$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa File: f851c4bc-a18d-3492-9e35-2d61175cac7b.roa (raw, json) Hash identifier: Vb1eZ+2585YDTkAiSrKKhI4xVbTgqqevGP7qVdw0GXw= Subject key identifier: F2:E5:66:97:CD:58:E5:01:EC:9D:4B:FB:E0:5B:46:E6:93:89:D8:79 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F4328584A5FC5DB009E689E3ABC751C40 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 29909 IP address blocks: 216.157.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:db:00:9e:68:9e:3a:bc:75:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=3d3080d7-28c1-4b5e-8d1f-b96e8ceac1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:3d:8c:21:f2:6b:7c:d3:61:6d:3a:c2:5f: 0e:36:00:9d:f0:ba:96:3d:45:f5:5d:05:08:81:08: d7:5d:79:45:a8:2a:db:62:7a:0c:21:11:63:37:8b: 5c:4f:f7:be:9c:51:12:c7:c2:01:3b:57:fb:7e:17: 7f:3f:68:11:27:4c:3a:e0:c0:59:24:d8:68:4d:54: d4:1a:00:df:e5:87:a1:ba:6e:02:33:2e:30:e4:5f: de:d7:3d:07:ac:19:23:cb:03:93:76:d7:c9:2c:95: 9f:bb:a5:c5:2d:41:e6:9d:51:60:d5:37:a3:c3:9b: 1f:c5:90:a4:a5:27:44:06:d4:82:18:5e:ed:93:a6: 29:01:fe:39:2e:85:3e:22:27:f1:02:8d:ed:1c:1b: ca:19:b8:d9:fa:ba:ce:96:cf:44:7a:ff:6d:7b:d7: a9:bd:5a:ff:e5:61:e4:42:f2:2f:4a:0f:15:35:3a: c6:dc:42:2a:96:b3:bd:5f:31:fa:d8:11:46:2e:b6: e1:90:41:ce:7c:6a:32:71:7f:52:e6:61:dc:49:1f: 3c:d0:5a:c8:c0:c7:a1:15:ef:9a:91:c9:84:40:c5: a2:8e:f5:8b:f4:d9:2f:17:80:d8:47:3f:20:35:5c: 40:11:e1:1c:00:d0:54:5f:4d:4d:3c:d3:59:a6:76: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E5:66:97:CD:58:E5:01:EC:9D:4B:FB:E0:5B:46:E6:93:89:D8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 216.157.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:de:d0:70:79:5c:36:d1:85:4e:51:14:3f:d1:48:5d:08:0d: 37:d7:a9:83:73:8f:02:74:e4:b0:47:0c:95:78:ee:ce:2f:23: 3f:74:a0:3f:6f:69:27:23:3a:ce:0d:9c:8d:74:a2:0c:5a:9f: 6b:3c:58:24:e8:aa:ae:2c:a0:66:11:39:c1:ee:8a:30:fd:63: 82:67:1a:34:cc:d3:ab:dc:34:19:26:1c:f0:94:3e:fd:7f:3e: c3:7f:e0:2f:0c:6c:7e:0d:6c:47:72:20:9d:92:19:0a:b7:84: 2d:a1:e1:32:62:3e:ff:54:e9:70:b3:e3:fa:2d:b4:2e:b0:39: bc:7d:45:b0:fd:10:66:29:c2:32:26:eb:f5:dd:3c:85:c2:0d: 35:d3:bb:20:e4:1a:27:47:6f:ef:40:41:da:ab:d9:04:36:cf: e2:b1:47:42:62:8e:49:4d:4f:c6:3c:28:3b:32:79:52:5f:a2: 19:df:17:de:ed:81:37:96:38:88:c8:22:8e:e3:32:fc:4b:82: aa:51:cd:cf:89:e7:93:3e:b4:95:e3:eb:44:9a:53:6f:7d:a9: f4:1a:0d:e6:95:4d:d2:3a:e9:e7:36:6d:ad:af:2b:05:3b:98: 46:35:62:8a:dd:f7:d6:94:80:61:7e:db:7b:43:66:52:f8:91: 97:ea:d2:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdsAnmieOrx1HEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk M2QzMDgwZDctMjhjMS00YjVlLThkMWYtYjk2ZThjZWFjMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRE9jCHya3zTYW06wl8ONgCd8LqWPUX1XQUI gQjXXXlFqCrbYnoMIRFjN4tcT/e+nFESx8IBO1f7fhd/P2gRJ0w64MBZJNhoTVTU GgDf5Yehum4CMy4w5F/e1z0HrBkjywOTdtfJLJWfu6XFLUHmnVFg1Tejw5sfxZCk pSdEBtSCGF7tk6YpAf45LoU+IifxAo3tHBvKGbjZ+rrOls9Eev9te9epvVr/5WHk QvIvSg8VNTrG3EIqlrO9XzH62BFGLrbhkEHOfGoycX9S5mHcSR880FrIwMehFe+a kcmEQMWijvWL9NkvF4DYRz8gNVxAEeEcANBUX01NPNNZpnbDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLlZpfNWOUB7J1L++BbRuaTidh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvZjg1MWM0YmMtYTE4ZC0z NDkyLTllMzUtMmQ2MTE3NWNhYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2J2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFve0HB5XDbRhU5RFD/RSF0IDTfXqYNzjwJ05LBHDJV47s4vIz90oD9v aScjOs4NnI10ogxan2s8WCToqq4soGYROcHuijD9Y4JnGjTM06vcNBkmHPCUPv1/ PsN/4C8MbH4NbEdyIJ2SGQq3hC2h4TJiPv9U6XCz4/ottC6wObx9RbD9EGYpwjIm 6/XdPIXCDTXTuyDkGidHb+9AQdqr2QQ2z+KxR0JijklNT8Y8KDsyeVJfohnfF97t gTeWOIjIIo7jMvxLgqpRzc+J55M+tJXj60SaU299qfQaDeaVTdI66ec2ba2vKwU7 mEY1Yord99aUgGF+23tDZlL4kZfq0nU= -----END CERTIFICATE-----Generated at Mon Jul 28 07:02:38 2025 by rpki-client