$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2d9d5933-2255-3d87-8089-921bae894f27.roa File: 2d9d5933-2255-3d87-8089-921bae894f27.roa (raw, json) Hash identifier: LPuFGQEeRoa2BP1DiamPlNlMF03zPBXW3uudZuLgiZQ= Subject key identifier: 43:BA:03:F2:25:F0:49:65:A5:AD:80:1D:38:D5:89:8D:31:49:9A:4E Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A0D6A810703CB6BDA06F3E1C0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2d9d5933-2255-3d87-8089-921bae894f27.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 22652 IP address blocks: 216.137.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:81:07:03:cb:6b:da:06:f3:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=24a7f555-12e7-4bbe-9b0b-119d3be200b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:4b:c1:15:33:13:2d:24:69:ea:16:85:38: a8:f1:a7:08:52:bb:4b:8b:87:54:45:fa:b5:05:e6: 00:77:53:ea:18:b6:aa:b5:43:59:02:e7:2c:0d:cd: ee:70:ee:ae:5e:b1:49:45:d1:91:b2:fc:c3:e0:4a: 54:56:a0:0d:ea:15:1b:1e:44:18:71:96:2d:10:2d: 75:c5:86:43:54:eb:35:6e:54:2d:42:1b:95:4f:b9: ba:e4:fa:53:14:ae:10:33:29:e6:ba:b2:cf:a3:8d: d1:87:f2:02:0b:3b:39:d5:3b:b1:9e:3a:28:be:d6: 0d:fc:a1:fb:3d:38:ae:1e:b7:61:d0:8d:50:31:de: 72:c4:69:2b:a1:6e:c0:63:24:98:65:49:4b:f5:50: 86:d8:f6:dd:9d:17:76:29:f7:82:2d:5e:fe:e9:19: 02:76:0e:67:de:f3:8d:23:35:c4:e0:58:9d:6d:b5: 11:8a:cb:e9:16:bb:14:d8:76:6e:eb:8d:3f:96:c2: b7:10:a9:f4:12:e9:fe:17:53:9f:6d:93:be:1e:95: fa:3b:51:3d:3b:87:75:8f:8d:ec:84:de:ad:fb:47: 5e:09:e4:9e:5a:e8:82:f5:3f:63:32:6e:15:c0:e9: a8:08:2c:04:f4:05:30:6a:ac:5e:e7:12:3c:ca:de: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BA:03:F2:25:F0:49:65:A5:AD:80:1D:38:D5:89:8D:31:49:9A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2d9d5933-2255-3d87-8089-921bae894f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 216.137.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:34:75:33:b5:e1:44:06:f8:12:9f:a2:ea:37:87:68:b4:1d: f8:73:ec:75:99:18:10:32:eb:88:8b:d7:6c:f5:9c:69:ca:14: c4:c7:9b:a4:4c:4f:65:59:83:b4:c4:4b:ad:3c:40:e1:7c:0f: 68:81:dd:c5:a9:a1:96:85:60:4d:4e:29:4a:24:7c:4c:ea:20: bf:0d:be:82:0f:8e:b5:4c:bb:a8:95:25:5b:fa:ac:75:2f:9c: 9d:2b:e3:2e:df:fb:21:4f:5c:24:d8:1d:1f:a7:46:c4:4d:ab: 3c:6e:81:14:cc:0c:d3:12:bf:6e:38:c9:20:f5:25:b9:82:03: e1:ec:e6:6e:95:71:95:01:13:21:89:ec:d6:9a:18:34:4e:e9: cd:cc:e3:16:6b:b0:7b:c7:df:24:bb:a4:43:33:f2:7b:b0:39: 84:54:21:2d:8d:eb:10:4f:6b:2d:86:fb:40:59:3a:70:87:b2: 8c:11:87:28:3f:0c:17:f1:d2:20:6c:36:11:e2:34:88:88:24: 06:61:8a:80:a7:15:bd:85:e3:ec:57:93:ef:97:f8:36:f3:c2: f3:4c:fa:fb:99:34:90:9e:74:f4:9b:94:c1:df:40:9d:34:9a: 93:45:8d:81:f0:8e:6c:0f:f1:a1:7b:31:37:8d:d1:d0:ec:b2: 11:39:87:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoEHA8tr2gbz4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk MjRhN2Y1NTUtMTJlNy00YmJlLTliMGItMTE5ZDNiZTIwMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCFLwRUzEy0kaeoWhTio8acIUrtLi4dURfq1 BeYAd1PqGLaqtUNZAucsDc3ucO6uXrFJRdGRsvzD4EpUVqAN6hUbHkQYcZYtEC11 xYZDVOs1blQtQhuVT7m65PpTFK4QMynmurLPo43Rh/ICCzs51TuxnjoovtYN/KH7 PTiuHrdh0I1QMd5yxGkroW7AYySYZUlL9VCG2PbdnRd2KfeCLV7+6RkCdg5n3vON IzXE4FidbbURisvpFrsU2HZu640/lsK3EKn0Eun+F1OfbZO+HpX6O1E9O4d1j43s hN6t+0deCeSeWuiC9T9jMm4VwOmoCCwE9AUwaqxe5xI8yt5tFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO6A/Il8Ellpa2AHTjViY0xSZpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMmQ5ZDU5MzMtMjI1NS0z ZDg3LTgwODktOTIxYmFlODk0ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2ImoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY0dTO14UQG+BKfouo3h2i0Hfhz7HWZGBAy64iL12z1nGnKFMTHm6RM T2VZg7TES608QOF8D2iB3cWpoZaFYE1OKUokfEzqIL8NvoIPjrVMu6iVJVv6rHUv nJ0r4y7f+yFPXCTYHR+nRsRNqzxugRTMDNMSv244ySD1JbmCA+Hs5m6VcZUBEyGJ 7NaaGDRO6c3M4xZrsHvH3yS7pEMz8nuwOYRUIS2N6xBPay2G+0BZOnCHsowRhyg/ DBfx0iBsNhHiNIiIJAZhioCnFb2F4+xXk++X+DbzwvNM+vuZNJCedPSblMHfQJ00 mpNFjYHwjmwP8aF7MTeN0dDsshE5h+o= -----END CERTIFICATE-----Generated at Sun Jun 8 23:17:59 2025 by rpki-client