$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa File: 3795afcf-5858-3b52-83e5-2c52f0334582.roa (raw, json) Hash identifier: FgmDaGPKZqdSfWO/gZt7Lg8PHwIr5lTKhAu7eLwCxIg= Subject key identifier: 97:71:E8:99:ED:D0:19:1E:E0:B6:7B:8D:34:D4:E6:DC:F9:E7:02:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE830CD4362056E51BDC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 400228 IP address blocks: 64.62.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e8:30:cd:43:62:05:6e:51:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=4a5ddfa8-1104-45aa-b6b3-a80803250f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:af:af:d7:24:ba:ee:4b:3a:1a:48:14:f7: 5a:a3:93:c5:1f:91:1a:ec:0a:9b:ce:2c:c9:8a:70: 47:b3:00:e0:2f:ca:4b:ae:b3:dd:53:ea:2d:41:aa: fd:fc:49:24:16:39:68:df:73:a4:bc:6f:87:3d:b7: 36:93:29:c1:28:4f:5e:fb:4e:3e:d9:09:44:a3:f8: fa:6a:31:c7:61:ea:5c:77:27:11:2f:44:dd:6e:aa: 2e:91:1b:21:c2:3b:51:2a:30:f2:48:d6:14:b4:90: 92:30:6c:f0:31:79:c1:5d:34:e7:d5:fb:25:82:53: 11:a7:88:c8:59:d3:b4:c6:50:3d:a1:85:f4:68:f1: b4:a3:2d:86:6c:8b:e6:0b:9a:95:ef:9c:84:15:1f: ba:01:c6:ef:fb:4c:87:cc:b0:a4:46:9d:7a:c6:69: 73:94:96:bd:2a:57:58:6a:5c:e4:65:29:6b:1f:68: 3e:f9:58:08:89:6c:af:3c:b8:da:5e:17:6f:d5:51: eb:e1:37:df:9c:0c:dc:61:ec:8f:42:c6:01:ab:dc: c8:58:95:67:1b:06:a7:ac:7a:4e:16:6a:fe:37:0f: 25:12:f6:70:1a:9f:ee:de:4e:70:a6:42:31:11:93: 41:64:e1:d0:9d:36:42:af:53:7f:d0:6e:36:8a:4e: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:71:E8:99:ED:D0:19:1E:E0:B6:7B:8D:34:D4:E6:DC:F9:E7:02:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fc:71:ca:bf:aa:f4:e7:35:ea:a9:70:75:2d:07:e2:2d:59: d1:66:de:25:66:15:65:2e:f1:d9:02:7b:a4:26:86:04:4d:0c: af:db:0d:d0:23:77:62:5e:6d:dc:e3:3e:ee:56:2f:2f:86:3a: e1:2f:d5:68:56:6e:c0:88:12:06:1f:12:01:c3:29:3b:c1:8b: 47:4c:b9:9a:25:aa:7e:b4:7e:46:af:e5:c6:0c:26:c8:69:98: 31:07:45:8c:1f:cf:3b:f5:1e:80:bd:e1:21:bb:f4:e0:af:b8: 5e:9a:18:00:d3:65:19:8f:f5:b9:62:1c:db:99:f4:de:8b:aa: 4f:73:70:59:8e:10:21:bc:f3:5c:6d:a4:9c:6b:f0:d1:f9:5b: 91:24:81:58:49:a4:06:16:65:5a:0b:a0:1a:af:64:28:05:9c: 4d:49:9e:39:ac:ff:68:37:45:4c:a4:01:9a:2a:2b:14:42:c7: bd:94:cb:e9:fd:3c:fe:dc:eb:24:7e:de:be:cc:1f:a8:dc:ca: e8:d0:f4:0d:fa:44:2b:46:6b:54:74:0f:4f:87:22:02:75:64: 61:0c:3f:85:90:54:a8:82:ae:e7:73:c8:5f:dc:4c:cf:1c:cc: 1d:19:b7:b9:0a:d5:79:53:28:d9:24:7f:50:1b:42:40:94:fb: 7c:cf:c9:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX+gwzUNiBW5RvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NGE1ZGRmYTgtMTEwNC00NWFhLWI2YjMtYTgwODAzMjUwZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFCvr9ckuu5LOhpIFPdao5PFH5Ea7AqbzizJ inBHswDgL8pLrrPdU+otQar9/EkkFjlo33OkvG+HPbc2kynBKE9e+04+2QlEo/j6 ajHHYepcdycRL0TdbqoukRshwjtRKjDySNYUtJCSMGzwMXnBXTTn1fslglMRp4jI WdO0xlA9oYX0aPG0oy2GbIvmC5qV75yEFR+6Acbv+0yHzLCkRp16xmlzlJa9KldY alzkZSlrH2g++VgIiWyvPLjaXhdv1VHr4TffnAzcYeyPQsYBq9zIWJVnGwanrHpO Fmr+Nw8lEvZwGp/u3k5wpkIxEZNBZOHQnTZCr1N/0G42ik72nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdx6Jnt0Bke4LZ7jTTU5tz55wJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzc5NWFmY2YtNTg1OC0z YjUyLTgzZTUtMmM1MmYwMzM0NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv8ccq/qvTnNeqpcHUtB+ItWdFm3iVmFWUu8dkCe6QmhgRNDK/bDdAj d2JebdzjPu5WLy+GOuEv1WhWbsCIEgYfEgHDKTvBi0dMuZolqn60fkav5cYMJshp mDEHRYwfzzv1HoC94SG79OCvuF6aGADTZRmP9bliHNuZ9N6Lqk9zcFmOECG881xt pJxr8NH5W5EkgVhJpAYWZVoLoBqvZCgFnE1Jnjms/2g3RUykAZoqKxRCx72Uy+n9 PP7c6yR+3r7MH6jcyujQ9A36RCtGa1R0D0+HIgJ1ZGEMP4WQVKiCrudzyF/cTM8c zB0Zt7kK1XlTKNkkf1AbQkCU+3zPycM= -----END CERTIFICATE-----Generated at Sun Jun 8 09:20:07 2025 by rpki-client