$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa File: afb66b1c-4c26-3945-b917-6f62e119b9c6.roa (raw, json) Hash identifier: 6LUxG0uh5v+P7CvGH0B/f4bYZMRFi/0qc6bNGBwJrEw= Subject key identifier: 2E:CE:42:7A:64:A0:D5:25:00:D2:CC:C8:BC:05:98:EF:A1:03:EB:82 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A778084B4B69279B38408AC40 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 62610 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:84:b4:b6:92:79:b3:84:08:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=75958c0b-b788-4e1e-a3bf-4922d488f24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:47:fb:28:27:76:8c:fe:91:af:b9:eb:33:4e: e8:71:af:4a:79:d5:8f:5d:42:1c:d7:ee:c9:2a:2b: e6:ac:a9:f4:98:98:5c:e3:51:0c:3a:b2:74:bc:e5: 12:1d:52:c5:85:30:fc:5f:6f:53:be:c2:58:eb:7e: 0b:cf:c1:20:44:e4:3f:8f:21:99:9d:30:c6:f8:3a: 8b:d1:b2:92:cc:52:29:1e:f2:9c:21:32:bb:73:61: 1e:99:dc:b7:8f:a7:00:ac:14:bc:cb:e3:dc:1e:03: 3e:4c:9c:92:ce:52:b0:26:4c:aa:c3:45:4d:1d:cf: 3b:99:ff:1a:46:83:15:cd:c3:9d:0a:f0:d0:e0:04: 67:1e:fc:58:57:f2:a4:b5:1b:20:df:d4:8b:3f:65: 8a:b8:ee:57:03:34:d8:6d:63:3b:f6:00:c8:6d:be: d3:47:85:da:ca:0a:6e:b5:d3:0e:ea:5d:72:c8:dc: f8:64:40:49:f8:9c:86:43:f5:23:e8:f9:78:54:c4: 75:3c:ac:51:5c:a6:e1:d3:90:41:16:5c:4e:61:fc: 96:34:1e:52:6e:e3:59:4e:ff:ec:6e:56:f6:41:d1: dc:9a:12:8c:9a:e7:51:8f:b5:54:71:23:27:a9:e1: dd:b4:c9:cd:df:3d:12:0d:39:4a:ac:44:32:93:11: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CE:42:7A:64:A0:D5:25:00:D2:CC:C8:BC:05:98:EF:A1:03:EB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:2e:e6:a1:89:36:26:9e:86:82:b1:06:0a:5f:dd:0f:11:4f: b3:bd:a2:0a:71:dc:55:1e:c3:51:f4:28:b2:ad:2e:2e:f8:68: 31:22:4b:c8:77:82:fc:36:2a:6b:7f:6a:a0:8d:31:eb:45:57: 4b:72:cb:5b:04:6b:fe:22:b0:52:69:87:de:ab:69:a7:8a:d9: 4b:66:fb:5e:f3:f0:f0:68:46:23:8c:1d:99:d1:fb:53:1d:fd: a3:6e:d1:56:63:8e:4c:cb:84:36:da:28:8f:6a:9e:a3:d4:31: d0:31:1d:63:4a:4b:f8:68:1c:42:72:a3:3b:46:44:45:92:60: 3c:6d:4a:25:c9:56:d6:3a:b7:9d:13:f3:53:aa:81:3f:b3:d8: ee:24:92:d5:7f:65:1f:d7:d6:a9:7e:94:bf:24:34:80:55:43: d9:94:ea:f3:84:93:83:99:c8:9d:6c:47:a4:c4:ca:39:d5:a2: f2:23:96:e2:83:af:9b:15:15:f3:43:d0:e4:bf:82:dc:5f:a7: 76:cb:67:43:08:2a:70:6e:0e:e9:0a:91:65:3e:7c:cc:cd:fe: b5:d3:c1:ee:c1:c5:74:e3:c4:a0:24:9d:bc:74:00:44:32:44: fb:15:63:ec:7c:69:02:56:7a:80:b5:a7:f3:68:e9:c9:ea:cb: 21:da:6b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIS0tpJ5s4QIrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NzU5NThjMGItYjc4OC00ZTFlLWEzYmYtNDkyMmQ0ODhmMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUf7KCd2jP6Rr7nrM07oca9KedWPXUIc1+7J KivmrKn0mJhc41EMOrJ0vOUSHVLFhTD8X29TvsJY634Lz8EgROQ/jyGZnTDG+DqL 0bKSzFIpHvKcITK7c2Eemdy3j6cArBS8y+PcHgM+TJySzlKwJkyqw0VNHc87mf8a RoMVzcOdCvDQ4ARnHvxYV/KktRsg39SLP2WKuO5XAzTYbWM79gDIbb7TR4Xaygpu tdMO6l1yyNz4ZEBJ+JyGQ/Uj6Pl4VMR1PKxRXKbh05BBFlxOYfyWNB5SbuNZTv/s blb2QdHcmhKMmudRj7VUcSMnqeHdtMnN3z0SDTlKrEQykxGi0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7OQnpkoNUlANLMyLwFmO+hA+uCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYWZiNjZiMWMtNGMyNi0z OTQ1LWI5MTctNmY2MmUxMTliOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8u5qGJNiaehoKxBgpf3Q8RT7O9ogpx3FUew1H0KLKtLi74aDEiS8h3 gvw2Kmt/aqCNMetFV0tyy1sEa/4isFJph96raaeK2Utm+17z8PBoRiOMHZnR+1Md /aNu0VZjjkzLhDbaKI9qnqPUMdAxHWNKS/hoHEJyoztGREWSYDxtSiXJVtY6t50T 81OqgT+z2O4kktV/ZR/X1ql+lL8kNIBVQ9mU6vOEk4OZyJ1sR6TEyjnVovIjluKD r5sVFfND0OS/gtxfp3bLZ0MIKnBuDukKkWU+fMzN/rXTwe7BxXTjxKAknbx0AEQy RPsVY+x8aQJWeoC1p/No6cnqyyHaa74= -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:03 2025 by rpki-client