$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bbd09970-c53a-3b34-8e53-81fb49ec5091.roa File: bbd09970-c53a-3b34-8e53-81fb49ec5091.roa (raw, json) Hash identifier: Y0gImh2+bhPmLr9sliGiBfbUVZrvRCoH9TOt2LYTVuU= Subject key identifier: 5C:6D:9C:DF:1A:3F:8A:1C:98:D4:6A:DF:D4:30:6A:E8:59:F1:64:2D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A814640F6D949728BC0572C80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bbd09970-c53a-3b34-8e53-81fb49ec5091.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 7018 IP address blocks: 173.214.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:40:f6:d9:49:72:8b:c0:57:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=dd82c530-e79a-481e-8c6b-b75697f40262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:84:05:ef:9c:ec:c3:af:60:96:93:1d:08:42: 87:9c:94:c9:fd:e3:f1:6a:d9:85:9f:15:e3:fa:35: 4a:1a:90:a2:6e:ea:a8:c4:91:02:5b:04:ae:5a:94: d8:c1:f6:8e:eb:05:3c:4f:99:ca:fa:ba:c4:e7:19: a4:90:93:fb:de:ad:25:8f:44:af:ff:ab:db:0d:8d: ff:d3:50:d6:dc:84:63:33:1e:7e:f5:30:f0:72:00: 27:c4:ff:d3:eb:61:21:a3:b6:3e:ee:bb:9d:5d:9d: d4:09:ce:f1:e0:4b:49:48:e1:c8:73:58:51:da:8a: fd:5e:fc:95:74:63:3d:03:80:26:fe:79:e8:b9:65: 57:bc:29:a2:b7:ad:e6:57:5f:db:c2:1a:bb:e4:2a: 7d:91:24:8a:e2:06:c8:fb:32:05:6b:c4:89:48:3f: 95:54:8e:e5:72:65:53:e6:63:d6:87:e3:df:75:b0: ac:93:98:e8:e2:0b:10:74:41:90:73:58:0a:2c:00: 20:b9:a9:d2:fa:e5:93:c5:cf:51:2e:6e:29:77:df: 15:09:27:76:cf:88:0c:03:7c:03:8f:6c:87:c8:ce: 24:c2:3f:16:fc:c4:95:61:55:b8:5f:a8:94:8a:10: 32:dd:78:a7:0e:8d:ea:b4:d9:5f:30:87:60:8a:05: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6D:9C:DF:1A:3F:8A:1C:98:D4:6A:DF:D4:30:6A:E8:59:F1:64:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bbd09970-c53a-3b34-8e53-81fb49ec5091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 173.214.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e8:64:16:c1:3e:f0:ff:ca:a3:f7:95:e2:5a:c6:5d:8a:71: af:39:b6:97:8b:72:a8:8d:7b:c1:76:20:d0:c3:68:2a:fe:60: f1:48:18:69:cf:e0:ca:b1:69:70:de:a7:4d:05:39:1a:f3:7b: 26:a5:d9:ae:13:82:55:91:64:20:63:7b:aa:ba:87:2e:29:4c: e5:7c:91:ee:57:03:fa:eb:1d:04:a0:20:e2:b5:85:02:8b:17: f2:3a:52:e8:ec:db:c3:cf:9c:30:30:71:f0:76:86:f3:8e:4e: 9b:d1:38:09:3b:26:25:d1:da:c6:1b:36:76:cf:33:85:85:86: 27:e9:f7:fc:c5:61:d5:df:17:17:d1:33:39:53:8e:8a:12:d0: 16:96:69:1f:cc:ce:bd:1d:83:b4:e3:34:11:62:c7:c1:53:d3: 39:a3:ac:d9:0a:95:5a:c9:20:ca:b2:6e:aa:95:e9:9a:c9:85: 53:c7:af:41:d4:ea:6a:d2:54:db:3d:1c:5b:bb:3d:10:d8:32: 9e:c0:0d:05:9e:57:92:03:ff:48:40:9b:b2:32:53:17:12:59: 1a:b8:a4:99:eb:70:e3:01:fc:3d:8c:9d:5d:a3:37:d9:e0:a9: 36:ef:83:42:e6:f7:ad:d0:a0:3b:63:e7:d9:a2:05:0b:96:1f: 8e:43:16:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkD22Ulyi8BXLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGQ4MmM1MzAtZTc5YS00ODFlLThjNmItYjc1Njk3ZjQwMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4QF75zsw69glpMdCEKHnJTJ/ePxatmFnxXj +jVKGpCibuqoxJECWwSuWpTYwfaO6wU8T5nK+rrE5xmkkJP73q0lj0Sv/6vbDY3/ 01DW3IRjMx5+9TDwcgAnxP/T62Eho7Y+7rudXZ3UCc7x4EtJSOHIc1hR2or9XvyV dGM9A4Am/nnouWVXvCmit63mV1/bwhq75Cp9kSSK4gbI+zIFa8SJSD+VVI7lcmVT 5mPWh+PfdbCsk5jo4gsQdEGQc1gKLAAguanS+uWTxc9RLm4pd98VCSd2z4gMA3wD j2yHyM4kwj8W/MSVYVW4X6iUihAy3XinDo3qtNlfMIdgigXXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxtnN8aP4ocmNRq39QwauhZ8WQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmJkMDk5NzAtYzUzYS0z YjM0LThlNTMtODFmYjQ5ZWM1MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/oZBbBPvD/yqP3leJaxl2Kca85tpeLcqiNe8F2INDDaCr+YPFIGGnP 4MqxaXDep00FORrzeyal2a4TglWRZCBje6q6hy4pTOV8ke5XA/rrHQSgIOK1hQKL F/I6Uujs28PPnDAwcfB2hvOOTpvROAk7JiXR2sYbNnbPM4WFhifp9/zFYdXfFxfR MzlTjooS0BaWaR/Mzr0dg7TjNBFix8FT0zmjrNkKlVrJIMqybqqV6ZrJhVPHr0HU 6mrSVNs9HFu7PRDYMp7ADQWeV5ID/0hAm7IyUxcSWRq4pJnrcOMB/D2MnV2jN9ng qTbvg0Lm963QoDtj59miBQuWH45DFkk= -----END CERTIFICATE-----Generated at Sun Jul 20 16:28:22 2025 by rpki-client