$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/2908a4cd-4951-32ee-a21d-d8a9e218b0e4.roa File: 2908a4cd-4951-32ee-a21d-d8a9e218b0e4.roa (raw, json) Hash identifier: xhp0lzRKVQ4zZN34QhlO61eVea2gPHOxwFf38DXhMR0= Subject key identifier: 69:76:45:42:3A:FD:B9:D8:05:28:CE:04:9E:7A:78:92:9B:DC:F1:8D Certificate issuer: /CN=69233f52-8a17-4eb0-ae6a-62c861686718 Certificate serial: 010D0C9F4328584A5C97824E0D360F142C0E0300 Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/2908a4cd-4951-32ee-a21d-d8a9e218b0e4.roa Signing time: Mon 30 Jun 2025 09:40:24 +0000 ROA not before: Mon 30 Jun 2025 09:40:24 +0000 ROA not after: Sun 28 Sep 2025 09:40:24 +0000 asID: 5650 IP address blocks: 167.253.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:97:82:4e:0d:36:0f:14:2c:0e:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718 Validity Not Before: Jun 30 09:40:24 2025 GMT Not After : Sep 28 09:40:24 2025 GMT Subject: CN=655e0d9a-bc4b-4484-9256-a9e9e3bfed00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:3f:72:3e:e1:25:ed:31:67:27:d5:38:7d: c1:9d:2f:1b:97:24:d5:57:a2:73:c4:93:64:36:cc: 80:04:d4:2f:e5:f4:e1:0e:f8:3b:91:85:a7:dc:1b: a4:5a:6a:eb:e5:65:3d:e6:64:96:43:03:54:e1:2a: e7:14:8c:99:37:8f:86:f4:51:9f:2f:66:64:8f:65: a0:92:cd:f4:9e:41:fc:c1:59:74:c6:24:51:0f:b8: b2:84:8c:8c:c9:59:ac:42:39:1b:3e:4b:c1:e4:5f: 5f:a6:e7:7c:1a:21:38:8c:b0:59:94:7a:52:37:d3: 44:3e:7a:a9:9b:95:71:6a:8e:96:30:cd:85:cd:5d: 9d:64:84:a9:20:97:4f:97:d1:e0:07:2d:41:df:36: bc:ae:cd:b0:57:2f:02:cd:a0:99:c2:54:df:24:c0: 15:d9:b6:3a:9f:4f:ab:a6:33:3f:18:79:a5:4f:63: d9:20:fd:fa:37:e3:6b:79:a1:ed:26:58:2d:e2:cd: df:74:26:0d:b8:f6:c4:37:07:61:66:aa:27:cd:d1: cc:bc:ef:d4:2f:d3:91:74:72:a2:27:f2:53:3c:c3: b8:eb:c0:25:a3:76:c3:53:84:7b:82:e6:8e:0f:87: 27:46:ba:85:e7:6e:68:d0:b1:3d:39:fa:27:66:8a: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:76:45:42:3A:FD:B9:D8:05:28:CE:04:9E:7A:78:92:9B:DC:F1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/2908a4cd-4951-32ee-a21d-d8a9e218b0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl X509v3 Authority Key Identifier: keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer sbgp-ipAddrBlock: critical IPv4: 167.253.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c5:75:89:4f:fb:a8:af:a2:46:a2:8a:a6:b0:98:92:02:7c: e5:19:31:6a:6c:f5:2d:2b:92:fa:40:74:1f:4d:8a:6f:c7:25: 82:e2:22:22:f2:18:49:6a:a9:f3:32:af:98:ba:97:cb:7c:e4: 3f:f4:ae:80:61:4b:22:8b:5e:a9:2d:44:31:18:36:42:27:40: 59:e4:f4:bc:d6:eb:90:3d:46:97:9c:0b:e1:09:22:40:50:57: b9:88:cb:50:f9:4d:1e:3c:59:12:03:ec:87:33:c6:26:cb:65: db:e8:b1:cf:be:51:93:e9:a2:22:67:a1:05:62:a8:43:ff:1f: d1:ab:e7:e7:e9:3a:85:d6:3a:60:ef:0f:85:b9:13:bf:72:50: 13:62:b5:56:96:6b:40:e0:bf:bb:a0:83:b2:79:30:20:eb:01: 9e:22:ca:1f:e8:b8:e0:8e:96:9d:45:ac:da:d9:f3:c1:37:fc: 7b:93:f3:8d:28:1e:ba:ac:1c:37:5d:d8:54:c4:cb:89:6e:44: ac:05:38:23:59:9d:36:69:88:94:fe:03:dc:58:cc:21:a5:9a: 03:e3:65:d1:4a:ed:2d:17:3e:01:67:82:68:f4:cb:af:a9:ee: 90:fd:ae:7a:e6:93:d9:6c:a1:7c:e4:85:f4:1c:05:c2:6e:54: 32:f9:94:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpcl4JODTYPFCwOAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkyMzNmNTItOGExNy00ZWIwLWFlNmEtNjJjODYxNjg2 NzE4MB4XDTI1MDYzMDA5NDAyNFoXDTI1MDkyODA5NDAyNFowLzEtMCsGA1UEAxMk NjU1ZTBkOWEtYmM0Yi00NDg0LTkyNTYtYTllOWUzYmZlZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw80/cj7hJe0xZyfVOH3BnS8blyTVV6JzxJNk NsyABNQv5fThDvg7kYWn3BukWmrr5WU95mSWQwNU4SrnFIyZN4+G9FGfL2Zkj2Wg ks30nkH8wVl0xiRRD7iyhIyMyVmsQjkbPkvB5F9fpud8GiE4jLBZlHpSN9NEPnqp m5Vxao6WMM2FzV2dZISpIJdPl9HgBy1B3za8rs2wVy8CzaCZwlTfJMAV2bY6n0+r pjM/GHmlT2PZIP36N+NreaHtJlgt4s3fdCYNuPbENwdhZqonzdHMvO/UL9ORdHKi J/JTPMO468Alo3bDU4R7guaOD4cnRrqF525o0LE9OfonZopuzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl2RUI6/bnYBSjOBJ56eJKb3PGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82OTIz M2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4NjE2ODY3MTgvMjkwOGE0Y2QtNDk1MS0z MmVlLWEyMWQtZDhhOWUyMThiMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjkyMzNmNTItOGExNy00ZWIwLWFl NmEtNjJjODYxNjg2NzE4LzY5MjMzZjUyLThhMTctNGViMC1hZTZhLTYyYzg2MTY4 NjcxOC5jcmwwHwYDVR0jBBgwFoAUeQC6dQ2pfMdSLyY/q+/zjvOEgVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82OTIzM2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4 NjE2ODY3MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATFdYlP+6ivokaiiqawmJICfOUZMWps9S0rkvpAdB9Nim/HJYLiIiLy GElqqfMyr5i6l8t85D/0roBhSyKLXqktRDEYNkInQFnk9LzW65A9RpecC+EJIkBQ V7mIy1D5TR48WRID7IczxibLZdvosc++UZPpoiJnoQViqEP/H9Gr5+fpOoXWOmDv D4W5E79yUBNitVaWa0Dgv7ugg7J5MCDrAZ4iyh/ouOCOlp1FrNrZ88E3/HuT840o HrqsHDdd2FTEy4luRKwFOCNZnTZpiJT+A9xYzCGlmgPjZdFK7S0XPgFngmj0y6+p 7pD9rnrmk9lsoXzkhfQcBcJuVDL5lLg= -----END CERTIFICATE-----Generated at Sun Jul 20 14:20:35 2025 by rpki-client