$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa File: b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa (raw, json) Hash identifier: LSTAFgs9yIIhwmn2lZrJDcLec2pKdZKEI6QkMTzqXss= Subject key identifier: 5C:A7:4C:32:59:EC:F3:66:74:22:01:49:A4:9A:79:4A:C2:00:56:0F Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F43285849F44A54971E438568ED0B46C0 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 3842 IP address blocks: 192.184.88.0/21 maxlen: 21 192.249.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:54:97:1e:43:85:68:ed:0b:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=7aa05302-535c-4d3d-8fcb-23cb6d0cdd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:51:f9:c7:1f:b6:79:89:0f:a9:46:41:02: e8:6e:8c:81:d4:37:f7:a0:b5:25:6d:aa:f2:7d:e4: 21:8a:43:07:e6:5a:ca:12:88:0a:e1:8a:9a:d0:f2: 7e:f8:b3:22:9f:a6:4f:62:02:44:15:8d:7e:6e:48: 47:6a:35:93:3a:83:ed:06:a0:e1:40:2f:1b:2c:89: d1:da:26:28:be:05:c8:d7:6a:c1:45:f2:ee:d1:f2: 54:71:cd:a5:4a:8c:8c:8e:46:22:d1:09:d8:16:86: a8:a0:cc:f0:2a:cd:a9:00:e7:d5:6e:3c:f3:e0:8e: c1:3f:f2:81:bc:e6:41:7c:4a:bc:90:a4:57:e6:c8: e5:0e:bc:3f:b2:cd:d3:07:e2:b9:8b:df:e3:34:59: 0e:92:38:74:22:08:41:4f:5d:37:c8:f8:84:13:73: 1e:72:1c:27:a5:b0:18:e4:bc:e7:2a:9e:74:91:ef: e2:35:2f:36:a3:ca:67:4f:fe:ce:1e:89:70:96:f4: 27:83:1c:ee:55:aa:5a:1e:6e:47:6f:25:3b:0a:84: e9:a8:28:64:5a:83:df:2d:0c:a7:25:9f:83:d1:9f: f3:df:91:08:ff:59:f2:6d:e5:2e:b6:1d:2c:e4:ad: a0:05:d3:5a:11:a4:fd:35:1b:33:d5:85:a0:82:a9: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:4C:32:59:EC:F3:66:74:22:01:49:A4:9A:79:4A:C2:00:56:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b4cfb36f-e372-3e5f-8729-170784a6a7bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 192.184.88.0/21 192.249.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:cb:e3:31:ad:39:2c:d4:c7:69:19:13:75:09:37:52:df:53: e5:9c:93:7f:60:62:e3:85:60:d5:b6:6f:65:a0:3e:ac:f0:88: f5:cc:dd:eb:bd:c0:74:12:44:25:3d:c4:dd:8f:d1:8a:19:ff: 24:1c:a5:d8:1d:9b:8e:24:71:9d:f3:48:e1:ba:9d:f2:20:45: d9:d3:53:45:82:d5:22:68:6e:65:af:34:9f:9d:67:9a:a0:5c: c3:ec:9b:a9:90:c4:da:71:9b:fc:24:d2:fd:18:fe:e5:b2:c4: 26:1a:3a:75:41:aa:5d:2b:3c:34:bf:68:94:f0:e0:54:f2:4c: f8:bb:67:1d:62:ba:a5:11:ee:cc:cd:84:c5:0d:4a:e4:30:60: 01:b9:c3:58:0b:2d:29:28:1c:33:f5:af:92:db:ad:bf:9f:30: b3:aa:a1:14:fd:3b:8c:c1:d2:9d:10:63:5f:91:b4:04:84:33: 56:c1:8d:dc:e9:f2:eb:be:1e:0f:1b:be:43:ba:cf:3a:6f:e9: 2f:45:c6:05:35:15:38:8c:b6:31:8d:31:27:e7:ec:58:a6:39: a1:23:c1:f8:e4:51:96:10:96:cb:00:8e:d6:99:08:b2:f4:93: 8a:25:cc:07:93:85:33:61:4f:a8:1f:ae:8c:04:43:35:bb:1a: fc:7c:fa:b8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEn0SlSXHkOFaO0LRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk N2FhMDUzMDItNTM1Yy00ZDNkLThmY2ItMjNjYjZkMGNkZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19lR+ccftnmJD6lGQQLoboyB1Df3oLUlbary feQhikMH5lrKEogK4Yqa0PJ++LMin6ZPYgJEFY1+bkhHajWTOoPtBqDhQC8bLInR 2iYovgXI12rBRfLu0fJUcc2lSoyMjkYi0QnYFoaooMzwKs2pAOfVbjzz4I7BP/KB vOZBfEq8kKRX5sjlDrw/ss3TB+K5i9/jNFkOkjh0IghBT103yPiEE3MechwnpbAY 5LznKp50ke/iNS82o8pnT/7OHolwlvQngxzuVapaHm5HbyU7CoTpqChkWoPfLQyn JZ+D0Z/z35EI/1nybeUuth0s5K2gBdNaEaT9NRsz1YWggqk3NQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFynTDJZ7PNmdCIBSaSaeUrCAFYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvYjRjZmIzNmYtZTM3Mi0z ZTVmLTg3MjktMTcwNzg0YTZhN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwLhYAwQC wPk8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMjL4zGtOSzUx2kZE3UJN1LfU+Wck39gYuOFYNW2b2WgPqzw iPXM3eu9wHQSRCU9xN2P0YoZ/yQcpdgdm44kcZ3zSOG6nfIgRdnTU0WC1SJobmWv NJ+dZ5qgXMPsm6mQxNpxm/wk0v0Y/uWyxCYaOnVBql0rPDS/aJTw4FTyTPi7Zx1i uqUR7szNhMUNSuQwYAG5w1gLLSkoHDP1r5Lbrb+fMLOqoRT9O4zB0p0QY1+RtASE M1bBjdzp8uu+Hg8bvkO6zzpv6S9FxgU1FTiMtjGNMSfn7FimOaEjwfjkUZYQlssA jtaZCLL0k4olzAeThTNhT6gfrowEQzW7Gvx8+rg= -----END CERTIFICATE-----Generated at Thu Jul 10 11:00:32 2025 by rpki-client