$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa File: ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa (raw, json) Hash identifier: +6BN5UN6zSOwQOcNyUUsUwGS+vWG0Uheo/jNBef9mhU= Subject key identifier: F2:94:50:67:73:23:A0:CB:A6:E5:CD:11:72:4A:D5:BC:DC:19:4E:E0 Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Certificate serial: 010D0C9F4328584A4C3B0D618CE76A9A83BB2180 Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396163 IP address blocks: 204.16.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0d:61:8c:e7:6a:9a:83:bb:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=e58272d4-9be1-472d-8493-54e6ca17fb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:11:65:2a:92:0b:f9:68:2c:84:b0:e1:e5: ed:c1:43:af:17:71:c7:a0:ee:d0:44:81:7e:eb:6c: bc:9c:39:e2:d4:7c:99:d5:dc:1f:0c:be:f1:98:ee: b9:6a:77:8e:15:ec:f6:b6:7a:16:7d:02:ac:a2:e3: 02:5f:6a:1c:c1:f6:63:bb:7c:bb:44:c5:cc:f6:2e: 51:0a:01:c3:b4:1c:8d:52:00:10:09:af:af:4e:f3: 40:ce:d1:30:c3:c9:b4:25:c0:c3:4c:76:25:2f:05: 68:0d:61:4a:b1:1a:65:07:9b:31:2e:cd:96:2e:b1: 47:c0:b6:84:bb:07:f0:f7:aa:4b:01:7f:c4:e8:8a: dc:b2:c0:b9:e6:d3:6b:9d:d4:85:f9:e7:b3:9d:e4: df:f9:ef:59:0c:c3:8b:36:d3:f7:dc:69:fd:33:61: 08:6e:da:0d:0d:e1:8c:b1:c1:4e:4a:43:87:0a:34: 40:78:17:ce:46:b0:21:4c:06:ac:4f:b8:b8:cf:4f: ec:32:8c:e0:3b:f3:d6:09:93:76:ad:fb:78:3c:5d: 7c:32:bc:db:d2:7b:7b:c9:ac:95:d6:04:bc:d6:a9: 4a:4f:3c:c1:d7:7d:b4:21:e9:ab:89:ac:df:cf:21: 46:96:78:79:de:47:13:61:c9:97:45:9e:54:8e:b5: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:94:50:67:73:23:A0:CB:A6:E5:CD:11:72:4A:D5:BC:DC:19:4E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl X509v3 Authority Key Identifier: keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer sbgp-ipAddrBlock: critical IPv4: 204.16.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:3e:4f:da:10:a0:0a:fa:4b:0b:64:a6:bf:5d:cc:5b:e4:0f: 31:93:d2:ae:46:dd:f6:e2:ae:06:4d:7f:ca:6b:59:52:f8:03: 84:2d:ca:21:a2:bc:3e:b6:16:9a:1d:85:ad:cb:b8:ae:6e:49: 37:00:75:01:68:fc:e0:02:48:06:f0:6e:f2:0e:ca:b2:3f:ce: 03:87:86:76:b5:65:4a:ed:23:18:0a:ef:9b:2f:a6:6e:b1:85: 0e:81:f8:45:99:c8:d5:6a:4c:23:97:54:82:70:d2:99:89:bc: 42:7a:59:41:aa:22:c0:a8:d4:c9:c6:dd:47:85:07:ed:f1:f7: 82:59:0f:9f:53:ac:f1:1e:66:c3:b7:4e:e6:02:b7:a9:d7:21: 99:be:92:48:4e:7b:c7:5d:48:68:79:67:8e:a9:ea:12:b7:44: a0:61:66:54:62:d8:b6:0d:74:35:c3:2c:b8:75:89:fe:40:1e: cc:d3:4a:6f:79:9c:44:8e:3f:ec:e8:1f:fc:5c:77:aa:a9:ac: 23:e8:bb:7c:b9:1d:41:4b:d8:39:d7:4a:42:ff:d9:50:0c:36: 0a:b6:a8:ed:a6:39:5c:bd:70:c3:4d:e7:4b:85:d2:fc:74:7c: 0e:19:24:a2:d0:48:6a:9e:8a:e7:20:72:4e:42:43:cf:64:a5: 9f:93:0f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOw1hjOdqmoO7IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl MWI0MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZTU4MjcyZDQtOWJlMS00NzJkLTg0OTMtNTRlNmNhMTdmYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklIRZSqSC/loLISw4eXtwUOvF3HHoO7QRIF+ 62y8nDni1HyZ1dwfDL7xmO65aneOFez2tnoWfQKsouMCX2ocwfZju3y7RMXM9i5R CgHDtByNUgAQCa+vTvNAztEww8m0JcDDTHYlLwVoDWFKsRplB5sxLs2WLrFHwLaE uwfw96pLAX/E6IrcssC55tNrndSF+eezneTf+e9ZDMOLNtP33Gn9M2EIbtoNDeGM scFOSkOHCjRAeBfORrAhTAasT7i4z0/sMozgO/PWCZN2rft4PF18Mrzb0nt7yayV 1gS81qlKTzzB1320IemriazfzyFGlnh53kcTYcmXRZ5UjrUgXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKUUGdzI6DLpuXNEXJK1bzcGU7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvYWMxYTI4YjgtZTE0MS0z YmU0LTk5NjItM2YxNzM3ZjViYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2 OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1 ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1 MDE5NWUxYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA+T9oQoAr6Swtkpr9dzFvkDzGT0q5G3fbirgZNf8prWVL4A4QtyiGi vD62Fpodha3LuK5uSTcAdQFo/OACSAbwbvIOyrI/zgOHhna1ZUrtIxgK75svpm6x hQ6B+EWZyNVqTCOXVIJw0pmJvEJ6WUGqIsCo1MnG3UeFB+3x94JZD59TrPEeZsO3 TuYCt6nXIZm+kkhOe8ddSGh5Z46p6hK3RKBhZlRi2LYNdDXDLLh1if5AHszTSm95 nESOP+zoH/xcd6qprCPou3y5HUFL2DnXSkL/2VAMNgq2qO2mOVy9cMNN50uF0vx0 fA4ZJKLQSGqeiucgck5CQ89kpZ+TD3Y= -----END CERTIFICATE-----Generated at Thu Jul 10 11:09:56 2025 by rpki-client