$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23ac19c8-3dc7-31f2-9d83-ee9fbe461a3b.roa File: 23ac19c8-3dc7-31f2-9d83-ee9fbe461a3b.roa (raw, json) Hash identifier: XG5KJWJrTG8pt2AKvjP6deS4Q35zHUuexB3TQcSAVKQ= Subject key identifier: 0F:39:E0:A3:46:79:55:C4:77:15:17:70:86:D3:49:EE:7B:9D:5C:C4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC8C38D7182F2839AFA700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23ac19c8-3dc7-31f2-9d83-ee9fbe461a3b.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 54268 IP address blocks: 107.0.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:8c:38:d7:18:2f:28:39:af:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b6f822cd-2fb3-4005-8436-ec8597721cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:63:42:a4:6b:98:a2:16:a4:5e:f9:c2:64: 0c:75:51:52:42:07:8b:a0:99:29:a2:c0:ae:b4:0d: 41:eb:90:a0:9e:01:1a:7c:80:ac:2f:d1:48:7f:20: ba:14:6a:d5:6e:c2:34:58:3e:81:26:42:22:4c:0f: 95:25:33:d2:96:cb:47:35:bb:e1:6c:a5:06:66:30: 8c:41:61:09:c4:ae:2e:69:61:2c:c9:8d:84:ff:3c: f8:b0:35:6c:d0:0b:50:3f:1a:ec:12:33:01:36:e9: 26:7d:a8:95:5a:61:b7:d1:86:a9:f8:1b:e2:c2:51: 0a:91:f9:b1:64:e1:fb:b7:27:66:da:c1:c0:cf:a1: bc:85:fb:78:6d:15:57:a9:c8:45:71:5b:c2:2d:26: 05:31:5e:66:43:1e:c1:36:bd:1a:8c:2b:5e:c8:e9: 55:39:b1:98:89:77:e7:bd:ce:df:1a:22:e7:ca:4f: a1:0b:e0:4d:78:80:0b:45:8d:91:c8:05:eb:6d:e2: ad:6b:bd:3a:6b:de:2e:49:f9:4f:d5:e3:28:36:17: 32:cc:c1:f2:43:77:29:1a:3a:49:07:a5:af:df:a5: 76:e6:f6:a4:45:96:fc:94:17:60:2f:bc:c9:50:db: 50:08:11:4e:11:36:2b:be:ba:8f:e9:c5:68:87:3c: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:39:E0:A3:46:79:55:C4:77:15:17:70:86:D3:49:EE:7B:9D:5C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23ac19c8-3dc7-31f2-9d83-ee9fbe461a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.0.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:c6:10:19:34:12:b6:b8:73:a2:f7:3a:d6:72:42:3a:da:47: 48:ae:f8:03:fa:09:6a:17:d0:90:34:d1:f1:49:7a:81:57:b8: fb:0c:40:14:dd:7e:89:40:04:1f:91:79:9b:08:41:31:7d:5e: e5:c7:dc:86:17:9e:3f:0c:51:82:a2:be:1c:ec:26:02:98:20: 42:c4:f5:1d:35:34:fe:59:07:31:58:f2:d5:cc:50:80:4b:0b: 56:30:8a:4e:83:2f:45:98:41:79:d9:cb:2f:6c:36:d7:e3:59: d6:92:c3:1a:ae:0f:a9:d1:72:38:f4:34:b7:63:4c:cc:50:bd: 34:ed:7a:66:41:c3:ca:ea:53:e2:c7:be:57:99:00:24:1c:95: df:ef:5a:da:10:e9:4b:18:fe:aa:1f:4e:fa:4e:4c:91:46:ab: 5b:dc:e2:0d:fe:fd:08:51:e0:7f:a3:8e:5e:03:82:f2:ec:6f: bb:62:8b:14:1e:47:57:08:5b:e2:2d:ee:f0:1d:11:ec:0e:9a: 3b:5f:1b:52:5a:77:f7:ed:91:3e:8d:f0:8a:63:51:43:aa:23: 69:18:6e:aa:6a:c7:c1:f1:d9:60:41:5d:46:1b:5f:e6:5a:3e: 1a:57:77:ac:63:f0:5d:7f:49:bd:e6:42:b3:93:28:a2:31:93: 16:da:8b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/Iw41xgvKDmvpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjZmODIyY2QtMmZiMy00MDA1LTg0MzYtZWM4NTk3NzIxY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA1jQqRrmKIWpF75wmQMdVFSQgeLoJkposCu tA1B65CgngEafICsL9FIfyC6FGrVbsI0WD6BJkIiTA+VJTPSlstHNbvhbKUGZjCM QWEJxK4uaWEsyY2E/zz4sDVs0AtQPxrsEjMBNukmfaiVWmG30Yap+BviwlEKkfmx ZOH7tydm2sHAz6G8hft4bRVXqchFcVvCLSYFMV5mQx7BNr0ajCteyOlVObGYiXfn vc7fGiLnyk+hC+BNeIALRY2RyAXrbeKta706a94uSflP1eMoNhcyzMHyQ3cpGjpJ B6Wv36V25vakRZb8lBdgL7zJUNtQCBFOETYrvrqP6cVohzw7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA854KNGeVXEdxUXcIbTSe57nVzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNhYzE5YzgtM2RjNy0z MWYyLTlkODMtZWU5ZmJlNDYxYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbGEBk0Era4c6L3OtZyQjraR0iu+AP6CWoX0JA00fFJeoFXuPsMQBTd folABB+ReZsIQTF9XuXH3IYXnj8MUYKivhzsJgKYIELE9R01NP5ZBzFY8tXMUIBL C1Ywik6DL0WYQXnZyy9sNtfjWdaSwxquD6nRcjj0NLdjTMxQvTTtemZBw8rqU+LH vleZACQcld/vWtoQ6UsY/qofTvpOTJFGq1vc4g3+/QhR4H+jjl4DgvLsb7tiixQe R1cIW+It7vAdEewOmjtfG1Jad/ftkT6N8IpjUUOqI2kYbqpqx8Hx2WBBXUYbX+Za PhpXd6xj8F1/Sb3mQrOTKKIxkxbai8o= -----END CERTIFICATE-----Generated at Sun Jul 20 17:14:13 2025 by rpki-client