$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bf37f4a1-54de-3bb9-977d-b5775b253a42.roa File: bf37f4a1-54de-3bb9-977d-b5775b253a42.roa (raw, json) Hash identifier: xVJaG3FM6qoivW6sXK83zVEsBl4Ec5fT4YAke+4piqs= Subject key identifier: 57:C6:84:B9:EE:BF:4D:4E:0A:D8:A6:03:E5:4A:6C:E8:BF:51:2F:9E Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584A71EB53CDC1D92AA3FB722000 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bf37f4a1-54de-3bb9-977d-b5775b253a42.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 19886 IP address blocks: 171.162.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:53:cd:c1:d9:2a:a3:fb:72:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=1dffd2f3-ea2a-4d66-b47f-8c8fdf5f7433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:2a:8b:05:04:2c:38:1c:c7:f6:4e:54:22: 5b:d8:8a:7f:43:14:75:3c:db:f0:c5:80:4a:a0:8c: ae:30:1d:39:48:5e:9b:d4:11:5a:a7:c1:47:71:9f: 21:3d:1c:40:8e:53:e4:b0:44:f1:86:a8:fc:5b:df: 19:ca:85:a1:be:8b:2d:fc:88:d1:b3:63:ee:17:1a: 07:e1:2e:31:f7:68:d1:6b:83:4b:65:d3:69:9d:dc: 72:ee:55:ea:73:6e:e2:b1:b1:3a:bb:67:b1:ac:0d: c9:58:92:b1:7f:49:27:ff:4a:85:81:41:01:31:cd: 46:93:a6:72:cd:c8:8e:a1:08:24:89:9d:c7:cf:00: 7e:53:40:64:8c:87:da:f3:72:62:1b:09:0f:03:25: 22:3a:a3:94:f9:ed:1c:10:37:59:6e:3b:7e:9f:0c: 1d:08:13:e2:8b:ed:d4:1a:8d:ab:7a:09:5c:b7:2b: 2a:3d:76:a2:41:4d:d1:20:75:41:f0:c5:23:e0:72: 2a:37:66:07:c4:c6:5b:41:50:5d:9f:54:20:47:94: 6d:72:73:09:5a:51:c3:bc:b5:36:07:53:a3:fa:06: 9c:1a:f5:b6:7c:71:3a:c6:9d:7e:28:82:20:9b:d8: 30:aa:f3:fe:be:bf:98:dc:99:dc:eb:7e:de:6b:3b: c9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C6:84:B9:EE:BF:4D:4E:0A:D8:A6:03:E5:4A:6C:E8:BF:51:2F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bf37f4a1-54de-3bb9-977d-b5775b253a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a7:af:ba:da:0a:5c:b7:34:4f:79:8a:79:97:76:4d:90:eb: f1:70:a1:a1:02:0e:af:e6:3a:10:af:32:ef:53:4c:fe:fd:2b: ea:a3:5c:16:d8:cd:bf:31:7d:c5:20:20:b5:66:60:0d:78:a7: d4:12:f2:36:84:fe:70:b1:fa:b5:bc:48:2a:8d:42:38:7b:53: 97:a6:df:b6:d8:10:68:18:70:27:d7:ef:39:f9:4d:d9:ed:e4: a0:e5:64:83:55:8b:a2:03:e8:ca:c9:7e:b9:c8:5d:07:32:95: 10:e8:4a:32:22:db:dc:82:5a:bf:b4:29:7b:20:e8:9b:a7:dd: a3:41:10:73:9b:a5:9a:cf:16:8f:ae:82:e4:b0:b6:0f:ea:2e: e6:55:09:99:d0:4a:cf:c2:e9:3e:19:a8:b5:6d:54:75:70:95: 5a:d3:e0:e4:6c:9c:a3:59:de:26:72:d7:27:e7:e1:c6:38:32: f1:c4:af:05:46:05:92:e8:dc:1f:69:ab:75:b1:4b:65:1b:98: df:da:50:fc:c8:f3:1e:47:4e:f4:a2:6a:19:3e:29:83:25:47: 41:9e:23:fc:c4:04:11:c0:68:b0:63:b0:41:d5:ef:ee:ac:49: 46:7c:50:32:55:ab:48:f7:d7:b6:b0:77:ac:b3:67:63:5e:41: 1d:b4:b7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61PNwdkqo/tyIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MWRmZmQyZjMtZWEyYS00ZDY2LWI0N2YtOGM4ZmRmNWY3NDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwgqiwUELDgcx/ZOVCJb2Ip/QxR1PNvwxYBK oIyuMB05SF6b1BFap8FHcZ8hPRxAjlPksETxhqj8W98ZyoWhvost/IjRs2PuFxoH 4S4x92jRa4NLZdNpndxy7lXqc27isbE6u2exrA3JWJKxf0kn/0qFgUEBMc1Gk6Zy zciOoQgkiZ3HzwB+U0BkjIfa83JiGwkPAyUiOqOU+e0cEDdZbjt+nwwdCBPii+3U Go2reglctysqPXaiQU3RIHVB8MUj4HIqN2YHxMZbQVBdn1QgR5RtcnMJWlHDvLU2 B1Oj+gacGvW2fHE6xp1+KIIgm9gwqvP+vr+Y3Jnc637eazvJGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfGhLnuv01OCtimA+VKbOi/US+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmYzN2Y0YTEtNTRkZS0z YmI5LTk3N2QtYjU3NzViMjUzYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqnr7raCly3NE95inmXdk2Q6/FwoaECDq/mOhCvMu9TTP79K+qjXBbY zb8xfcUgILVmYA14p9QS8jaE/nCx+rW8SCqNQjh7U5em37bYEGgYcCfX7zn5Tdnt 5KDlZINVi6ID6MrJfrnIXQcylRDoSjIi29yCWr+0KXsg6Jun3aNBEHObpZrPFo+u guSwtg/qLuZVCZnQSs/C6T4ZqLVtVHVwlVrT4ORsnKNZ3iZy1yfn4cY4MvHErwVG BZLo3B9pq3WxS2UbmN/aUPzI8x5HTvSiahk+KYMlR0GeI/zEBBHAaLBjsEHV7+6s SUZ8UDJVq0j317awd6yzZ2NeQR20txM= -----END CERTIFICATE-----Generated at Wed Jul 9 14:17:08 2025 by rpki-client