$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa File: d449ca14-5612-35c6-bb80-64b2f7a45f90.roa (raw, json) Hash identifier: 9ULF7bUzSgwLpdDhjjTXJsOf6Eq6VyBchjaqtYFbWjw= Subject key identifier: E1:38:67:B8:97:34:2A:B4:B2:24:03:67:0C:22:08:FB:51:9D:6E:71 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584A6F207B4A5B6CF8BC7F531820 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 62651 IP address blocks: 216.151.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7b:4a:5b:6c:f8:bc:7f:53:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=2e0b571b-3a1f-441d-9905-b1266df426db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:63:03:9d:c2:8c:92:41:64:9e:8e:e7:3d: 66:b2:00:f3:9d:c4:65:ae:33:87:01:31:1b:7e:7e: 87:68:f0:a5:29:be:0c:ce:49:eb:28:2a:cd:8e:54: 9b:ce:d5:34:b2:dd:b3:a5:52:27:93:83:f0:dc:46: 7e:35:09:b8:83:88:75:c6:f5:31:9f:60:b9:82:fc: 18:e5:45:20:ff:26:0e:ef:52:b1:4c:c0:90:9c:b0: 55:46:29:cd:08:bf:f5:fb:49:d0:3e:23:74:bf:19: 12:2e:b7:f9:db:ef:41:a5:a9:20:b5:08:ba:cb:02: 69:27:d0:ff:ed:a9:25:a6:f6:1c:ae:ae:9a:fa:0e: e3:c7:02:d5:29:91:70:b6:f0:d8:3d:1a:c5:92:58: b2:c6:90:72:76:69:2b:bc:5f:ab:a4:b9:62:f0:c4: a7:9a:0f:21:42:09:bf:44:09:b8:4a:89:65:43:f2: 71:1f:3f:2b:45:c4:39:2e:7a:1f:49:66:d8:aa:94: cc:b6:8a:3e:b2:6c:43:28:1f:c8:26:4b:69:b9:25: 33:ba:36:08:52:30:62:6d:c4:b2:a2:20:9d:41:c2: 5c:c1:ce:73:65:ec:71:e7:03:08:b7:7b:68:bb:01: 58:cc:ff:a5:64:22:31:71:2f:e5:1c:1d:4a:85:67: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:38:67:B8:97:34:2A:B4:B2:24:03:67:0C:22:08:FB:51:9D:6E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 216.151.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:43:f0:f8:e8:50:cc:86:89:13:b8:74:2b:21:f5:f5:dc:f7: 70:31:d2:2e:4e:6a:0d:56:74:a3:bd:1d:96:77:b1:80:c3:26: 97:59:7c:cd:06:ef:32:ca:9a:4a:db:69:95:4f:2b:f1:c5:02: e7:6a:35:0c:71:5f:f7:3c:bd:7f:eb:1c:ef:51:ff:75:1f:f4: c1:b9:72:c2:21:51:50:d4:b0:c2:32:2a:50:cb:77:20:87:68: 3e:86:33:ae:6a:01:64:14:a3:15:5b:82:76:59:99:dc:c6:60: a2:34:8f:30:53:9f:4c:9c:ec:87:94:e9:87:c7:63:c4:26:81: 72:94:17:56:53:f1:d4:fc:26:c9:c5:53:4a:89:41:53:60:0f: 8b:6b:1a:27:83:e7:1c:45:de:45:25:11:25:b2:92:e5:51:82: 65:22:2c:83:5f:30:23:c6:86:eb:74:95:73:bd:10:2f:7f:48: f9:1f:1d:80:da:64:3d:58:4f:d2:43:e9:ca:fa:b1:7b:d8:62: d6:40:6d:f3:07:9c:8b:ec:dc:d0:79:c3:11:0f:62:f9:b2:48: 26:b4:d9:da:64:6b:8b:ba:e9:42:fa:39:2d:cb:0f:f3:78:32: 3d:92:c5:6a:28:f1:88:cd:2a:4b:dc:9a:e0:dd:c2:11:df:98: c4:10:67:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHtKW2z4vH9TGCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk MmUwYjU3MWItM2ExZi00NDFkLTk5MDUtYjEyNjZkZjQyNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfFjA53CjJJBZJ6O5z1msgDzncRlrjOHATEb fn6HaPClKb4MzknrKCrNjlSbztU0st2zpVInk4Pw3EZ+NQm4g4h1xvUxn2C5gvwY 5UUg/yYO71KxTMCQnLBVRinNCL/1+0nQPiN0vxkSLrf52+9BpakgtQi6ywJpJ9D/ 7aklpvYcrq6a+g7jxwLVKZFwtvDYPRrFkliyxpBydmkrvF+rpLli8MSnmg8hQgm/ RAm4SollQ/JxHz8rRcQ5LnofSWbYqpTMtoo+smxDKB/IJktpuSUzujYIUjBibcSy oiCdQcJcwc5zZexx5wMIt3touwFYzP+lZCIxcS/lHB1KhWdLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE4Z7iXNCq0siQDZwwiCPtRnW5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZDQ0OWNhMTQtNTYxMi0z NWM2LWJiODAtNjRiMmY3YTQ1ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Je/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9D8PjoUMyGiRO4dCsh9fXc93Ax0i5Oag1WdKO9HZZ3sYDDJpdZfM0G 7zLKmkrbaZVPK/HFAudqNQxxX/c8vX/rHO9R/3Uf9MG5csIhUVDUsMIyKlDLdyCH aD6GM65qAWQUoxVbgnZZmdzGYKI0jzBTn0yc7IeU6YfHY8QmgXKUF1ZT8dT8JsnF U0qJQVNgD4trGieD5xxF3kUlESWykuVRgmUiLINfMCPGhut0lXO9EC9/SPkfHYDa ZD1YT9JD6cr6sXvYYtZAbfMHnIvs3NB5wxEPYvmySCa02dpka4u66UL6OS3LD/N4 Mj2SxWoo8YjNKkvcmuDdwhHfmMQQZ0Y= -----END CERTIFICATE-----Generated at Mon Jul 21 02:28:27 2025 by rpki-client