$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa File: 5d5e9cfa-65df-3536-bd71-8854db468e18.roa (raw, json) Hash identifier: cpsjSQpZ98wqlHwzdJ0MJxXC8jzBuxUkEy7ByslMuFM= Subject key identifier: 61:81:24:84:95:E7:AA:C7:C9:A3:9B:B8:56:53:08:F5:8D:FC:57:2E Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A68260257F3790E72C13F4080 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 13536 IP address blocks: 216.59.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:02:57:f3:79:0e:72:c1:3f:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=3b28de8e-174b-4c80-a2c4-55e5271e1dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:29:13:4e:14:41:83:4c:06:24:bf:e3:7f: 2d:90:17:da:60:7d:b9:a6:2e:cb:1a:22:26:54:5b: 6b:09:5b:76:6e:c9:28:08:a0:a0:35:73:11:aa:c3: e6:fa:9d:ad:44:cd:0c:64:e5:18:a6:b2:fe:9f:67: 73:22:ba:5c:8a:a7:20:99:71:4f:f4:64:cf:24:a6: 86:4c:a1:16:e1:3b:ab:bf:37:ed:20:62:2b:07:29: af:88:3d:9c:97:eb:29:61:99:f1:35:19:70:33:cc: 2e:f1:6c:6c:c8:19:0c:39:c2:7e:cb:35:5c:7b:54: e4:00:5e:8a:13:36:27:ff:fb:9e:1e:b7:f2:10:71: 2b:f4:a9:b0:0b:b2:d2:b3:1f:9b:e8:c4:36:b6:6b: c4:20:18:55:07:9f:18:1c:c2:55:eb:b0:50:26:49: 29:00:b1:8b:29:f2:66:e3:3a:d3:38:e4:20:98:2b: 1f:2d:66:51:07:2c:cc:83:22:90:2f:99:4f:de:91: 05:ed:a1:91:31:0a:a7:87:e6:f4:3e:c3:7c:91:0c: 6d:4a:c5:3c:5a:42:bc:2f:ed:29:0a:4c:e1:07:0d: c8:11:6c:51:5f:4c:e0:0e:0a:ed:b0:e8:19:04:41: e9:d6:dc:cc:d1:e7:20:a5:b4:81:d1:31:d0:1c:d8: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:81:24:84:95:E7:AA:C7:C9:A3:9B:B8:56:53:08:F5:8D:FC:57:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:82:d6:f8:39:ac:75:fd:f8:64:ce:88:07:c4:36:58:d9:2a: dc:e6:05:6f:03:9e:8d:b5:c7:2d:01:c1:0d:88:9a:cc:31:ef: ed:a5:ce:0a:15:83:6d:b8:03:eb:7a:c0:98:cb:06:cb:e1:84: d1:5b:7e:26:50:41:b0:ad:76:0f:57:6f:ae:1a:12:e6:dd:86: 77:78:da:b3:05:78:5f:96:e3:6c:4f:ad:01:5d:73:61:79:0a: 00:5d:98:38:a5:3e:3c:5b:75:b5:e4:a6:1d:2b:76:d5:c8:21: 61:13:61:d5:db:e2:65:09:00:1f:46:26:2f:69:04:58:02:65: c6:0b:33:da:ea:95:4a:6a:1e:f5:89:d0:c6:68:0b:e1:e6:1d: 28:7c:51:91:c1:c1:89:e7:02:15:5b:8a:63:96:15:0a:fb:3c: 5c:8c:24:a2:b6:de:73:60:7e:4f:ae:3e:39:38:f9:f2:40:93: 41:b5:34:10:48:5e:b5:a9:3a:55:07:c7:fe:1e:cd:43:fd:e6: b3:5f:c5:61:7a:a2:9d:80:e5:ce:8c:4e:90:bf:a3:eb:a6:f8: 5e:92:67:36:23:71:6f:c6:53:02:8c:9d:76:b7:71:f0:e1:b4: b6:e4:d9:55:7c:67:d4:dd:00:71:87:89:b3:59:8a:ab:7b:4b: 89:92:d5:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgJX83kOcsE/QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk M2IyOGRlOGUtMTc0Yi00YzgwLWEyYzQtNTVlNTI3MWUxZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphcpE04UQYNMBiS/438tkBfaYH25pi7LGiIm VFtrCVt2bskoCKCgNXMRqsPm+p2tRM0MZOUYprL+n2dzIrpciqcgmXFP9GTPJKaG TKEW4TurvzftIGIrBymviD2cl+spYZnxNRlwM8wu8WxsyBkMOcJ+yzVce1TkAF6K EzYn//ueHrfyEHEr9KmwC7LSsx+b6MQ2tmvEIBhVB58YHMJV67BQJkkpALGLKfJm 4zrTOOQgmCsfLWZRByzMgyKQL5lP3pEF7aGRMQqnh+b0PsN8kQxtSsU8WkK8L+0p CkzhBw3IEWxRX0zgDgrtsOgZBEHp1tzM0ecgpbSB0THQHNhxWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGBJISV56rHyaObuFZTCPWN/FcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNWQ1ZTljZmEtNjVkZi0z NTM2LWJkNzEtODg1NGRiNDY4ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmC1vg5rHX9+GTOiAfENljZKtzmBW8Dno21xy0BwQ2Imswx7+2lzgoV g224A+t6wJjLBsvhhNFbfiZQQbCtdg9Xb64aEubdhnd42rMFeF+W42xPrQFdc2F5 CgBdmDilPjxbdbXkph0rdtXIIWETYdXb4mUJAB9GJi9pBFgCZcYLM9rqlUpqHvWJ 0MZoC+HmHSh8UZHBwYnnAhVbimOWFQr7PFyMJKK23nNgfk+uPjk4+fJAk0G1NBBI XrWpOlUHx/4ezUP95rNfxWF6op2A5c6MTpC/o+um+F6SZzYjcW/GUwKMnXa3cfDh tLbk2VV8Z9TdAHGHibNZiqt7S4mS1TQ= -----END CERTIFICATE-----Generated at Wed Jul 9 16:38:24 2025 by rpki-client