$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa File: 8edc1a27-c324-3d26-be3c-15679ecee128.roa (raw, json) Hash identifier: f9S8tcIzdxwdrXzvxpPVVrbFdTC/gNKIplrJh7L/wk0= Subject key identifier: 16:21:5F:05:99:FE:C0:66:3B:52:B7:1A:B3:47:2A:AE:C1:E7:9A:95 Certificate issuer: /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Certificate serial: 010D0C9F4328584A6290A1C1F43CEF85EA72B880 Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 398888 IP address blocks: 128.254.220.0/24 maxlen: 24 163.123.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a1:c1:f4:3c:ef:85:ea:72:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=e97b3ccd-bac8-4589-ac87-89894aedcd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:d6:ac:48:a9:fb:f6:a7:97:ad:71:c9:7d: 42:47:64:ba:25:f6:04:41:ea:b1:01:d5:b1:92:22: 67:77:a5:81:0f:ac:ba:92:49:e9:37:e9:a7:75:d1: d9:71:73:f7:2c:46:07:59:c9:ac:0e:66:dc:bf:fd: 1d:63:be:6a:ae:2d:55:06:25:53:1a:f9:dd:8f:5d: ae:87:cf:1d:15:50:97:04:ac:10:6e:4e:17:fc:0e: 91:f6:14:8d:e1:ef:85:18:d0:8a:b8:21:55:dc:4d: ef:f1:61:54:22:c6:3e:d5:ec:62:d9:b4:c1:b3:45: 6c:1a:ef:12:79:6a:3f:17:62:f4:7c:64:85:fc:d9: 4d:e0:9e:fe:fa:d2:5c:9c:ac:d6:d6:97:46:e0:fc: 7d:d5:42:77:05:fe:e9:55:41:e3:db:dc:e2:b4:44: cb:6f:96:27:3c:c9:4b:80:22:e5:70:09:36:dc:81: ab:f2:d5:f0:bb:07:c0:07:84:ef:d4:ca:dd:84:2a: 1c:4c:d3:25:74:95:a7:ca:6f:84:2c:95:e1:7c:b0: e4:2a:8c:c9:d1:a5:ea:9d:47:0b:58:ec:7b:1b:9c: 50:64:86:96:78:a9:1d:95:f0:bd:ac:cd:bb:c9:21: 5c:3d:21:07:17:5b:0a:0b:6d:ed:07:2a:86:ff:fb: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:21:5F:05:99:FE:C0:66:3B:52:B7:1A:B3:47:2A:AE:C1:E7:9A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl X509v3 Authority Key Identifier: keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.220.0/24 163.123.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cb:35:f9:a3:37:30:9b:0e:31:de:76:ba:27:eb:b2:00:0d: f3:ea:e6:82:a0:17:c6:9d:d7:06:a7:8d:7c:78:e4:90:d2:dd: dd:65:40:d5:f1:5a:cc:e7:f7:c1:ab:63:db:81:8b:80:2f:db: 3b:5b:d5:5f:c3:73:86:72:7e:a6:ad:69:e4:f6:d1:ee:57:ac: 1d:a6:da:fa:75:a4:2b:5f:ca:89:74:fe:58:3b:a4:de:9f:64: c2:fe:3e:43:50:69:5f:19:ae:74:0b:7f:93:54:ad:50:5a:a0: e5:e5:a7:1f:79:7c:fa:21:60:40:bd:ae:f0:ae:ed:c7:71:e3: 20:54:4d:97:b1:71:92:76:9e:52:ca:79:22:d8:25:30:26:da: d6:2a:b3:8f:4b:2c:7d:d0:c1:e5:46:c6:c7:84:aa:c5:4f:4f: ab:69:cd:40:61:6d:dc:f9:56:6d:24:bf:e7:f5:8f:81:12:d7: bc:5a:2b:57:5e:fc:ea:ac:82:7e:ea:cd:64:49:4c:e7:50:88: be:16:62:43:2f:9c:9e:89:44:37:1b:9c:83:d3:12:c9:81:f7: ee:e4:21:1b:36:fd:62:e8:44:9b:98:70:78:28:00:68:fe:10: 28:81:56:5f:ef:da:5d:c5:ea:b8:ad:e9:62:ea:da:c5:55:12: 79:d4:27:95 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpikKHB9DzvhepyuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMz MjNkMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTk3YjNjY2QtYmFjOC00NTg5LWFjODctODk4OTRhZWRjZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBHWrEip+/anl61xyX1CR2S6JfYEQeqxAdWx kiJnd6WBD6y6kknpN+mnddHZcXP3LEYHWcmsDmbcv/0dY75qri1VBiVTGvndj12u h88dFVCXBKwQbk4X/A6R9hSN4e+FGNCKuCFV3E3v8WFUIsY+1exi2bTBs0VsGu8S eWo/F2L0fGSF/NlN4J7++tJcnKzW1pdG4Px91UJ3Bf7pVUHj29zitETLb5YnPMlL gCLlcAk23IGr8tXwuwfAB4Tv1MrdhCocTNMldJWnym+ELJXhfLDkKozJ0aXqnUcL WOx7G5xQZIaWeKkdlfC9rM27ySFcPSEHF1sKC23tByqG//uoCwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBYhXwWZ/sBmO1K3GrNHKq7B55qVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Rl NjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvOGVkYzFhMjctYzMyNC0z ZDI2LWJlM2MtMTU2NzllY2VlMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNkZTY4M2EtMDRiMS00ZTFjLTk0 YzUtY2I0NWU5ODMzMjNkL2QzZGU2ODNhLTA0YjEtNGUxYy05NGM1LWNiNDVlOTgz MzIzZC5jcmwwHwYDVR0jBBgwFoAUIf0rCB2hYHaj1ZCVi5hdPuCb8aQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1 ZTk4MzMyM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgP7cAwQA o3vYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGDLNfmjNzCbDjHedron67IADfPq5oKgF8ad1wanjXx45JDS 3d1lQNXxWszn98GrY9uBi4Av2ztb1V/Dc4ZyfqataeT20e5XrB2m2vp1pCtfyol0 /lg7pN6fZML+PkNQaV8ZrnQLf5NUrVBaoOXlpx95fPohYEC9rvCu7cdx4yBUTZex cZJ2nlLKeSLYJTAm2tYqs49LLH3QweVGxseEqsVPT6tpzUBhbdz5Vm0kv+f1j4ES 17xaK1de/Oqsgn7qzWRJTOdQiL4WYkMvnJ6JRDcbnIPTEsmB9+7kIRs2/WLoRJuY cHgoAGj+ECiBVl/v2l3F6rit6WLq2sVVEnnUJ5U= -----END CERTIFICATE-----Generated at Wed Jul 9 19:44:59 2025 by rpki-client