$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa File: 284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa (raw, json) Hash identifier: ea8xJYU19dZrhDwIX6NPV3IhjY3KexdcFpcr006KzNE= Subject key identifier: A0:FB:DC:81:75:72:99:41:35:C1:D5:61:50:F9:44:66:A9:4F:D8:32 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584A549B234220FD90D3D2AAE900 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 397976 IP address blocks: 195.85.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:23:42:20:fd:90:d3:d2:aa:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=4f3d4805-34d6-4795-bb39-b45062cd4347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:1f:ee:7e:e9:58:c8:2d:2e:4f:5f:42:80: d4:03:7f:ec:d1:4f:de:56:c0:fc:2e:3e:4e:40:3a: 61:e2:17:94:4e:e4:2f:f9:b4:97:16:06:6e:a3:c7: a4:8e:fa:f4:f4:8a:56:51:98:85:c8:ed:b8:53:f7: db:f1:e6:0f:fb:ce:a7:a4:4f:0b:72:bb:e1:ec:4e: 2e:a6:d5:6f:6f:97:91:d6:9d:db:83:e9:d0:87:c7: 83:f3:0a:2d:62:69:72:5a:e7:da:bc:e0:43:b9:2c: 55:86:c2:0b:23:ef:99:e3:47:79:30:e1:c3:6c:7e: 29:4a:4b:a9:8d:12:7d:8b:1b:dc:e4:17:5f:4a:30: 50:19:b9:b9:04:fc:30:02:cb:57:28:c6:6d:e6:d1: 66:00:0c:9c:ac:d1:97:5a:5b:ed:80:9c:d8:7e:73: d3:40:dc:cf:23:31:b9:cb:69:8c:76:7e:17:b4:0e: 47:fc:71:63:f3:b1:d4:e0:32:39:ca:b2:66:79:c6: bf:b5:af:ee:70:d3:50:a1:d9:7b:04:9f:10:12:c3: ba:34:9c:58:cd:88:1f:a8:37:cb:55:83:52:45:0c: a9:22:8c:fc:e4:22:b8:ca:a8:94:1d:ef:14:2a:00: 63:9e:0f:34:1a:63:4f:ee:b5:3f:03:33:d1:53:40: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FB:DC:81:75:72:99:41:35:C1:D5:61:50:F9:44:66:A9:4F:D8:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/284391ba-ae31-3dc4-a598-5ecc6ab4c1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 195.85.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e7:6e:2a:29:c9:b2:a4:34:f3:13:55:61:87:46:e8:7b:2a: 12:a3:30:36:16:49:c0:b2:8a:e5:3a:75:e4:d1:74:ab:1a:c1: b3:e8:7c:bf:b8:2d:c2:06:b3:ad:96:aa:a0:96:c8:2c:a3:44: 66:dc:06:f7:d6:6a:14:9d:a2:0b:f3:88:e0:d8:51:e2:d0:48: 59:43:fa:b3:fa:d9:78:c9:51:18:f5:04:da:f6:37:47:d7:d1: 6c:5f:45:01:80:ec:88:60:5d:17:1f:5d:db:af:18:d9:61:45: bc:72:e0:cc:75:ba:91:e8:43:41:9f:b2:09:33:17:b7:d0:d2: 33:25:cf:52:ce:44:45:db:df:ff:95:62:2c:47:18:f5:a1:ab: 0b:51:a9:97:3d:ad:f4:fd:10:02:38:7a:16:01:59:39:4e:6f: 1d:9a:c4:00:24:d2:e8:88:1f:e4:c1:3b:6a:fe:da:20:12:3f: 17:00:93:aa:6c:35:56:1d:f5:ae:a4:7c:54:e1:07:cd:a9:fc: 87:f6:15:df:18:44:25:2b:b2:dd:6c:f8:1a:11:08:bc:4a:11: ab:25:ba:c6:f6:90:75:fd:e4:fa:08:0c:5a:86:be:4b:dd:45: 07:ed:a7:16:3b:10:a1:31:90:f4:fc:67:51:eb:7b:e7:47:fc: eb:bb:22:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyNCIP2Q09Kq6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk NGYzZDQ4MDUtMzRkNi00Nzk1LWJiMzktYjQ1MDYyY2Q0MzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshof7n7pWMgtLk9fQoDUA3/s0U/eVsD8Lj5O QDph4heUTuQv+bSXFgZuo8ekjvr09IpWUZiFyO24U/fb8eYP+86npE8Lcrvh7E4u ptVvb5eR1p3bg+nQh8eD8wotYmlyWufavOBDuSxVhsILI++Z40d5MOHDbH4pSkup jRJ9ixvc5BdfSjBQGbm5BPwwAstXKMZt5tFmAAycrNGXWlvtgJzYfnPTQNzPIzG5 y2mMdn4XtA5H/HFj87HU4DI5yrJmeca/ta/ucNNQodl7BJ8QEsO6NJxYzYgfqDfL VYNSRQypIoz85CK4yqiUHe8UKgBjng80GmNP7rU/AzPRU0BrRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD73IF1cplBNcHVYVD5RGapT9gyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvMjg0MzkxYmEtYWUzMS0z ZGM0LWE1OTgtNWVjYzZhYjRjMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLnbiopybKkNPMTVWGHRuh7KhKjMDYWScCyiuU6deTRdKsawbPofL+4 LcIGs62WqqCWyCyjRGbcBvfWahSdogvziODYUeLQSFlD+rP62XjJURj1BNr2N0fX 0WxfRQGA7IhgXRcfXduvGNlhRbxy4Mx1upHoQ0GfsgkzF7fQ0jMlz1LOREXb3/+V YixHGPWhqwtRqZc9rfT9EAI4ehYBWTlObx2axAAk0uiIH+TBO2r+2iASPxcAk6ps NVYd9a6kfFThB82p/If2Fd8YRCUrst1s+BoRCLxKEaslusb2kHX95PoIDFqGvkvd RQftpxY7EKExkPT8Z1Hre+dH/Ou7Itg= -----END CERTIFICATE-----Generated at Thu Jul 3 16:33:34 2025 by rpki-client