$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa File: a8472b68-cb56-34fd-b329-455d887033e9.roa (raw, json) Hash identifier: 3DaKzAXn4kBVUF7fhy5dD/M5q0JQXVXVv73aNxoMBfY= Subject key identifier: 35:A9:14:8E:0B:F2:60:30:ED:D5:86:6C:FF:CF:6B:E8:46:48:C0:8D Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F4328584A7D15FDB862E7C23E750A8180 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 1100 IP address blocks: 185.216.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:fd:b8:62:e7:c2:3e:75:0a:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=6d6a7c47-18b0-404c-945d-0bd47c917beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:8a:8a:a4:af:7c:c6:06:32:83:0e:ff:a3: fd:fa:29:14:3a:38:b4:80:a2:7b:5a:da:8e:92:d7: 18:61:32:a5:4b:e6:db:5a:60:04:4c:67:1c:12:dd: 9d:83:c1:0d:68:a2:16:c7:bf:1c:b8:4a:f6:b2:73: 0a:c6:ba:ca:a6:96:16:e4:d7:dd:25:8b:d9:6f:98: 27:98:a3:8a:c6:51:79:1c:3f:86:24:bc:35:f2:10: ef:e9:f4:63:6f:52:8c:d4:12:6b:67:71:42:32:76: 6e:4e:27:c4:aa:90:1b:54:8b:b6:56:f2:c8:61:3c: c3:b1:7c:65:8c:3c:51:e3:0c:e4:06:74:6b:d6:63: 32:e6:0b:31:63:1d:c7:ce:be:0c:d4:91:3c:e1:35: a5:44:6f:93:7b:6c:c4:7b:9a:9a:1e:46:71:96:f7: 4a:e2:f4:e8:3e:6d:d0:6d:da:49:68:29:0e:0d:a8: cd:ca:f1:d0:8b:ab:7a:77:4c:6d:8c:9c:00:ba:bb: 0a:e1:18:45:f1:f4:6a:11:29:89:3e:93:ab:29:07: b1:c6:37:dc:fe:4d:d6:3b:90:4c:32:f1:1b:7c:6c: 13:4e:55:44:33:a9:4c:32:1b:11:b6:07:64:34:fb: 56:3b:29:39:91:52:46:78:5e:69:c9:ab:d2:25:14: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A9:14:8E:0B:F2:60:30:ED:D5:86:6C:FF:CF:6B:E8:46:48:C0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:29:6d:7c:50:4e:d3:a3:06:65:56:9b:73:54:d4:9c:39:20: a1:e3:03:f6:42:a1:92:a5:9c:20:58:8d:db:71:d2:75:f2:87: bb:21:d5:22:1d:7e:65:10:9c:6f:7d:2e:e4:a5:a1:fc:12:58: c3:0d:26:e4:89:e8:38:b3:91:0f:a2:f6:29:0a:60:80:e1:72: 51:37:db:a4:50:6c:34:27:10:2d:99:63:44:75:20:33:a0:89: 2c:f0:27:3f:53:5b:ef:29:f7:7d:e3:08:21:26:00:9a:33:8e: 49:2d:8c:f0:25:fa:65:42:a2:f2:b2:73:d1:86:a0:22:b8:e6: a7:c6:09:6c:e1:ab:e3:a6:bd:39:2c:f5:aa:75:01:d2:8b:2a: 0b:05:3e:de:4d:2f:82:19:37:fb:99:60:49:e3:f6:ff:b7:d9: 95:c4:56:8e:ce:95:dc:98:42:a6:f9:e3:bb:f9:65:a7:c5:49: d6:d5:1e:3e:ed:54:3d:dd:ef:33:ce:3f:79:e3:7e:89:f7:47: e1:35:3e:a2:71:c6:4e:93:bc:01:96:bc:11:c6:13:fd:4d:b0: 0e:63:a5:a2:1d:11:b5:1b:f3:da:bc:0e:8f:7e:6d:c1:21:74: 0e:a6:e8:65:6e:31:02:d2:6c:c5:9a:01:76:93:8e:0d:4d:b4: 4e:60:49:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Ff24YufCPnUKgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NmQ2YTdjNDctMThiMC00MDRjLTk0NWQtMGJkNDdjOTE3YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQOKiqSvfMYGMoMO/6P9+ikUOji0gKJ7WtqO ktcYYTKlS+bbWmAETGccEt2dg8ENaKIWx78cuEr2snMKxrrKppYW5NfdJYvZb5gn mKOKxlF5HD+GJLw18hDv6fRjb1KM1BJrZ3FCMnZuTifEqpAbVIu2VvLIYTzDsXxl jDxR4wzkBnRr1mMy5gsxYx3Hzr4M1JE84TWlRG+Te2zEe5qaHkZxlvdK4vToPm3Q bdpJaCkODajNyvHQi6t6d0xtjJwAursK4RhF8fRqESmJPpOrKQexxjfc/k3WO5BM MvEbfGwTTlVEM6lMMhsRtgdkNPtWOyk5kVJGeF5pyavSJRQYJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWpFI4L8mAw7dWGbP/Pa+hGSMCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvYTg0NzJiNjgtY2I1Ni0z NGZkLWIzMjktNDU1ZDg4NzAzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQpbXxQTtOjBmVWm3NU1Jw5IKHjA/ZCoZKlnCBYjdtx0nXyh7sh1SId fmUQnG99LuSlofwSWMMNJuSJ6DizkQ+i9ikKYIDhclE326RQbDQnEC2ZY0R1IDOg iSzwJz9TW+8p933jCCEmAJozjkktjPAl+mVCovKyc9GGoCK45qfGCWzhq+OmvTks 9ap1AdKLKgsFPt5NL4IZN/uZYEnj9v+32ZXEVo7OldyYQqb547v5ZafFSdbVHj7t VD3d7zPOP3njfon3R+E1PqJxxk6TvAGWvBHGE/1NsA5jpaIdEbUb89q8Do9+bcEh dA6m6GVuMQLSbMWaAXaTjg1NtE5gSQU= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:21 2025 by rpki-client