$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/25973db0-e81e-38be-b732-f6b6d937860d.roa File: 25973db0-e81e-38be-b732-f6b6d937860d.roa (raw, json) Hash identifier: PmgW+ocUiaZVZa10HPv+f5upkVVC2qZIAvtuJUbzmg8= Subject key identifier: 30:96:AA:D5:F6:EB:8E:C1:9D:3A:53:27:9B:2E:22:87:31:82:6E:03 Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf Certificate serial: 010D0C9F4328584A66C06971621FC7FE3D7FC5B0 Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/25973db0-e81e-38be-b732-f6b6d937860d.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 7752 IP address blocks: 67.206.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:69:71:62:1f:c7:fe:3d:7f:c5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=7b3e5e61-56e5-4395-86e7-02326df16039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:5e:48:83:bc:57:2f:e6:04:11:6d:12:c5: a5:30:fa:2e:f3:46:e1:4e:d9:17:c3:5c:5f:b2:63: 8d:3f:71:e0:6d:4f:4a:21:d6:cf:e5:7e:73:af:eb: 4f:a3:91:ac:0b:6e:3e:b6:a9:99:aa:c3:39:da:7a: 64:7d:17:ca:69:4a:68:a1:e9:4a:a5:2c:64:56:72: 0b:80:8a:4f:0c:3b:80:89:8b:6c:3b:80:89:0d:cb: cb:82:ba:d9:bf:f9:51:26:b6:fc:45:60:89:56:5f: eb:fd:e5:33:32:61:0a:2e:ad:41:97:b3:f1:d3:7c: ff:26:f5:10:9e:6f:d6:f7:33:f6:a9:ef:b5:c1:70: 76:eb:7a:6e:02:72:25:aa:e8:5e:dd:b2:9a:c1:0f: c4:70:c3:de:a8:d8:0c:3d:3a:58:98:49:8c:30:00: 31:14:6c:79:35:78:b1:16:b3:49:22:da:d8:0d:3e: 25:0e:ae:84:4d:2c:37:ae:e2:c4:b5:b3:e8:3f:98: 7a:4c:73:ee:f7:8e:35:9b:9a:8b:64:76:3a:51:d3: 2b:53:09:72:4a:9d:17:ab:b7:4c:03:ec:81:0f:e9: 44:7e:53:84:ea:ec:7c:9a:89:3c:a6:d2:86:b4:1d: 24:38:b1:57:37:09:41:59:ff:0d:29:d4:6a:b7:e9: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:96:AA:D5:F6:EB:8E:C1:9D:3A:53:27:9B:2E:22:87:31:82:6E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/25973db0-e81e-38be-b732-f6b6d937860d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl X509v3 Authority Key Identifier: keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer sbgp-ipAddrBlock: critical IPv4: 67.206.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bf:88:8e:24:c6:ca:54:70:f0:97:9e:ca:44:c8:65:c8:a0: 8e:77:2e:68:71:b1:07:bb:9b:ef:9e:2c:7d:11:dd:24:87:85: 98:07:ac:56:c6:7a:1c:02:64:e5:25:0b:5e:57:c6:64:85:a1: d9:a2:66:6d:30:0e:e0:83:9f:1e:f5:eb:b4:cf:17:9f:ba:9a: 7a:a6:24:be:95:e8:9b:a6:c3:f1:7a:e0:56:f1:32:ae:97:58: 43:9e:0e:37:b5:89:50:9b:7e:c3:2f:53:4c:8a:38:e1:c8:d8: 3e:39:e6:e6:eb:e1:fd:5f:4e:db:e3:bd:bd:b7:73:87:52:a1: 7b:ac:7f:2c:d6:d2:a7:1d:00:cd:77:46:b3:b3:d6:fd:27:a0: 14:a1:b1:4c:d9:48:06:bd:b2:ba:8e:c2:05:38:01:2c:af:38: f8:cf:ed:b8:6b:4d:d2:bb:b7:b1:93:a3:2b:d3:4e:be:fd:05: d4:8e:7e:13:9e:0b:c0:b5:7c:bd:fe:af:c1:0b:1f:79:4c:18: 72:e0:11:67:c8:fc:a4:b1:28:10:7e:c8:f0:06:79:b0:c1:ad: 45:0b:79:3e:17:db:23:1e:b5:d5:8e:8b:a4:c6:f5:b8:cf:cb: 4b:69:d6:85:d4:e7:91:39:a6:6f:7d:11:f9:55:d4:c1:8f:fd: ca:f5:6a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGlxYh/H/j1/xbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZiZDA5OGYtOWUwMS00YzI2LTkzOTUtZTViNjMzOTlh Y2FmMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk N2IzZTVlNjEtNTZlNS00Mzk1LTg2ZTctMDIzMjZkZjE2MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/VeSIO8Vy/mBBFtEsWlMPou80bhTtkXw1xf smONP3HgbU9KIdbP5X5zr+tPo5GsC24+tqmZqsM52npkfRfKaUpooelKpSxkVnIL gIpPDDuAiYtsO4CJDcvLgrrZv/lRJrb8RWCJVl/r/eUzMmEKLq1Bl7Px03z/JvUQ nm/W9zP2qe+1wXB263puAnIlquhe3bKawQ/EcMPeqNgMPTpYmEmMMAAxFGx5NXix FrNJItrYDT4lDq6ETSw3ruLEtbPoP5h6THPu9441m5qLZHY6UdMrUwlySp0Xq7dM A+yBD+lEflOE6ux8mok8ptKGtB0kOLFXNwlBWf8NKdRqt+nK3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCWqtX2647BnTpTJ5suIocxgm4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJk MDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2MzM5OWFjYWYvMjU5NzNkYjAtZTgxZS0z OGJlLWI3MzItZjZiNmQ5Mzc4NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWZiZDA5OGYtOWUwMS00YzI2LTkz OTUtZTViNjMzOTlhY2FmLzlmYmQwOThmLTllMDEtNGMyNi05Mzk1LWU1YjYzMzk5 YWNhZi5jcmwwHwYDVR0jBBgwFoAUOFJoHvmhwRVyZ6MF4Rpo/COLcxAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJkMDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2 MzM5OWFjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ86yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi/iI4kxspUcPCXnspEyGXIoI53LmhxsQe7m++eLH0R3SSHhZgHrFbG ehwCZOUlC15XxmSFodmiZm0wDuCDnx7167TPF5+6mnqmJL6V6Jumw/F64FbxMq6X WEOeDje1iVCbfsMvU0yKOOHI2D455ubr4f1fTtvjvb23c4dSoXusfyzW0qcdAM13 RrOz1v0noBShsUzZSAa9srqOwgU4ASyvOPjP7bhrTdK7t7GToyvTTr79BdSOfhOe C8C1fL3+r8ELH3lMGHLgEWfI/KSxKBB+yPAGebDBrUULeT4X2yMetdWOi6TG9bjP y0tp1oXU55E5pm99EflV1MGP/cr1atg= -----END CERTIFICATE-----Generated at Wed Jul 9 16:46:05 2025 by rpki-client