$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/9ba10a08-a075-3c34-a1d5-ad8726527e46.roa File: 9ba10a08-a075-3c34-a1d5-ad8726527e46.roa (raw, json) Hash identifier: pfNNVnVUP7mc1+ChBVoVenTYC4F/buq+BvqpnsLviqI= Subject key identifier: BD:05:0B:07:13:70:41:0D:CC:87:F0:6C:AD:50:86:B1:D1:2A:A6:8F Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A58CB05EFB67026DF79AEC600 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/9ba10a08-a075-3c34-a1d5-ad8726527e46.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398420 IP address blocks: 216.246.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:05:ef:b6:70:26:df:79:ae:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=ad664788-5cd3-4648-9e72-ad1df05d3418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:39:47:34:14:1d:38:d5:5b:e6:5b:f4:7b: 31:c4:a0:47:f4:da:31:15:ef:1d:a4:7c:f0:2a:7f: d2:3f:0f:fc:67:6a:99:9e:65:62:a8:f5:2e:cf:9b: 2f:90:ab:d1:37:9c:20:eb:e2:e9:76:d8:39:36:aa: 9e:44:70:3d:53:2f:52:43:49:6a:f0:35:66:c3:7d: 5b:b6:91:df:54:68:22:7f:aa:f9:e8:f2:18:9d:61: a3:58:e9:09:d8:a4:50:51:24:ec:99:8a:5b:fd:38: a7:1b:fd:0d:26:e9:c6:eb:ad:74:29:b0:db:48:dc: c2:bf:06:1b:5c:85:8c:dd:e2:83:bd:4e:fd:ca:d5: 49:db:5e:f0:01:e9:61:1f:12:a8:dc:12:bb:f7:49: aa:34:1f:39:b0:27:a5:6c:49:79:ae:f5:f2:48:e7: 94:6b:a2:e7:c9:f2:c8:78:79:f6:13:ee:d2:cf:df: ce:4d:29:94:7a:1d:ae:bb:65:a3:13:3d:c8:63:fd: c3:ea:b5:dc:51:a6:22:4e:2c:d5:a8:14:96:27:1c: 5b:84:f6:ba:c8:86:de:4e:fe:24:b0:91:cb:1c:b7: 76:80:de:b8:da:6b:62:fd:6c:a3:32:8a:ef:c1:2c: a3:37:e1:ae:4b:0c:71:5e:7f:eb:27:62:a1:8a:42: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:05:0B:07:13:70:41:0D:CC:87:F0:6C:AD:50:86:B1:D1:2A:A6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/9ba10a08-a075-3c34-a1d5-ad8726527e46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:aa:24:d3:c1:8b:0a:87:78:67:c6:4b:28:4d:da:fc:85:af: 91:f8:3f:1d:29:d5:b5:e6:86:eb:80:84:81:67:d3:c1:57:8e: 90:e9:19:93:aa:a5:74:08:54:dc:09:e0:ba:67:b0:b2:4a:53: fc:ce:d2:a7:8c:20:bd:c6:ee:88:c9:2b:cf:a5:d8:0a:a5:7f: 6b:35:8b:3f:52:16:64:ea:53:75:98:db:bf:f1:06:80:f8:73: 51:f2:8b:76:ea:bb:95:82:d5:81:6e:f6:e6:f0:a8:1a:91:3e: 92:c8:1c:cf:73:1b:77:72:95:55:d3:ca:0c:2c:97:07:d3:70: 9d:01:0e:d6:13:47:1d:91:e8:47:70:e0:0b:e0:01:06:6b:f0: 5d:07:55:30:77:35:b7:12:1c:cf:dd:5c:c7:7c:1d:9a:08:90: 03:ae:93:d1:cd:ee:46:1b:a8:91:f5:a5:b4:83:dc:26:96:ea: 4e:bc:a9:f3:d9:96:0c:2c:72:e2:1b:f4:12:52:f3:15:f6:7d: da:54:c3:b1:54:2d:d7:e4:86:f0:42:04:b4:f9:b3:a5:18:cf: 98:a5:8b:64:3c:34:b5:b1:20:54:b0:97:7f:ac:7c:5c:e4:e2: 05:25:c6:f2:d3:1f:74:11:85:00:72:df:ac:4e:13:dd:02:18: 91:64:f2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywXvtnAm33muxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk YWQ2NjQ3ODgtNWNkMy00NjQ4LTllNzItYWQxZGYwNWQzNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhA5RzQUHTjVW+Zb9HsxxKBH9NoxFe8dpHzw Kn/SPw/8Z2qZnmViqPUuz5svkKvRN5wg6+Lpdtg5NqqeRHA9Uy9SQ0lq8DVmw31b tpHfVGgif6r56PIYnWGjWOkJ2KRQUSTsmYpb/TinG/0NJunG6610KbDbSNzCvwYb XIWM3eKDvU79ytVJ217wAelhHxKo3BK790mqNB85sCelbEl5rvXySOeUa6LnyfLI eHn2E+7Sz9/OTSmUeh2uu2WjEz3IY/3D6rXcUaYiTizVqBSWJxxbhPa6yIbeTv4k sJHLHLd2gN642mti/WyjMorvwSyjN+GuSwxxXn/rJ2KhikKSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0FCwcTcEENzIfwbK1QhrHRKqaPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvOWJhMTBhMDgtYTA3NS0z YzM0LWExZDUtYWQ4NzI2NTI3ZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByqJNPBiwqHeGfGSyhN2vyFr5H4Px0p1bXmhuuAhIFn08FXjpDpGZOq pXQIVNwJ4LpnsLJKU/zO0qeMIL3G7ojJK8+l2Aqlf2s1iz9SFmTqU3WY27/xBoD4 c1Hyi3bqu5WC1YFu9ubwqBqRPpLIHM9zG3dylVXTygwslwfTcJ0BDtYTRx2R6Edw 4AvgAQZr8F0HVTB3NbcSHM/dXMd8HZoIkAOuk9HN7kYbqJH1pbSD3CaW6k68qfPZ lgwscuIb9BJS8xX2fdpUw7FULdfkhvBCBLT5s6UYz5ili2Q8NLWxIFSwl3+sfFzk 4gUlxvLTH3QRhQBy36xOE90CGJFk8kQ= -----END CERTIFICATE-----Generated at Fri Jul 4 08:14:19 2025 by rpki-client