$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa File: 8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa (raw, json) Hash identifier: 1xqY965L4Jotdtb+U4w3mT0sr85utIuVhUqdUFKoiBY= Subject key identifier: 06:FF:6D:25:20:6C:C0:DC:47:FB:F5:AE:7C:EA:21:B9:18:D5:96:EE Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584A74B5E153B5B4A86A50DE6F80 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 9009 IP address blocks: 216.158.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:e1:53:b5:b4:a8:6a:50:de:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=ab5ea0df-62f1-4349-b790-9b1ad8fc56bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:00:ff:1c:a9:d3:2d:02:dd:6f:95:fa:80: ea:15:da:99:2f:d6:c3:ea:e0:ac:5e:54:66:0e:4e: 98:47:b9:95:96:74:f8:8b:ba:21:40:82:23:c7:8a: 59:1a:b2:40:34:57:f3:39:fa:00:ad:a2:0c:92:9a: bd:1c:03:4b:77:6c:38:6e:8b:36:d2:14:27:e4:30: b3:33:e7:a5:11:af:b6:23:85:3b:c4:3f:44:7c:95: 37:bf:b9:be:92:1d:57:cb:4a:01:01:04:92:bc:59: e9:c3:c5:20:f0:7b:f3:72:4b:07:04:22:f9:c1:b6: 52:46:38:97:62:ec:ea:33:d5:20:ae:88:1e:c8:ae: 09:93:e7:c4:9c:f1:20:09:ae:4b:d2:e7:76:66:86: 1e:da:54:82:7a:f5:74:32:7b:e6:99:65:fd:9f:b3: d4:c5:b0:3e:a7:ad:78:16:29:2f:18:99:c4:bf:14: a0:33:80:d0:df:db:b6:19:b4:d4:d8:a0:fa:18:8e: 6d:14:86:ec:af:67:be:09:5b:73:63:57:3a:4d:6e: d2:8f:67:2f:f5:da:84:2e:be:eb:f8:78:86:37:c3: 9c:76:7c:5b:f6:7d:10:76:56:9b:8b:63:79:d3:85: f8:c7:07:a2:12:4b:13:00:0b:09:bf:11:33:de:dc: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FF:6D:25:20:6C:C0:DC:47:FB:F5:AE:7C:EA:21:B9:18:D5:96:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:da:31:e7:66:76:1a:6f:d6:36:aa:c2:1d:d6:18:b1:fc:c5: d5:28:f6:be:46:d8:96:3d:a4:a6:c3:d3:14:fe:1c:22:d3:03: 15:af:07:1d:e7:6f:20:0c:99:4a:fe:85:c0:57:4c:8f:b7:ad: ad:32:49:45:b8:4b:e4:4e:58:a4:d1:b8:eb:3a:12:01:64:5b: 8f:66:81:30:8a:1c:ba:9f:2f:3c:92:82:87:5a:07:5b:41:b3: 2f:2c:0c:8f:14:ac:7e:e3:3b:eb:7e:64:e0:da:97:11:ef:d3: a4:f9:d4:a7:8b:0c:e1:49:34:c9:b6:e8:47:ff:a9:3f:12:f7: 76:2b:46:60:6f:39:f7:bc:94:78:f3:14:23:32:6f:9d:a6:c9: df:b0:37:71:4e:8b:cf:35:44:1e:56:05:ca:65:97:33:ed:3b: ba:30:c2:37:2a:5b:6b:5f:01:54:44:c0:b5:a0:65:c9:d5:c4: ad:67:83:c4:18:2f:86:31:54:1d:a8:e3:90:a6:87:95:c0:cb: 62:d5:1a:5a:a1:ba:21:87:60:6b:55:6e:0d:51:8d:fe:be:3a: 6f:5f:a4:08:b3:0b:dd:c6:a2:8b:5c:e7:79:95:24:bc:a5:9e: 47:ac:2a:57:be:5e:1e:a4:27:31:ed:bc:67:53:1c:4d:1d:00: 4b:64:2b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0teFTtbSoalDeb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk YWI1ZWEwZGYtNjJmMS00MzQ5LWI3OTAtOWIxYWQ4ZmM1NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ4A/xyp0y0C3W+V+oDqFdqZL9bD6uCsXlRm Dk6YR7mVlnT4i7ohQIIjx4pZGrJANFfzOfoAraIMkpq9HANLd2w4bos20hQn5DCz M+elEa+2I4U7xD9EfJU3v7m+kh1Xy0oBAQSSvFnpw8Ug8HvzcksHBCL5wbZSRjiX YuzqM9UgrogeyK4Jk+fEnPEgCa5L0ud2ZoYe2lSCevV0MnvmmWX9n7PUxbA+p614 FikvGJnEvxSgM4DQ39u2GbTU2KD6GI5tFIbsr2e+CVtzY1c6TW7Sj2cv9dqELr7r +HiGN8Ocdnxb9n0Qdlabi2N504X4xweiEksTAAsJvxEz3txFuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAb/bSUgbMDcR/v1rnzqIbkY1ZbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvOGY5YzA0M2UtMWVlYi0z NjVjLWJjNDUtMDFmM2FhYzM3ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXaMedmdhpv1jaqwh3WGLH8xdUo9r5G2JY9pKbD0xT+HCLTAxWvBx3n byAMmUr+hcBXTI+3ra0ySUW4S+ROWKTRuOs6EgFkW49mgTCKHLqfLzySgodaB1tB sy8sDI8UrH7jO+t+ZODalxHv06T51KeLDOFJNMm26Ef/qT8S93YrRmBvOfe8lHjz FCMyb52myd+wN3FOi881RB5WBcpllzPtO7owwjcqW2tfAVREwLWgZcnVxK1ng8QY L4YxVB2o45Cmh5XAy2LVGlqhuiGHYGtVbg1Rjf6+Om9fpAizC93Gootc53mVJLyl nkesKle+Xh6kJzHtvGdTHE0dAEtkK0o= -----END CERTIFICATE-----Generated at Sun Jul 20 11:44:24 2025 by rpki-client