdWbr8RdHDma6FEFHWVQ1+wk4a7G0LhkC8Wtan8u7wunRtJEHx30rZBkdm6I4kY NgQS1huZE9rZ/RawRZVCCD/3WdYqYC8Y8ce9pR+5WRllUy7fZ4w1QWJiNqN9ZS5d P9cc+SS+z9pj3OEesqNDMXARlJY4d84= -----END CERTIFICATE-----Generated at Sun Jun 8 04:04:52 2025 by rpki-client