$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa File: a754082f-4513-3ee8-a390-23ea11051903.roa (raw, json) Hash identifier: IadCV0CJ9pwQ1rcVfSo8hHM3PWb8xYCZKIwd/Ecxomw= Subject key identifier: 70:7B:DF:00:42:74:94:10:1E:7D:66:1E:74:67:F7:82:96:ED:A4:8B Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE097FB9AD294E6D7E2AE40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 167.94.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:97:fb:9a:d2:94:e6:d7:e2:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=c3eac771-6313-4418-ae78-b8d88075663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:5e:62:49:da:15:e8:9d:04:bc:36:8b:f7: 1d:6d:75:69:5d:50:9f:09:5e:2c:3a:b7:2b:94:bc: c0:f2:71:99:ff:f8:02:1d:79:bb:09:2b:d3:aa:5b: 0c:90:1c:7e:eb:8f:96:48:c3:60:32:79:33:ba:53: d5:4f:66:13:df:77:29:cd:e9:b1:c2:27:2f:2a:f1: 6c:80:51:ba:e5:7b:c9:c6:cf:10:59:a2:da:11:54: 97:dd:32:48:e7:61:e7:ed:ec:30:82:dd:e2:b5:c4: f9:75:47:5e:15:54:2b:fe:bd:ba:8d:a8:6d:c3:6d: 4a:22:85:4a:2f:b9:20:71:cd:7b:8d:3e:5e:76:28: 4d:f9:82:5f:8b:71:5a:12:c7:b4:0b:e8:3c:1a:c1: c1:50:b8:ae:09:7d:be:c9:6b:e6:4e:6c:17:5a:b5: b9:e3:c8:66:12:36:6e:4d:83:b2:c7:aa:2c:14:03: 3a:42:3c:52:d8:d3:58:29:57:b5:db:63:b0:3f:55: 79:be:94:49:ad:fb:f9:d9:43:6d:05:66:a8:59:d3: a5:02:56:53:83:f7:4e:9e:d1:b7:9d:db:e3:81:3c: a5:6d:89:ca:ea:50:d2:04:ef:cb:b3:d0:85:f0:28: 75:89:69:61:4c:6d:37:f1:1d:66:42:32:a6:1d:b9: 0a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7B:DF:00:42:74:94:10:1E:7D:66:1E:74:67:F7:82:96:ED:A4:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a754082f-4513-3ee8-a390-23ea11051903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ff:4a:c5:df:91:e5:23:04:a4:85:7e:1a:3c:89:67:fb:8b: a9:10:09:fc:68:ca:30:a7:74:86:34:b7:e2:a8:ff:8b:a8:7c: 9a:50:a9:30:77:41:f6:c7:be:b6:2a:18:83:41:0a:41:48:8b: 80:91:67:dd:7e:56:52:e0:3d:0e:2a:6d:39:9c:da:85:14:45: 7f:28:85:ec:ed:9e:03:fa:79:e7:81:e7:0f:2a:99:97:00:4a: e7:db:e1:e0:44:96:d6:2f:31:49:47:82:ba:5e:34:a5:9b:5b: dd:d6:27:bf:17:32:9c:1b:5a:6f:dd:a2:62:73:5d:f9:87:07: 55:32:5c:ed:0a:65:40:d9:ab:24:8d:47:cc:f9:8c:82:9a:d7: 9a:6e:a4:ba:04:47:2b:d4:06:be:6c:1a:2a:8c:71:1e:0c:aa: ce:9f:9f:41:e0:41:2d:a7:1f:59:c3:e4:97:11:03:56:6a:be: e0:79:6b:d2:54:e8:00:df:ed:f2:44:df:c8:69:13:99:92:db: 72:9d:41:52:69:95:9b:50:90:84:9a:7d:d5:ec:b5:94:0b:a2: 8f:ed:9f:e1:b4:68:bc:42:ed:b1:66:ef:f3:49:da:4d:18:76: 9d:20:c0:d8:a6:79:26:68:ed:a1:59:5c:ea:b8:ee:5f:dc:e6: 3f:bd:0e:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jf7mtKU5tfirkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk YzNlYWM3NzEtNjMxMy00NDE4LWFlNzgtYjhkODgwNzU2NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcpeYknaFeidBLw2i/cdbXVpXVCfCV4sOrcr lLzA8nGZ//gCHXm7CSvTqlsMkBx+64+WSMNgMnkzulPVT2YT33cpzemxwicvKvFs gFG65XvJxs8QWaLaEVSX3TJI52Hn7ewwgt3itcT5dUdeFVQr/r26jahtw21KIoVK L7kgcc17jT5edihN+YJfi3FaEse0C+g8GsHBULiuCX2+yWvmTmwXWrW548hmEjZu TYOyx6osFAM6QjxS2NNYKVe122OwP1V5vpRJrfv52UNtBWaoWdOlAlZTg/dOntG3 ndvjgTylbYnK6lDSBO/Ls9CF8Ch1iWlhTG038R1mQjKmHbkKBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB73wBCdJQQHn1mHnRn94KW7aSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTc1NDA4MmYtNDUxMy0z ZWU4LWEzOTAtMjNlYTExMDUxOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz/SsXfkeUjBKSFfho8iWf7i6kQCfxoyjCndIY0t+Ko/4uofJpQqTB3 QfbHvrYqGINBCkFIi4CRZ91+VlLgPQ4qbTmc2oUURX8oheztngP6eeeB5w8qmZcA Sufb4eBEltYvMUlHgrpeNKWbW93WJ78XMpwbWm/domJzXfmHB1UyXO0KZUDZqySN R8z5jIKa15pupLoERyvUBr5sGiqMcR4Mqs6fn0HgQS2nH1nD5JcRA1ZqvuB5a9JU 6ADf7fJE38hpE5mS23KdQVJplZtQkISafdXstZQLoo/tn+G0aLxC7bFm7/NJ2k0Y dp0gwNimeSZo7aFZXOq47l/c5j+9DqQ= -----END CERTIFICATE-----Generated at Sun Jul 20 14:56:27 2025 by rpki-client