$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa File: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (raw, json) Hash identifier: I8jJkpYCnpcNExBx/uesZZHb2FVa8LudPC8q7tk9IrI= Subject key identifier: 0C:D3:53:42:09:DA:47:00:68:90:CB:D2:D4:5C:15:9D:62:D9:90:91 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584A00DABF7B89B9E6CF0C410E00 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 212149 IP address blocks: 207.167.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bf:7b:89:b9:e6:cf:0c:41:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=12e3cae7-2821-4ffe-9892-b755efb12cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e0:3d:42:b8:b3:81:86:22:cf:23:5a:59:80: f9:07:50:ac:54:71:4c:5f:f2:85:91:d0:73:01:b2: ec:51:e0:2e:2c:c8:14:ad:ff:34:5a:55:f1:40:93: 4b:14:84:02:9a:14:3c:7b:19:67:8a:58:8a:e8:7b: f3:bc:ed:b1:d8:78:7c:b9:9b:9f:9b:3f:10:b6:0d: b2:96:a1:ac:22:9a:62:35:b8:67:9e:c1:e1:4e:8c: 46:a1:a6:8f:5b:1b:dc:54:e4:81:5d:63:cf:b3:33: 39:52:61:da:0e:2a:be:fd:32:b0:c9:b7:8d:9e:1c: 68:70:c8:c7:ff:89:7b:ff:1d:b5:1a:73:97:08:db: e6:3c:fa:4f:c3:09:79:35:20:ae:5e:49:93:34:21: b3:7c:40:46:71:73:65:cb:6e:27:ed:08:a4:f5:ba: 16:28:22:58:f1:82:da:ad:e0:bb:d1:5f:27:bd:51: 14:f2:f2:e5:fb:54:db:97:0f:3a:df:b8:2b:8c:e2: d1:9e:69:c5:97:2f:53:82:49:93:ae:d1:55:77:e6: a8:39:c5:4c:1e:08:37:d5:b2:be:d7:96:83:56:51: 09:5c:92:f8:e6:e5:2a:14:19:c3:8e:69:0b:a6:a0: 48:97:c0:2f:3a:c1:3c:d8:9b:9e:0b:71:8e:97:45: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D3:53:42:09:DA:47:00:68:90:CB:D2:D4:5C:15:9D:62:D9:90:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:0d:3b:6b:9a:e2:cb:68:8a:d6:77:2a:f4:2e:3d:eb:14:33: 1c:36:2d:e7:3d:04:3f:5b:8e:96:89:c4:40:de:67:5d:cc:58: fe:fe:33:e8:c4:a5:cf:48:d7:27:b5:7c:62:e5:cb:75:c8:47: 12:b9:e4:74:98:38:16:cf:85:f6:6f:d0:8d:aa:c2:83:31:25: 58:94:ac:9e:d2:a4:06:27:4c:1b:87:a7:06:d0:19:05:68:65: 6b:89:c4:6a:2f:e1:ce:72:f6:2c:7f:74:32:3e:90:ec:d8:39: 7d:f3:a5:a9:c3:48:fa:b8:02:0a:cc:6b:98:eb:a4:dc:9d:15: a1:43:84:3d:62:e7:71:dc:cb:50:8a:33:bc:4d:9a:39:75:a2: b0:d4:69:d5:90:1d:d8:32:47:5c:16:bc:30:c9:5b:ff:f0:56: 40:03:d1:fd:96:ce:42:80:a5:36:0d:e2:09:49:8d:c4:44:fd: 80:f9:40:de:74:51:11:68:29:b9:e5:e1:02:8b:ef:89:4c:d2: 4b:19:70:ac:ed:b3:b8:aa:59:af:d9:1e:2d:55:b9:40:6a:0a: b7:66:f7:0d:57:70:45:42:76:15:21:ac:4f:60:90:98:d7:a7: f5:64:a3:1f:fb:6d:c3:bb:c3:7d:e7:8d:72:0a:10:dd:32:19: df:93:4e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2r97ibnmzwxBDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MTJlM2NhZTctMjgyMS00ZmZlLTk4OTItYjc1NWVmYjEyY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheA9QrizgYYizyNaWYD5B1CsVHFMX/KFkdBz AbLsUeAuLMgUrf80WlXxQJNLFIQCmhQ8exlniliK6HvzvO2x2Hh8uZufmz8Qtg2y lqGsIppiNbhnnsHhToxGoaaPWxvcVOSBXWPPszM5UmHaDiq+/TKwybeNnhxocMjH /4l7/x21GnOXCNvmPPpPwwl5NSCuXkmTNCGzfEBGcXNly24n7Qik9boWKCJY8YLa reC70V8nvVEU8vLl+1Tblw8637grjOLRnmnFly9TgkmTrtFVd+aoOcVMHgg31bK+ 15aDVlEJXJL45uUqFBnDjmkLpqBIl8AvOsE82JueC3GOl0UeBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzTU0IJ2kcAaJDL0tRcFZ1i2ZCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYjc3MTg5NTYtODI5YS0z ZTAyLTlhMmItN2NmYjg0ZjIwMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUNO2ua4stoitZ3KvQuPesUMxw2Lec9BD9bjpaJxEDeZ13MWP7+M+jE pc9I1ye1fGLly3XIRxK55HSYOBbPhfZv0I2qwoMxJViUrJ7SpAYnTBuHpwbQGQVo ZWuJxGov4c5y9ix/dDI+kOzYOX3zpanDSPq4AgrMa5jrpNydFaFDhD1i53Hcy1CK M7xNmjl1orDUadWQHdgyR1wWvDDJW//wVkAD0f2WzkKApTYN4glJjcRE/YD5QN50 URFoKbnl4QKL74lM0ksZcKzts7iqWa/ZHi1VuUBqCrdm9w1XcEVCdhUhrE9gkJjX p/Vkox/7bcO7w33njXIKEN0yGd+TThQ= -----END CERTIFICATE-----Generated at Wed Jun 4 21:49:36 2025 by rpki-client