$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa File: 77249fb6-3491-3c4a-b600-9e887b42f36b.roa (raw, json) Hash identifier: oEHfwrkpZznOEsZyMc88Tj9gDeeKHLQsZB7560kHNcg= Subject key identifier: 8C:92:05:62:10:60:B0:6F:94:A4:FD:F8:CA:49:01:44:00:A9:39:08 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584A1B5FF7C86B7AC3EF50D97A80 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 62856 IP address blocks: 162.248.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f7:c8:6b:7a:c3:ef:50:d9:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=65429eaf-e073-4235-9220-1f12767af569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:de:64:30:f6:9c:ce:17:f2:41:5b:6d:5d: 3e:2a:d0:8e:b9:fa:b5:f6:bc:bf:c8:ed:16:85:6b: 3a:ca:a7:3c:f6:2a:77:82:15:91:76:53:3d:27:68: d4:93:e6:67:49:1d:a9:fb:6e:74:8b:da:56:2d:22: f4:cd:70:c3:a0:10:48:0e:45:01:ec:37:5f:2d:6d: 31:d0:c8:44:c9:db:f9:7a:d3:26:49:cd:63:bf:77: 18:9e:26:2e:f2:91:d0:19:da:9d:e9:5e:bc:aa:4b: c4:9d:d6:51:e5:83:6c:89:46:55:64:0a:f6:ef:63: 9c:4d:ec:b8:79:38:3a:42:97:36:ad:85:11:8a:ea: 08:ed:c8:5e:d3:ed:45:1e:91:be:cc:82:98:ea:d2: 1c:05:78:7f:13:64:4c:62:c4:da:66:0d:78:5f:06: 15:13:27:36:a0:22:c9:95:d3:6c:41:b3:25:bd:45: 5c:a4:7d:39:24:5f:98:2e:ed:f9:8c:9d:6d:7c:af: 20:af:d3:52:ef:e0:62:e4:72:dc:57:d7:59:d5:55: 99:3e:c0:f1:10:67:3f:82:d1:98:1a:f4:53:90:fe: 16:89:4e:75:a9:6e:26:43:e3:e3:b0:d7:f0:5f:8f: b5:97:c6:43:fb:ac:bc:77:de:85:e5:a7:91:91:d6: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:92:05:62:10:60:B0:6F:94:A4:FD:F8:CA:49:01:44:00:A9:39:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 162.248.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ef:9c:29:5a:f8:6b:b3:9f:a6:98:f8:7e:00:b9:6b:2b:ab: dd:e7:6b:a4:af:96:5c:a2:5b:a8:fb:27:71:79:30:4c:dd:a3: d3:c7:dc:88:fa:67:6b:6f:a3:90:57:8a:8b:7d:12:6c:3a:a1: d8:10:79:2e:ad:19:39:12:8f:93:e8:cc:59:5a:32:91:65:56: 44:e5:3d:8c:df:22:9f:18:87:59:04:e0:1b:1d:2c:bf:12:ba: 00:90:20:a4:8b:f2:46:94:7b:55:0f:b0:76:84:98:96:4e:81: e5:43:b3:36:87:1e:ce:d5:36:ce:8b:39:36:36:38:f4:de:0a: ed:e6:3f:d7:cb:45:92:66:32:b9:e1:ec:75:d7:99:c7:5a:21: d2:c1:6b:23:33:3d:fd:c6:34:a3:4e:4c:2b:a0:c6:86:c2:d7: 31:55:87:aa:e2:42:9a:90:1a:34:5c:d5:08:85:9e:8f:5e:b9: 78:b4:ef:b9:cb:7b:d1:34:c5:98:88:b4:91:a6:2f:f3:f0:aa: a3:88:11:d1:85:21:6e:88:17:22:65:51:8b:18:1e:96:76:da: f3:7a:b3:cf:dc:6f:eb:48:ff:75:9d:2f:bc:e5:27:5d:93:cb: a4:b5:b2:96:cd:cb:a2:fa:ee:64:07:31:b1:37:f6:fc:35:9b: b0:37:9d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/fIa3rD71DZeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NjU0MjllYWYtZTA3My00MjM1LTkyMjAtMWYxMjc2N2FmNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM3eZDD2nM4X8kFbbV0+KtCOufq19ry/yO0W hWs6yqc89ip3ghWRdlM9J2jUk+ZnSR2p+250i9pWLSL0zXDDoBBIDkUB7DdfLW0x 0MhEydv5etMmSc1jv3cYniYu8pHQGdqd6V68qkvEndZR5YNsiUZVZAr272OcTey4 eTg6Qpc2rYURiuoI7che0+1FHpG+zIKY6tIcBXh/E2RMYsTaZg14XwYVEyc2oCLJ ldNsQbMlvUVcpH05JF+YLu35jJ1tfK8gr9NS7+Bi5HLcV9dZ1VWZPsDxEGc/gtGY GvRTkP4WiU51qW4mQ+PjsNfwX4+1l8ZD+6y8d96F5aeRkdbtdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIySBWIQYLBvlKT9+MpJAUQAqTkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNzcyNDlmYjYtMzQ5MS0z YzRhLWI2MDAtOWU4ODdiNDJmMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovi4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbvnCla+Guzn6aY+H4AuWsrq93na6SvllyiW6j7J3F5MEzdo9PH3Ij6 Z2tvo5BXiot9Emw6odgQeS6tGTkSj5PozFlaMpFlVkTlPYzfIp8Yh1kE4BsdLL8S ugCQIKSL8kaUe1UPsHaEmJZOgeVDszaHHs7VNs6LOTY2OPTeCu3mP9fLRZJmMrnh 7HXXmcdaIdLBayMzPf3GNKNOTCugxobC1zFVh6riQpqQGjRc1QiFno9euXi077nL e9E0xZiItJGmL/PwqqOIEdGFIW6IFyJlUYsYHpZ22vN6s8/cb+tI/3WdL7zlJ12T y6S1spbNy6L67mQHMbE39vw1m7A3nR8= -----END CERTIFICATE-----Generated at Sun Jul 27 12:56:15 2025 by rpki-client