$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/474f025a-32e9-3b41-ab03-4d107ec88789.roa File: 474f025a-32e9-3b41-ab03-4d107ec88789.roa (raw, json) Hash identifier: pmkbnHTTR7Vm/0sIKQU9Mhk0AAeHeSCiinNIwHArYwk= Subject key identifier: 69:3F:47:65:4A:9B:F2:06:EB:A4:E0:5F:78:C7:BB:9E:FA:76:C8:33 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584A480AE7D4E81C37C81BBFACC0 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/474f025a-32e9-3b41-ab03-4d107ec88789.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 9009 IP address blocks: 216.158.193.0/24 maxlen: 24 216.158.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e7:d4:e8:1c:37:c8:1b:bf:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=0d97b510-628d-4e3d-9bee-f44e2d150c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:c5:fb:bb:58:37:63:59:ee:fa:2b:9d:90: 29:59:e9:8f:6d:83:f6:be:98:7a:ed:84:0f:9f:9c: 07:d7:d0:97:9d:ea:2a:16:59:06:b5:a9:c4:be:96: 8c:69:29:a9:0e:43:27:c4:d6:cd:df:f9:68:ee:36: d7:db:4b:9a:09:19:98:9d:2a:b5:15:59:3e:b1:3c: aa:fa:e9:1f:53:b0:dc:cb:84:1f:b1:e6:59:8e:25: 52:95:50:c7:4d:d1:bf:fe:43:4b:c9:4f:f2:48:76: 50:b3:e5:f2:94:e1:20:67:64:42:a7:93:2c:6b:6d: 73:9f:7e:30:c5:e2:41:bd:e1:35:44:70:36:48:36: 5d:d5:f9:8f:4c:be:62:dd:23:10:bd:53:48:53:fe: 4a:5d:8b:a7:8b:b2:23:1f:3d:38:09:bb:3c:26:7f: 45:72:65:7c:a2:72:10:8f:f5:b7:0e:87:3d:dd:ce: 30:f5:2a:0e:67:e5:b8:2f:ab:97:42:c5:35:58:32: 37:96:60:ef:5a:03:35:6f:f9:2c:e0:5f:7e:60:0c: 98:17:bd:32:8f:14:d5:0c:57:43:60:99:83:c1:7d: 3b:7f:ac:eb:65:6e:91:05:09:ae:e4:04:f2:72:9c: e9:13:cd:43:31:a5:fa:73:52:31:21:16:c5:b6:3b: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3F:47:65:4A:9B:F2:06:EB:A4:E0:5F:78:C7:BB:9E:FA:76:C8:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/474f025a-32e9-3b41-ab03-4d107ec88789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.193.0/24 216.158.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:00:29:01:6a:67:b6:f2:ea:e9:00:6e:a1:80:3d:20:1a:37: f8:a0:c0:83:ec:2b:50:ac:b8:40:7c:d3:a4:2b:c1:55:5d:f4: 08:da:b3:df:40:0a:4e:2e:cf:db:50:ed:50:5d:0f:2e:30:c4: d9:36:f8:7b:80:2a:a1:ff:1b:10:2e:24:12:02:6e:68:45:08: 73:65:57:be:57:0a:f1:6b:18:d5:f2:6b:eb:83:3d:f7:7b:ca: ea:f9:1e:9b:b7:a2:d0:78:64:f8:ae:41:79:df:d4:c8:ac:84: ef:23:c1:ae:a0:a2:cf:60:4f:72:cf:e1:ea:5f:f4:52:ef:ab: 83:f2:80:ee:8a:ea:54:f2:f1:dd:16:86:4b:10:0a:80:d6:15: 31:5b:6a:f5:81:bb:45:f4:ba:27:1a:9e:34:8d:dd:21:e3:5a: c4:50:ef:bd:33:80:b2:0c:e0:bd:8d:c6:57:f8:48:6e:44:bd: 17:45:bd:91:b8:48:ea:b9:f1:f1:43:12:19:08:64:c7:a1:12: 2f:bb:b1:a8:eb:75:c9:11:82:e6:0e:0b:0e:7c:74:82:55:26: 15:c3:d5:76:8d:e1:70:3e:14:fa:d4:5f:d2:86:43:d4:3e:1c: 53:8f:83:c8:12:82:66:fd:d7:b4:4a:2d:76:a2:92:af:72:43: e5:8d:7c:0d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpICufU6Bw3yBu/rMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MGQ5N2I1MTAtNjI4ZC00ZTNkLTliZWUtZjQ0ZTJkMTUwYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVrF+7tYN2NZ7vornZApWemPbYP2vph67YQP n5wH19CXneoqFlkGtanEvpaMaSmpDkMnxNbN3/lo7jbX20uaCRmYnSq1FVk+sTyq +ukfU7Dcy4QfseZZjiVSlVDHTdG//kNLyU/ySHZQs+XylOEgZ2RCp5Msa21zn34w xeJBveE1RHA2SDZd1fmPTL5i3SMQvVNIU/5KXYuni7IjHz04Cbs8Jn9FcmV8onIQ j/W3Doc93c4w9SoOZ+W4L6uXQsU1WDI3lmDvWgM1b/ks4F9+YAyYF70yjxTVDFdD YJmDwX07f6zrZW6RBQmu5ATycpzpE81DMaX6c1IxIRbFtjsQRwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGk/R2VKm/IG66TgX3jHu576dsgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNDc0ZjAyNWEtMzJlOS0z YjQxLWFiMDMtNGQxMDdlYzg4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2J7BAwQA 2J7bMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAIAKQFqZ7by6ukAbqGAPSAaN/igwIPsK1CsuEB806QrwVVd 9Ajas99ACk4uz9tQ7VBdDy4wxNk2+HuAKqH/GxAuJBICbmhFCHNlV75XCvFrGNXy a+uDPfd7yur5Hpu3otB4ZPiuQXnf1MishO8jwa6gos9gT3LP4epf9FLvq4PygO6K 6lTy8d0WhksQCoDWFTFbavWBu0X0uicanjSN3SHjWsRQ770zgLIM4L2Nxlf4SG5E vRdFvZG4SOq58fFDEhkIZMehEi+7sajrdckRguYOCw58dIJVJhXD1XaN4XA+FPrU X9KGQ9Q+HFOPg8gSgmb917RKLXaikq9yQ+WNfA0= -----END CERTIFICATE-----Generated at Sun Jul 20 11:21:26 2025 by rpki-client