$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa File: c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa (raw, json) Hash identifier: /kbtPsmfS4KleIav91gcdM0TFvDLzx4cv3Xd/j16yF4= Subject key identifier: D0:2C:1F:A4:23:44:0A:A2:A9:0C:C7:8E:99:32:70:CD:7C:BC:43:5A Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE0980CF3C1EF11FADA2600 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 167.94.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:98:0c:f3:c1:ef:11:fa:da:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=7f7fcee7-9d38-40ff-90fa-05316db6bbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d0:71:e4:11:d4:d5:ff:40:7f:99:33:a9:75: a1:5a:0a:e3:7f:a3:e2:4a:40:4c:a6:ec:7b:ec:06: 13:86:af:f4:10:9c:20:4a:85:88:c2:35:b1:34:10: 84:fc:27:2e:9d:83:67:16:61:86:57:1c:6f:d2:83: c9:1b:c1:68:46:0b:a0:5b:1c:ee:06:2f:44:e9:b2: 97:15:2f:bb:b8:0b:63:0c:9b:51:7d:de:7f:2c:65: b2:58:47:b1:16:74:3d:21:4c:63:b9:09:61:d2:c1: c2:aa:c1:f0:2e:f7:86:da:40:66:74:5d:5e:82:3b: 49:07:62:81:96:6a:01:1a:74:c4:63:8f:f1:5d:d1: 37:24:e3:d1:91:82:5a:96:c2:2e:1b:e2:5f:3e:67: 41:dd:26:df:47:b4:fc:25:61:a7:cd:b6:7f:14:82: 4f:d4:25:dd:8f:82:e3:fb:7b:d6:6a:0d:25:38:19: ec:bd:7b:d0:41:4f:41:68:e3:49:ad:5a:ce:92:67: 11:ea:6b:d5:90:39:05:e1:26:17:1e:b3:c7:c7:02: 25:c5:c8:d2:ae:ac:a4:e9:13:d2:fd:bb:7b:b4:62: 66:b2:72:c1:08:66:eb:ab:9a:31:99:d5:a4:d5:81: a1:0c:9a:ed:b9:cb:03:74:60:51:88:a5:0b:5f:1b: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2C:1F:A4:23:44:0A:A2:A9:0C:C7:8E:99:32:70:CD:7C:BC:43:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/c06b1e13-1e5c-37ac-9243-cad8a2871f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2a:d7:58:20:be:c4:a9:e2:db:fb:54:61:ea:1f:13:e2:c2: b7:67:b6:b7:34:7c:44:e5:f0:dc:c7:92:c5:00:8c:2a:25:bb: 84:05:84:ea:ec:09:54:dd:0c:c9:c4:34:7d:5c:ce:24:3b:cf: 02:37:99:3c:8b:d5:62:b4:65:a6:7b:2b:05:c6:c9:e3:a2:29: c2:c5:af:65:05:8f:57:d1:f6:ea:1f:a5:e9:98:ee:64:1b:8f: 33:4f:d6:f6:ad:33:6b:67:28:b1:d3:e1:f1:c1:5b:55:12:d6: 12:e0:8c:ca:04:2b:9c:e2:c7:68:53:41:63:e7:ec:b1:89:ff: dc:1d:f9:f5:c3:64:1f:d9:3e:51:15:8f:a8:df:c5:ba:b2:1b: 0d:88:e4:2f:e5:18:02:26:b7:33:af:23:fe:03:00:c7:5e:6a: f3:88:d6:fe:8e:67:74:4c:bd:67:3d:60:95:c8:46:b9:0a:44: 1c:8e:ef:66:08:53:d6:06:94:d3:06:bc:ec:bb:1d:df:45:92: e4:1f:f2:10:64:13:8f:9d:ac:a8:70:4e:61:cb:aa:24:11:7f: 51:23:b9:15:af:82:06:f3:77:ef:60:91:8c:51:cc:bd:96:11: ac:aa:8b:31:ad:c8:dc:e4:7f:09:46:10:8f:18:8c:84:67:e4: 3e:72:a7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JgM88HvEfraJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk N2Y3ZmNlZTctOWQzOC00MGZmLTkwZmEtMDUzMTZkYjZiYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dBx5BHU1f9Af5kzqXWhWgrjf6PiSkBMpux7 7AYThq/0EJwgSoWIwjWxNBCE/CcunYNnFmGGVxxv0oPJG8FoRgugWxzuBi9E6bKX FS+7uAtjDJtRfd5/LGWyWEexFnQ9IUxjuQlh0sHCqsHwLveG2kBmdF1egjtJB2KB lmoBGnTEY4/xXdE3JOPRkYJalsIuG+JfPmdB3SbfR7T8JWGnzbZ/FIJP1CXdj4Lj +3vWag0lOBnsvXvQQU9BaONJrVrOkmcR6mvVkDkF4SYXHrPHxwIlxcjSrqyk6RPS /bt7tGJmsnLBCGbrq5oxmdWk1YGhDJrtucsDdGBRiKULXxtjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAsH6QjRAqiqQzHjpkycM18vENaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYzA2YjFlMTMtMWU1Yy0z N2FjLTkyNDMtY2FkOGEyODcxZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp16eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwq11ggvsSp4tv7VGHqHxPiwrdntrc0fETl8NzHksUAjColu4QFhOrs CVTdDMnENH1cziQ7zwI3mTyL1WK0ZaZ7KwXGyeOiKcLFr2UFj1fR9uofpemY7mQb jzNP1vatM2tnKLHT4fHBW1US1hLgjMoEK5zix2hTQWPn7LGJ/9wd+fXDZB/ZPlEV j6jfxbqyGw2I5C/lGAImtzOvI/4DAMdeavOI1v6OZ3RMvWc9YJXIRrkKRByO72YI U9YGlNMGvOy7Hd9FkuQf8hBkE4+drKhwTmHLqiQRf1EjuRWvggbzd+9gkYxRzL2W EayqizGtyNzkfwlGEI8YjIRn5D5yp2o= -----END CERTIFICATE-----Generated at Sun Jul 20 14:53:16 2025 by rpki-client