$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/85a0bd2d-7e02-349a-aea1-da072cff35b5.roa File: 85a0bd2d-7e02-349a-aea1-da072cff35b5.roa (raw, json) Hash identifier: R1l4JlYEHAEvjVh2jjNTyDTBxlZ8G7wrdBjM/41Om2I= Subject key identifier: 99:0A:AD:B2:35:B1:C5:A4:C7:84:A5:5C:2E:B2:B8:66:82:5E:3C:81 Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Certificate serial: 010D0C9F4328584A76C34A8F2C43695AC69CB700 Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/85a0bd2d-7e02-349a-aea1-da072cff35b5.roa Signing time: Wed 09 Jul 2025 18:39:38 +0000 ROA not before: Wed 09 Jul 2025 18:39:38 +0000 ROA not after: Tue 07 Oct 2025 18:39:38 +0000 asID: 401820 IP address blocks: 167.253.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:c3:4a:8f:2c:43:69:5a:c6:9c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Validity Not Before: Jul 9 18:39:38 2025 GMT Not After : Oct 7 18:39:38 2025 GMT Subject: CN=1ccef2e8-7679-4e49-8823-e26a74ff0a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:e7:57:fc:89:7a:84:1e:b7:d4:e2:26:c0: 3f:58:35:91:41:7d:e2:3d:e5:fe:d9:dd:c5:88:6c: 1d:0e:64:41:ae:0c:60:a1:91:a3:66:5b:ee:60:97: fb:96:15:3d:a1:8a:30:95:97:31:e5:cd:1b:10:c8: 95:3d:00:67:73:00:48:62:22:fe:ff:f4:c3:31:ef: 19:6b:4a:33:f0:65:af:03:be:f4:03:1d:fa:d9:5f: 79:4a:14:cd:ec:65:a4:27:8d:d5:45:23:74:11:10: a5:4e:06:df:67:4e:6e:0c:9e:36:e8:53:97:14:e5: 5b:c2:e5:27:fd:8f:44:10:67:e2:9d:10:99:d6:59: dd:d2:b3:97:c9:34:d3:81:5c:a6:ad:b3:a2:1c:5b: de:f3:78:0c:d9:72:22:83:87:8c:39:a0:fa:1a:4f: 11:41:95:3e:e0:8e:4e:ec:18:e7:e2:3a:d4:21:7c: 53:d1:1f:ed:6d:38:a2:ef:b5:4a:ab:b1:e6:f4:91: 36:ee:b3:20:50:09:e6:29:21:33:96:54:f9:d7:01: 1c:90:0a:92:77:c3:e8:aa:7b:01:a6:76:82:26:36: 4c:ef:cf:ab:f0:89:1f:7d:29:26:ef:6d:8e:2b:90: f2:25:aa:03:5b:86:d7:2d:ef:cd:6b:d8:3e:29:7f: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0A:AD:B2:35:B1:C5:A4:C7:84:A5:5C:2E:B2:B8:66:82:5E:3C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/85a0bd2d-7e02-349a-aea1-da072cff35b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl X509v3 Authority Key Identifier: keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer sbgp-ipAddrBlock: critical IPv4: 167.253.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f3:60:df:70:72:07:76:e6:dc:b1:d5:81:51:a2:6f:76:56: 9b:f2:42:ed:ed:54:b2:e5:a1:0e:fc:3e:c6:58:85:47:0c:fe: d1:04:11:39:ee:9c:a4:aa:a4:d6:50:c8:57:65:04:c6:37:69: 14:4f:d1:de:e0:3b:b3:72:2b:fc:c2:3b:d7:eb:30:81:fd:4e: 4b:59:91:81:4b:8e:04:d4:6e:ff:81:a5:fb:03:b3:6f:d2:a1: 68:ad:c0:e5:54:12:52:19:cd:55:9c:e4:0c:f2:3e:11:78:0a: b8:4a:ed:61:15:52:11:dc:a9:fb:3c:1d:c4:1a:fb:53:55:60: cc:9e:12:ab:e2:78:05:8b:ee:21:0f:94:f0:01:fa:42:84:61: ef:eb:18:d2:ad:59:e0:fc:d4:f1:80:a1:8f:56:cc:d6:c2:66: ab:6a:2d:3d:33:e2:94:92:43:65:45:70:2c:14:80:83:a1:c8: 4e:e5:ad:bc:6c:6d:99:bb:1d:e2:de:77:2b:9a:e5:7d:e6:a8: 22:f3:b5:a5:14:44:45:9c:b5:b3:f6:f5:a5:06:2e:36:c5:be: 36:b8:a5:98:2f:98:64:c6:44:e9:66:29:a7:02:5b:65:45:c9: 1b:ee:77:d9:a8:b9:ee:68:65:02:e4:d8:a9:b9:bf:87:51:5f: cd:1a:f8:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2w0qPLENpWsactwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2 NzE3MB4XDTI1MDcwOTE4MzkzOFoXDTI1MTAwNzE4MzkzOFowLzEtMCsGA1UEAxMk MWNjZWYyZTgtNzY3OS00ZTQ5LTg4MjMtZTI2YTc0ZmYwYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tvnV/yJeoQet9TiJsA/WDWRQX3iPeX+2d3F iGwdDmRBrgxgoZGjZlvuYJf7lhU9oYowlZcx5c0bEMiVPQBncwBIYiL+//TDMe8Z a0oz8GWvA770Ax362V95ShTN7GWkJ43VRSN0ERClTgbfZ05uDJ426FOXFOVbwuUn /Y9EEGfinRCZ1lnd0rOXyTTTgVymrbOiHFve83gM2XIig4eMOaD6Gk8RQZU+4I5O 7Bjn4jrUIXxT0R/tbTii77VKq7Hm9JE27rMgUAnmKSEzllT51wEckAqSd8PoqnsB pnaCJjZM78+r8IkffSkm722OK5DyJaoDW4bXLe/Na9g+KX8GwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkKrbI1scWkx4SlXC6yuGaCXjyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvODVhMGJkMmQtN2UwMi0z NDlhLWFlYTEtZGEwNzJjZmYzNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjzYN9wcgd25tyx1YFRom92VpvyQu3tVLLloQ78PsZYhUcM/tEEETnu nKSqpNZQyFdlBMY3aRRP0d7gO7NyK/zCO9frMIH9TktZkYFLjgTUbv+BpfsDs2/S oWitwOVUElIZzVWc5AzyPhF4CrhK7WEVUhHcqfs8HcQa+1NVYMyeEqvieAWL7iEP lPAB+kKEYe/rGNKtWeD81PGAoY9WzNbCZqtqLT0z4pSSQ2VFcCwUgIOhyE7lrbxs bZm7HeLedyua5X3mqCLztaUUREWctbP29aUGLjbFvja4pZgvmGTGROlmKacCW2VF yRvud9moue5oZQLk2Km5v4dRX80a+Fw= -----END CERTIFICATE-----Generated at Thu Jul 10 06:47:22 2025 by rpki-client