$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa File: cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa (raw, json) Hash identifier: KeWp3KXro3WqLavOcFf/0UUzqvtLR6OfGLyUZZIWiyg= Subject key identifier: 37:04:7D:7D:C6:F1:F6:1E:FA:55:69:16:4F:F3:75:36:9D:C6:42:DF Certificate issuer: /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1 Certificate serial: 010D0C9F4328584A6DBB48EE85198D74D01069E8 Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 32554 IP address blocks: 216.162.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:48:ee:85:19:8d:74:d0:10:69:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=1559e63e-10d1-40ad-bd22-90feea852252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:d4:4e:fe:9e:a4:45:c8:84:83:99:cf:e3: 8d:d4:dc:0f:ea:59:4c:e1:bb:cc:c5:9d:7e:6e:44: 36:bc:a6:64:8e:2f:14:4f:ca:8b:c7:2e:2f:9a:b8: 17:86:f4:87:f9:32:ec:44:ab:65:e9:eb:58:ca:a6: d6:6c:c2:0b:53:62:da:e2:b1:bc:3c:11:fe:ec:b4: c3:02:bc:be:ee:46:93:be:e5:1d:4c:b2:c2:bf:01: f1:ba:41:4e:10:83:68:5a:2f:6c:f4:17:97:d5:2b: 0d:32:38:39:6e:5a:ca:73:4d:0e:88:ef:05:5d:68: ca:6d:91:a6:0a:be:b1:c3:6e:bf:43:b3:68:27:aa: a1:10:e8:37:4c:ee:bd:55:2d:8b:cb:19:20:f7:13: 59:5c:b9:53:21:c4:1b:aa:50:0d:df:b6:e0:33:b1: e7:d4:7c:50:de:cb:2d:a9:aa:72:e5:93:da:b4:9f: 56:89:c5:af:d9:ad:21:4d:e8:a2:1b:96:e6:75:e5: d1:b2:c8:4c:18:75:89:eb:fb:d6:e2:14:15:79:c8: fc:5f:5a:a1:f4:03:dd:0a:a6:56:d7:2a:68:51:f2: 8a:20:79:76:45:8c:9c:22:3b:29:0b:37:ea:78:68: b0:da:68:cc:95:4c:e7:0b:11:0c:bc:a8:8e:d9:0b: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:7D:7D:C6:F1:F6:1E:FA:55:69:16:4F:F3:75:36:9D:C6:42:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl X509v3 Authority Key Identifier: keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer sbgp-ipAddrBlock: critical IPv4: 216.162.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:63:28:2b:94:f2:a8:b2:b4:d8:33:5d:f7:c2:52:56:17:49: 64:97:8a:51:d6:c5:39:58:aa:b8:8c:78:5a:e4:b9:e2:69:95: 25:a8:e2:f0:66:a3:2f:a6:b6:53:e3:13:0c:5d:de:2f:72:c9: be:2d:d9:e8:12:1b:74:fe:b4:e0:19:ce:bb:2d:9f:51:55:46: c9:c4:48:dc:17:11:19:7a:ca:ba:cf:7e:31:72:99:4e:96:8a: b8:d1:38:c8:03:f3:8b:75:89:98:df:5a:b9:9f:cb:e8:73:b2: 6c:05:9e:f2:be:12:60:0c:7f:58:8b:1f:25:11:c5:10:72:10: d4:55:f2:1f:fc:f8:e4:ab:3a:4b:4a:d8:6b:e0:25:39:82:81: da:33:86:2e:36:e3:82:8d:14:6b:0e:18:b9:15:d8:be:b8:ff: b6:90:f3:75:b3:ea:cd:0e:8e:bf:1a:0b:8c:95:46:44:49:4f: 3d:d5:64:03:e2:a8:13:8c:7a:d6:60:51:d2:a4:c3:8e:7b:34: ef:ba:d8:c5:9a:6f:8d:06:38:35:1d:dd:47:df:03:e4:d8:d7: e9:f6:11:3b:b6:8b:ff:82:1b:ad:96:b1:a5:b1:0f:86:7c:03: a0:d4:0e:f4:53:d7:b8:8d:32:5c:0c:aa:d6:1f:45:c9:d0:be: 79:02:91:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0juhRmNdNAQaegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0ZjljMmMtMjM4Yi00ZDIzLThlOGItYWIyZjVhMDE0 N2MxMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MTU1OWU2M2UtMTBkMS00MGFkLWJkMjItOTBmZWVhODUyMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMzUTv6epEXIhIOZz+ON1NwP6llM4bvMxZ1+ bkQ2vKZkji8UT8qLxy4vmrgXhvSH+TLsRKtl6etYyqbWbMILU2La4rG8PBH+7LTD Ary+7kaTvuUdTLLCvwHxukFOEINoWi9s9BeX1SsNMjg5blrKc00OiO8FXWjKbZGm Cr6xw26/Q7NoJ6qhEOg3TO69VS2Lyxkg9xNZXLlTIcQbqlAN37bgM7Hn1HxQ3sst qapy5ZPatJ9WicWv2a0hTeiiG5bmdeXRsshMGHWJ6/vW4hQVecj8X1qh9APdCqZW 1ypoUfKKIHl2RYycIjspCzfqeGiw2mjMlUznCxEMvKiO2QsTxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcEfX3G8fYe+lVpFk/zdTadxkLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRm OWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJmNWEwMTQ3YzEvY2I2YTk4YTAtYTJiNy0z ZDBmLTgxNzItZTJkM2ExM2Y1MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg0ZjljMmMtMjM4Yi00ZDIzLThl OGItYWIyZjVhMDE0N2MxLzQ4NGY5YzJjLTIzOGItNGQyMy04ZThiLWFiMmY1YTAx NDdjMS5jcmwwHwYDVR0jBBgwFoAUJvYUx7M4uObYmWgDAdqyOnczs9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRmOWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJm NWEwMTQ3YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KJdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBjKCuU8qiytNgzXffCUlYXSWSXilHWxTlYqriMeFrkueJplSWo4vBm oy+mtlPjEwxd3i9yyb4t2egSG3T+tOAZzrstn1FVRsnESNwXERl6yrrPfjFymU6W irjROMgD84t1iZjfWrmfy+hzsmwFnvK+EmAMf1iLHyURxRByENRV8h/8+OSrOktK 2GvgJTmCgdozhi4244KNFGsOGLkV2L64/7aQ83Wz6s0Ojr8aC4yVRkRJTz3VZAPi qBOMetZgUdKkw457NO+62MWab40GODUd3UffA+TY1+n2ETu2i/+CG62WsaWxD4Z8 A6DUDvRT17iNMlwMqtYfRcnQvnkCkRc= -----END CERTIFICATE-----Generated at Thu Jul 10 13:49:44 2025 by rpki-client