$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa File: 2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa (raw, json) Hash identifier: LkcIhURNL5y9+4tpF7ZEouEP0E2+zKV1eRd3lVVIv3g= Subject key identifier: 10:A5:68:F7:B9:8F:AC:58:41:D1:41:49:F8:DB:CE:8F:DE:D5:82:56 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584AA85BB8F657272FCDE046C610 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 27608 IP address blocks: 216.68.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b8:f6:57:27:2f:cd:e0:46:c6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=27bc8a3f-345b-40c7-ae1c-14f607a1125f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:ff:07:b4:33:a4:91:2b:a2:b6:66:96:73: 22:bf:a9:22:fb:46:f9:e3:04:8c:64:69:8a:b1:5c: 97:eb:71:34:ec:b8:07:3b:b3:5c:8d:06:d1:45:7a: 59:10:d1:c8:2f:bf:a0:81:d7:e6:6d:bb:7a:1d:7b: f2:aa:3d:8f:3c:97:d0:bc:23:e8:69:75:fe:b7:0f: 6a:fc:98:cc:fa:4e:85:33:84:34:40:cf:26:29:ff: d9:b2:5a:8c:24:5e:6a:f2:af:71:63:19:9d:e3:fd: 1e:8a:96:b6:89:fd:8e:de:70:70:87:23:d1:18:52: 0f:8a:ee:f6:d6:1f:d7:12:aa:24:1f:ef:fd:fd:5e: 26:8d:90:2c:be:d5:4a:06:6f:f8:3a:36:98:91:19: 52:3b:2c:c6:83:91:f5:03:a0:bd:20:72:3c:98:cf: 8e:ca:dc:b5:ab:47:5e:9c:49:5f:f5:54:a6:6f:2d: 2a:9b:94:d9:19:b5:f5:59:d5:17:b7:01:b7:62:75: 8e:32:33:89:08:a2:81:20:d6:2b:43:db:96:65:44: 4d:0e:ba:7d:4c:62:6a:41:cc:d1:bc:af:5d:56:80: 5e:a3:d5:36:9c:e0:77:c4:ff:1e:e2:68:da:08:67: 09:6b:25:a3:2d:fd:a7:df:16:e4:88:af:c7:6c:21: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A5:68:F7:B9:8F:AC:58:41:D1:41:49:F8:DB:CE:8F:DE:D5:82:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:91:4b:c9:17:0a:8b:96:ba:13:42:b5:3f:7e:aa:ce:e2:77: b4:38:5a:a2:d7:ab:af:c6:7f:b3:1f:ad:57:2e:80:0d:ed:13: 4f:14:d9:ae:bb:27:8b:01:ba:aa:24:ca:15:53:01:44:28:46: 1f:61:b5:2f:f0:52:c4:2e:0a:fe:63:ce:36:38:58:c1:b5:09: 66:b6:c1:63:ef:d9:e0:28:b3:c8:26:3f:e3:88:3c:c1:86:5d: 50:f1:7b:48:b2:29:72:7d:aa:88:88:59:18:33:22:ee:59:f7: 7b:c8:35:0a:de:62:28:75:9b:4e:25:aa:1b:5e:c9:93:6b:67: 71:5d:4e:7b:8f:cc:b3:ee:bd:f8:b0:2b:9f:6a:09:36:4e:2a: 57:0d:26:1a:9e:05:05:b6:2e:a0:18:77:5f:bc:5a:ad:92:60: e3:92:3e:8b:1e:53:1e:2d:38:d3:5d:91:10:02:c2:b6:90:bb: 73:86:1c:fa:41:4d:93:10:d6:6d:b1:7e:a8:ea:9c:63:51:f5: e6:ff:b0:19:1a:9b:58:5f:b7:ce:46:f7:c5:93:28:6e:1b:96: 3f:7d:55:7b:6b:38:48:31:87:62:98:5c:b7:be:ea:38:12:62: 84:c2:f8:f7:d2:89:8b:a3:73:40:c8:a0:f5:5a:14:c1:cd:9a: d5:e5:a7:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7j2VycvzeBGxhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MjdiYzhhM2YtMzQ1Yi00MGM3LWFlMWMtMTRmNjA3YTExMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMn/B7QzpJErorZmlnMiv6ki+0b54wSMZGmK sVyX63E07LgHO7NcjQbRRXpZENHIL7+ggdfmbbt6HXvyqj2PPJfQvCPoaXX+tw9q /JjM+k6FM4Q0QM8mKf/ZslqMJF5q8q9xYxmd4/0eipa2if2O3nBwhyPRGFIPiu72 1h/XEqokH+/9/V4mjZAsvtVKBm/4OjaYkRlSOyzGg5H1A6C9IHI8mM+Oyty1q0de nElf9VSmby0qm5TZGbX1WdUXtwG3YnWOMjOJCKKBINYrQ9uWZURNDrp9TGJqQczR vK9dVoBeo9U2nOB3xP8e4mjaCGcJayWjLf2n3xbkiK/HbCGz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBClaPe5j6xYQdFBSfjbzo/e1YJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmYzOGI3ZDEtYjFlZC0z NzAzLTkyODEtMmJhY2UxY2MzZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ET9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuRS8kXCouWuhNCtT9+qs7id7Q4WqLXq6/Gf7MfrVcugA3tE08U2a67 J4sBuqokyhVTAUQoRh9htS/wUsQuCv5jzjY4WMG1CWa2wWPv2eAos8gmP+OIPMGG XVDxe0iyKXJ9qoiIWRgzIu5Z93vINQreYih1m04lqhteyZNrZ3FdTnuPzLPuvfiw K59qCTZOKlcNJhqeBQW2LqAYd1+8Wq2SYOOSPoseUx4tONNdkRACwraQu3OGHPpB TZMQ1m2xfqjqnGNR9eb/sBkam1hft85G98WTKG4blj99VXtrOEgxh2KYXLe+6jgS YoTC+PfSiYujc0DIoPVaFMHNmtXlpz8= -----END CERTIFICATE-----Generated at Wed Jul 30 13:19:06 2025 by rpki-client