$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa File: d3f7cab6-2432-3d76-b034-d13583f80f22.roa (raw, json) Hash identifier: p3lNofXFNMer23dmrzNfZDL9jTokg3Bwrdablf8mktY= Subject key identifier: 68:B9:7B:8D:31:0F:77:47:87:28:DA:9D:D9:B9:BA:65:07:21:67:E8 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A63F5BBFEB9DD26473B742EC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 11233 IP address blocks: 216.110.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:bb:fe:b9:dd:26:47:3b:74:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=0982de42-5746-49e3-9b94-0ac7908bd321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:3b:9e:7c:76:fb:aa:97:a0:d8:d4:d6:3f: 09:b9:bc:e0:7b:56:f7:ee:ff:d6:83:61:11:54:d2: 15:f0:1c:27:1e:ba:2e:c4:03:2c:b6:81:ae:ae:d2: 7c:a6:05:fe:64:a4:2c:47:e1:06:e8:fa:a4:6e:94: a9:87:10:62:81:11:1f:0a:9c:a4:5b:b3:17:72:ca: 4f:f5:a0:96:63:6b:f7:98:d1:87:ee:ea:07:9e:a8: d5:b7:28:29:01:3f:9d:21:a5:c1:35:f6:13:08:b5: 4f:74:77:6f:e4:f3:20:40:f6:ee:8b:08:c1:67:ed: bd:62:46:53:97:0e:1c:b9:a8:a4:20:14:d1:ae:30: 97:d0:ee:63:b6:e3:80:78:2f:7d:d2:77:c5:8b:67: 12:e4:2c:33:3c:6e:68:4a:c0:1e:47:35:b2:80:7d: 07:0a:b6:44:4b:05:c1:df:40:db:e9:e4:52:a8:a6: d7:ab:98:1a:cb:bc:73:00:2d:42:06:ed:f1:7e:d4: e6:66:68:bf:09:a5:2c:6d:3b:21:c0:0c:37:f0:c1: 5b:f0:58:9f:d0:b6:a5:dc:27:8a:9d:5b:d4:09:42: ff:32:7b:a8:70:b2:d6:16:6f:cd:39:0a:49:aa:2e: e9:4a:ae:55:4e:72:f5:38:5b:ca:2c:cc:b7:53:2a: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B9:7B:8D:31:0F:77:47:87:28:DA:9D:D9:B9:BA:65:07:21:67:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 216.110.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:bc:f5:49:dc:99:bd:07:f5:80:e1:ac:a9:95:08:a3:83:f5: 41:2c:ae:a5:52:41:ac:f8:b0:e7:70:56:84:ae:ad:bf:7c:27: a0:2c:98:de:ce:2b:94:8b:a5:d7:19:b4:8f:00:43:70:e2:6e: 83:b0:31:d7:36:63:a0:d2:45:3a:c1:1c:dc:61:2e:63:37:31: ed:f5:9e:1d:09:57:da:3a:b9:32:a1:81:1a:bb:cd:79:4f:8e: f0:9f:79:d0:ba:c7:a7:71:2f:48:6a:64:85:f4:4d:d1:be:e6: be:3a:58:59:0a:01:30:b4:d9:15:a2:80:0a:3b:0b:9d:52:6b: 93:81:ec:a1:97:fc:dd:74:2a:2b:0a:43:dd:a1:7b:cb:8e:cb: 9c:c3:d7:86:bf:c0:b7:66:f5:a0:d3:0c:75:aa:8e:27:73:d8: 2b:a9:58:85:f7:f8:bd:21:64:f5:7a:83:88:4f:3d:f8:1a:2e: fe:dc:a3:0e:22:4b:47:92:f6:0e:bf:7a:6f:c0:ca:66:91:a5: 6d:a7:a9:1b:0a:0b:73:17:40:e2:d4:05:cb:88:5b:ed:ef:ce: 00:94:7d:8f:19:aa:93:e4:34:5d:11:ce:1e:0f:10:f5:47:20: 82:ca:a3:18:05:fc:2c:f2:a5:12:47:89:c6:f0:94:1f:ef:db: 5a:0f:a9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9bv+ud0mRzt0LsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk MDk4MmRlNDItNTc0Ni00OWUzLTliOTQtMGFjNzkwOGJkMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7I7nnx2+6qXoNjU1j8Jubzge1b37v/Wg2ER VNIV8BwnHrouxAMstoGurtJ8pgX+ZKQsR+EG6PqkbpSphxBigREfCpykW7MXcspP 9aCWY2v3mNGH7uoHnqjVtygpAT+dIaXBNfYTCLVPdHdv5PMgQPbuiwjBZ+29YkZT lw4cuaikIBTRrjCX0O5jtuOAeC990nfFi2cS5CwzPG5oSsAeRzWygH0HCrZESwXB 30Db6eRSqKbXq5gay7xzAC1CBu3xftTmZmi/CaUsbTshwAw38MFb8Fif0Lal3CeK nVvUCUL/MnuocLLWFm/NOQpJqi7pSq5VTnL1OFvKLMy3Uyo66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi5e40xD3dHhyjandm5umUHIWfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZDNmN2NhYjYtMjQzMi0z ZDc2LWIwMzQtZDEzNTgzZjgwZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO89Uncmb0H9YDhrKmVCKOD9UEsrqVSQaz4sOdwVoSurb98J6AsmN7O K5SLpdcZtI8AQ3DiboOwMdc2Y6DSRTrBHNxhLmM3Me31nh0JV9o6uTKhgRq7zXlP jvCfedC6x6dxL0hqZIX0TdG+5r46WFkKATC02RWigAo7C51Sa5OB7KGX/N10KisK Q92he8uOy5zD14a/wLdm9aDTDHWqjidz2CupWIX3+L0hZPV6g4hPPfgaLv7cow4i S0eS9g6/em/AymaRpW2nqRsKC3MXQOLUBcuIW+3vzgCUfY8ZqpPkNF0Rzh4PEPVH IILKoxgF/CzypRJHicbwlB/v21oPqbA= -----END CERTIFICATE-----Generated at Wed Jul 9 14:38:06 2025 by rpki-client