$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa File: 87e248c3-d420-3fbb-ad5d-a3530f238550.roa (raw, json) Hash identifier: 5g2jbqqUWhcLiiLtaAZsMrCWL5BCKzlbg6d/Ttuw1q0= Subject key identifier: F6:3D:A8:19:0F:BF:6C:C2:CB:01:CB:AC:88:A6:8D:A4:99:EE:9F:38 Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Certificate serial: 010D0C9F43285849D16506E0682CFC670C665200 Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 17216 IP address blocks: 162.254.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:06:e0:68:2c:fc:67:0c:66:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=ce829ef3-7703-4d33-9b22-ab0b23b83afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:4d:2d:ad:13:3c:d2:cc:df:f2:61:ac:67: b8:98:18:8a:42:fd:f8:99:8c:9c:75:d0:95:1f:bd: 25:19:49:c3:51:a9:b4:0a:74:1e:96:96:66:e9:94: 3c:fe:d2:ff:80:1c:0f:e1:c4:f5:5f:a9:3f:b7:a1: 05:5f:d7:6f:c0:69:1e:14:96:74:61:0e:d4:08:1d: 75:bc:2f:3d:da:27:05:6c:74:14:33:ab:ef:61:08: 2a:29:9c:a4:de:c2:08:12:97:4a:01:2a:02:2c:f4: 94:ac:e0:41:08:1f:e6:75:8c:15:c2:5f:da:0d:ed: c6:55:2c:c2:a9:2b:b6:3e:aa:e9:11:b9:3d:c5:db: 18:a8:8e:a3:d9:0b:60:7a:52:87:66:11:af:c2:86: 85:a6:82:50:98:77:48:8b:13:c0:5e:e1:ce:3f:b4: fc:df:e7:1a:84:d2:51:c2:ee:a1:81:7a:d7:d9:93: 6b:15:46:d6:a6:1d:38:aa:55:55:a8:dc:c2:44:cd: 6c:3d:0e:78:e0:df:46:d0:64:8e:00:2a:e0:a7:1d: 1a:09:7a:39:06:e5:68:99:99:49:87:5e:67:8f:c7: e1:07:2b:ba:f8:7e:07:09:b2:1b:ee:dd:df:d3:4f: 31:b3:00:d3:5e:8b:e9:76:99:81:09:75:ef:10:93: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3D:A8:19:0F:BF:6C:C2:CB:01:CB:AC:88:A6:8D:A4:99:EE:9F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl X509v3 Authority Key Identifier: keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer sbgp-ipAddrBlock: critical IPv4: 162.254.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:86:44:70:81:8e:99:b9:f1:e7:7a:5a:cb:94:ad:32:d3:f6: ef:be:9b:43:28:39:ab:e6:07:4f:6a:74:23:3e:2c:55:77:91: a4:2d:35:2f:8b:25:08:14:ff:a1:a3:f6:eb:92:4e:7a:93:71: 3b:d4:c8:46:a9:2f:5a:3a:de:5b:e3:2a:1f:3d:b4:77:51:be: 5f:39:db:86:ff:87:c9:6a:5d:d1:74:22:a3:bf:e0:37:df:cc: 75:c0:42:ff:4f:a9:c8:6e:9a:8e:b7:de:1d:d1:99:51:14:72: 85:92:94:12:74:1f:11:1c:7a:be:78:38:b4:b5:a5:d6:55:ff: 8c:00:51:18:d4:f3:6d:4f:93:12:b9:ee:2f:8e:16:32:27:04: ea:e6:c1:4c:86:53:2e:0d:89:d9:6e:7d:2c:88:af:07:db:cb: 4a:c1:cf:3e:51:1a:a1:5e:2d:0f:5f:56:48:af:8e:86:b4:4e: 5a:81:8a:9e:97:3c:b1:89:b5:5f:c4:b4:49:ca:bd:c2:a9:25: cb:62:ae:20:28:32:d4:a1:54:d9:e5:ca:7d:94:aa:9a:86:45: db:06:58:a6:b8:d8:9a:2e:f8:8f:8c:8f:96:28:f8:10:02:8b: a7:12:2c:6b:82:7e:6d:d5:d1:0a:53:f2:7b:fb:2b:2a:7a:7b: 52:16:85:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQbgaCz8ZwxmUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2 MjQ3MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk Y2U4MjllZjMtNzcwMy00ZDMzLTliMjItYWIwYjIzYjgzYWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXVNLa0TPNLM3/JhrGe4mBiKQv34mYycddCV H70lGUnDUam0CnQelpZm6ZQ8/tL/gBwP4cT1X6k/t6EFX9dvwGkeFJZ0YQ7UCB11 vC892icFbHQUM6vvYQgqKZyk3sIIEpdKASoCLPSUrOBBCB/mdYwVwl/aDe3GVSzC qSu2PqrpEbk9xdsYqI6j2QtgelKHZhGvwoaFpoJQmHdIixPAXuHOP7T83+cahNJR wu6hgXrX2ZNrFUbWph04qlVVqNzCRM1sPQ544N9G0GSOACrgpx0aCXo5BuVomZlJ h15nj8fhByu6+H4HCbIb7t3f008xswDTXovpdpmBCXXvEJPQEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY9qBkPv2zCywHLrIimjaSZ7p84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvODdlMjQ4YzMtZDQyMC0z ZmJiLWFkNWQtYTM1MzBmMjM4NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5 YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4 ZGRmZTYyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuGRHCBjpm58ed6WsuUrTLT9u++m0MoOavmB09qdCM+LFV3kaQtNS+L JQgU/6Gj9uuSTnqTcTvUyEapL1o63lvjKh89tHdRvl8524b/h8lqXdF0IqO/4Dff zHXAQv9Pqchumo633h3RmVEUcoWSlBJ0HxEcer54OLS1pdZV/4wAURjU821PkxK5 7i+OFjInBOrmwUyGUy4NidlufSyIrwfby0rBzz5RGqFeLQ9fVkivjoa0TlqBip6X PLGJtV/EtEnKvcKpJctiriAoMtShVNnlyn2UqpqGRdsGWKa42Jou+I+Mj5Yo+BAC i6cSLGuCfm3V0QpT8nv7Kyp6e1IWhfg= -----END CERTIFICATE-----Generated at Sat Jun 7 08:17:48 2025 by rpki-client