$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa File: df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa (raw, json) Hash identifier: RaNUUDClz6XCGVUzgZ65tXVABKaTM5ulSpGcAwVqnjo= Subject key identifier: BF:CE:A4:ED:20:BD:0B:22:CC:24:6C:F0:20:56:56:BC:12:09:A8:EB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5CFB3345A0CB220DE08A3400 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 11524 IP address blocks: 216.107.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:33:45:a0:cb:22:0d:e0:8a:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=bfe3c3e3-4bc8-4261-a73e-869923209808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:19:b5:d1:ec:be:fc:4e:d6:44:20:ba:1c: 7d:e0:25:16:e6:39:69:c8:57:a4:94:e1:2c:21:75: b8:65:b8:a9:e4:57:dc:4a:c2:4d:ef:7e:50:4a:7a: ec:97:e3:89:22:bd:34:77:ce:5d:9d:14:6d:47:de: b6:99:c6:08:39:17:49:8f:88:ec:86:04:83:de:cd: ff:af:e8:6d:e0:da:a0:a6:90:03:ca:a0:4d:69:41: e1:1d:70:67:46:85:13:da:ea:84:5d:0a:af:ce:1f: 9e:e5:f7:d7:94:e3:f2:15:03:13:37:aa:74:9f:bd: e6:af:a8:6b:e7:11:b2:bd:08:14:a2:1b:58:93:23: bf:1e:25:d2:2b:09:26:04:a3:44:0e:f7:66:0d:46: fa:af:eb:c1:37:c7:59:27:d6:cc:42:71:1a:86:9a: c7:8b:02:ed:59:c7:e8:51:a8:5b:7d:d4:84:6b:29: 94:40:31:4b:3b:99:c5:d3:21:3b:29:2a:bf:10:a1: d9:08:51:ec:03:14:b6:38:85:a2:1b:75:ab:f5:fc: 5b:06:1b:61:cb:6b:c2:75:0c:2a:d0:06:bd:62:1e: e9:4b:b0:0f:08:57:78:80:42:47:93:b0:69:6a:28: 02:4e:32:66:99:1e:f0:c4:7d:43:44:0f:9a:1a:fc: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:A4:ED:20:BD:0B:22:CC:24:6C:F0:20:56:56:BC:12:09:A8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.107.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e6:7b:68:dd:ea:60:cc:9c:a7:94:89:f6:48:e7:07:e1:e0: e4:f2:23:1e:93:23:10:20:60:73:d1:69:4f:2b:21:de:4c:a4: 43:d0:f4:49:7c:ba:f1:e5:48:e0:cf:3f:13:a8:54:0a:f3:24: dc:f8:64:53:7d:96:af:ca:df:6a:69:da:6b:99:d5:75:da:ff: c7:8c:5d:de:2f:c7:28:6f:29:d4:b3:b5:15:0a:85:5d:62:d3: ee:74:9d:01:d2:95:4e:16:e7:71:f7:1c:09:46:9e:a6:37:e8: 08:7e:da:da:0c:d7:45:01:cc:b7:a0:05:38:f0:2b:4f:3a:0a: 50:cc:d4:26:0e:03:40:0b:11:7d:4d:01:92:87:6c:f0:67:59: ed:0f:26:fc:ab:30:4a:50:8c:81:b5:12:ef:65:9b:9e:15:75: f0:db:fb:50:5d:25:aa:8c:df:75:8f:ea:cf:ee:79:29:bb:6a: db:ac:e6:a6:96:58:ba:1f:98:87:2d:a2:3c:f2:56:08:30:1c: 9b:5a:8b:1e:d7:2e:35:af:0e:4f:35:d5:91:01:a3:d8:85:fb: ad:29:cd:91:15:8c:d9:9f:eb:77:f0:01:c1:c8:6e:47:b8:08: 92:de:25:0b:6a:a2:5f:d7:ab:ea:2d:82:fe:90:c8:ce:f5:60: 47:31:9e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zNFoMsiDeCKNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YmZlM2MzZTMtNGJjOC00MjYxLWE3M2UtODY5OTIzMjA5ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJwZtdHsvvxO1kQguhx94CUW5jlpyFeklOEs IXW4Zbip5FfcSsJN735QSnrsl+OJIr00d85dnRRtR962mcYIORdJj4jshgSD3s3/ r+ht4NqgppADyqBNaUHhHXBnRoUT2uqEXQqvzh+e5ffXlOPyFQMTN6p0n73mr6hr 5xGyvQgUohtYkyO/HiXSKwkmBKNEDvdmDUb6r+vBN8dZJ9bMQnEahprHiwLtWcfo UahbfdSEaymUQDFLO5nF0yE7KSq/EKHZCFHsAxS2OIWiG3Wr9fxbBhthy2vCdQwq 0Aa9Yh7pS7APCFd4gEJHk7BpaigCTjJmmR7wxH1DRA+aGvzi7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/OpO0gvQsizCRs8CBWVrwSCajrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZGY5MzUyYjItOWI1Ny0z YmE1LTkyYTctN2M1ZDJlYjI4YzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvme2jd6mDMnKeUifZI5wfh4OTyIx6TIxAgYHPRaU8rId5MpEPQ9El8 uvHlSODPPxOoVArzJNz4ZFN9lq/K32pp2muZ1XXa/8eMXd4vxyhvKdSztRUKhV1i 0+50nQHSlU4W53H3HAlGnqY36Ah+2toM10UBzLegBTjwK086ClDM1CYOA0ALEX1N AZKHbPBnWe0PJvyrMEpQjIG1Eu9lm54VdfDb+1BdJaqM33WP6s/ueSm7atus5qaW WLofmIctojzyVggwHJtaix7XLjWvDk811ZEBo9iF+60pzZEVjNmf63fwAcHIbke4 CJLeJQtqol/Xq+otgv6QyM71YEcxnlA= -----END CERTIFICATE-----Generated at Wed Jul 9 20:18:04 2025 by rpki-client