$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa File: 493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa (raw, json) Hash identifier: tRuEqFLuk4GQ2rFRKCr9BBQuI8y3bvcDwXVjkYq03vY= Subject key identifier: 5E:2E:D4:63:CD:A4:61:EF:2A:B3:C3:C0:AA:01:DE:66:48:71:3F:38 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584A6290A0DED07A446294C9BB00 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 212238 IP address blocks: 216.158.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a0:de:d0:7a:44:62:94:c9:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=4a0e15a3-d77d-447f-9b20-470a960fb6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b5:ae:64:07:06:5a:2e:f6:13:d5:7a:1a:b1: 3b:d2:ba:b6:b3:74:d5:51:b4:17:6f:b2:42:41:8a: 9c:1b:02:c3:9b:6b:26:a7:25:0f:26:46:e5:8a:b3: 86:0e:b9:99:12:74:56:bc:ac:06:95:cd:9c:24:3f: af:fa:4d:a6:ab:2a:b0:a7:9a:b1:24:4a:85:d4:c4: c5:ba:62:30:4a:7c:34:fc:3a:3b:fd:f9:32:20:0b: ef:c4:59:36:3c:df:7a:f3:97:e0:91:27:8a:cd:6a: 03:bf:39:93:5c:3c:49:38:37:6c:cd:df:5f:7e:8c: bb:c1:ca:a2:66:33:a7:ec:6e:80:f1:d3:ee:b5:ab: a4:51:31:15:8b:57:f2:cb:9e:7b:40:c6:12:f5:80: 9c:21:65:43:30:15:ec:1e:97:5c:af:d0:44:0d:9b: d5:7b:61:c0:83:d5:b1:16:bd:7f:52:ce:b1:06:1c: e9:95:46:3c:35:e1:a3:9a:d3:52:56:04:18:03:6a: fd:43:34:cf:cd:d3:fd:e0:32:8b:2b:30:c4:8d:e0: c8:4c:69:87:87:1b:2f:26:43:22:b2:03:a8:e8:2b: d1:e9:99:d1:3b:f6:e0:57:80:41:a2:05:df:29:e2: 8c:43:f9:5c:c7:7f:5b:6b:76:98:c8:60:e6:06:e0: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2E:D4:63:CD:A4:61:EF:2A:B3:C3:C0:AA:01:DE:66:48:71:3F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:da:64:15:4f:34:ce:bf:f6:79:18:90:b3:21:50:e7:26:ab: bd:b3:86:58:cb:b5:c7:47:1d:5e:70:f6:dd:3d:70:5d:16:12: 27:18:82:cf:38:99:66:c6:6f:e5:c2:b0:40:77:62:4c:89:66: c2:9b:e1:c8:93:d8:25:c9:17:82:c8:af:90:f7:f4:bd:97:65: 22:f6:ec:ec:df:7c:7f:c3:cd:88:26:78:8e:0b:93:ee:e7:4e: cc:bb:ca:6e:14:33:6b:e2:f3:68:1e:f8:83:8a:6a:8e:38:94: d7:7b:c6:4c:d3:c3:a7:71:49:77:4d:b1:f9:14:a2:27:a0:06: e7:0b:46:60:41:50:dc:0a:0b:5c:11:55:0a:fe:ac:e2:f9:e8: b8:e9:a1:63:88:12:6d:c5:81:d4:0f:d1:16:aa:3f:72:8e:c3: 7a:12:b6:c8:ce:6d:37:fd:90:66:66:f8:47:86:c1:95:92:84: bf:6c:b7:e4:2a:33:df:c3:52:91:1c:e1:b5:eb:16:1d:df:66: 4c:96:ba:3e:87:12:30:98:02:57:ad:45:47:f4:cb:77:20:c2: 21:2c:43:29:51:cb:d4:06:89:10:d9:7a:6a:db:81:18:72:ab: 63:93:96:2a:cd:9b:58:c4:62:a5:85:c0:93:f8:3f:46:c8:4d: 57:f1:82:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKDe0HpEYpTJuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NGEwZTE1YTMtZDc3ZC00NDdmLTliMjAtNDcwYTk2MGZiNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbWuZAcGWi72E9V6GrE70rq2s3TVUbQXb7JC QYqcGwLDm2smpyUPJkblirOGDrmZEnRWvKwGlc2cJD+v+k2mqyqwp5qxJEqF1MTF umIwSnw0/Do7/fkyIAvvxFk2PN9685fgkSeKzWoDvzmTXDxJODdszd9ffoy7wcqi ZjOn7G6A8dPutaukUTEVi1fyy557QMYS9YCcIWVDMBXsHpdcr9BEDZvVe2HAg9Wx Fr1/Us6xBhzplUY8NeGjmtNSVgQYA2r9QzTPzdP94DKLKzDEjeDITGmHhxsvJkMi sgOo6CvR6ZnRO/bgV4BBogXfKeKMQ/lcx39ba3aYyGDmBuCFewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4u1GPNpGHvKrPDwKoB3mZIcT84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNDkzMzUyZGMtMTJlNC0z ZmY1LWFhYTEtYjU0ZDNiMGVmODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J7PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITaZBVPNM6/9nkYkLMhUOcmq72zhljLtcdHHV5w9t09cF0WEicYgs84 mWbGb+XCsEB3YkyJZsKb4ciT2CXJF4LIr5D39L2XZSL27OzffH/DzYgmeI4Lk+7n Tsy7ym4UM2vi82ge+IOKao44lNd7xkzTw6dxSXdNsfkUoiegBucLRmBBUNwKC1wR VQr+rOL56LjpoWOIEm3FgdQP0RaqP3KOw3oStsjObTf9kGZm+EeGwZWShL9st+Qq M9/DUpEc4bXrFh3fZkyWuj6HEjCYAletRUf0y3cgwiEsQylRy9QGiRDZemrbgRhy q2OTlirNm1jEYqWFwJP4P0bITVfxgoU= -----END CERTIFICATE-----Generated at Sun Jul 20 12:56:40 2025 by rpki-client