$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa File: eba41c2b-e525-336c-96e4-eac49ea4d832.roa (raw, json) Hash identifier: N9JNqKFzCUmPAgN8uCD5VtSEyKkaCq88LP5HfGSdkSM= Subject key identifier: E0:EE:63:55:57:D9:53:BA:72:E4:53:85:3C:E1:1E:7D:65:AE:E3:1C Certificate issuer: /CN=ac717083-6970-4d32-8573-0bfa89700c9e Certificate serial: 010D0C9F4328584A03A55302E49B20B750CC9DC0 Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 802 IP address blocks: 199.212.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:53:02:e4:9b:20:b7:50:cc:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=17a3f470-471c-4459-a092-fd381c9ccdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6f:17:76:09:bb:78:92:6e:99:e0:e2:41:08: 4a:02:09:bd:50:fa:c5:cd:a2:57:42:7b:2d:70:39: 28:c3:7a:3f:46:1d:51:32:9b:17:cc:ea:ff:8f:2a: 69:a4:5a:35:b3:70:5e:40:53:67:61:ae:72:0a:cf: e7:ed:b9:d7:45:94:2a:59:b2:31:ba:fb:90:03:42: d4:88:da:5f:8e:de:7a:ec:41:a8:37:9a:2c:a6:6e: f2:24:8e:ac:cd:d1:2e:2a:be:b2:e3:4c:c2:dc:11: 9b:fd:10:ef:63:fb:f5:ad:38:34:dc:cf:4c:8f:5b: 0f:ae:67:be:af:95:60:d5:ba:cf:31:6d:a3:fe:5e: b0:da:5b:62:98:74:2a:b5:6b:d0:93:8f:a5:b6:61: 91:43:7a:7c:db:b3:a6:ca:39:72:74:23:60:d6:d7: a7:40:82:7a:6b:f9:28:80:cd:83:29:39:8f:b5:40: 00:22:0e:84:f3:df:79:8f:10:8a:a3:24:ba:be:f1: 81:34:1b:4c:86:da:e9:7a:48:87:63:62:3f:75:37: b5:08:ea:27:ed:a0:29:ba:af:8f:0f:3b:66:3a:0f: df:47:33:77:c1:bc:46:6a:3c:63:34:64:87:5d:ea: ac:23:16:58:a7:76:db:b9:ec:4f:72:d3:35:95:06: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:63:55:57:D9:53:BA:72:E4:53:85:3C:E1:1E:7D:65:AE:E3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl X509v3 Authority Key Identifier: keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer sbgp-ipAddrBlock: critical IPv4: 199.212.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:31:6a:93:2c:a7:54:d5:02:00:71:d5:5c:63:4f:42:07:80: 32:71:32:5b:89:ed:1c:14:c0:89:35:71:a9:5c:d2:03:a2:3f: 10:9b:67:00:ed:84:a3:d8:09:66:e3:51:c4:cd:14:aa:77:ff: 02:16:df:25:b2:16:97:d2:7e:47:90:66:e0:02:cb:7b:3b:90: b8:5c:06:71:1b:53:49:ce:90:28:e7:fa:a0:cc:47:81:2f:bd: 4e:d8:64:a5:10:28:53:df:6d:82:68:a1:ac:e7:2e:91:cc:af: 61:11:d5:f2:b2:4f:76:12:35:cc:44:3f:9b:bc:41:cf:84:7f: 94:e2:dc:f9:10:25:6c:a4:4b:86:05:f4:51:ae:b8:c4:54:90: 50:6b:da:f9:bb:f6:ee:2f:a2:65:f0:50:33:bb:c7:04:1d:b2: 46:4a:ad:f9:2c:be:2a:61:c9:0c:b6:a0:43:63:4e:c8:ea:69: 41:e7:7e:11:8b:ec:cb:17:06:64:7f:71:b2:50:0d:59:4c:93: 72:58:4b:33:e7:0b:64:3a:ba:07:15:0b:04:0b:01:50:fa:a6: 9e:95:06:b1:6c:4d:e3:13:58:4d:98:70:4b:d3:06:18:38:26: cd:11:cd:84:e6:23:23:54:32:6c:86:25:da:63:d4:1f:90:fa: d0:c9:fe:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVMC5Jsgt1DMncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAw YzllMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTdhM2Y0NzAtNDcxYy00NDU5LWEwOTItZmQzODFjOWNjZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m8Xdgm7eJJumeDiQQhKAgm9UPrFzaJXQnst cDkow3o/Rh1RMpsXzOr/jypppFo1s3BeQFNnYa5yCs/n7bnXRZQqWbIxuvuQA0LU iNpfjt567EGoN5ospm7yJI6szdEuKr6y40zC3BGb/RDvY/v1rTg03M9Mj1sPrme+ r5Vg1brPMW2j/l6w2ltimHQqtWvQk4+ltmGRQ3p827OmyjlydCNg1tenQIJ6a/ko gM2DKTmPtUAAIg6E8995jxCKoyS6vvGBNBtMhtrpekiHY2I/dTe1COon7aApuq+P DztmOg/fRzN3wbxGajxjNGSHXeqsIxZYp3bbuexPctM1lQYZJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODuY1VX2VO6cuRThTzhHn1lruMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcx NzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvZWJhNDFjMmItZTUyNS0z MzZjLTk2ZTQtZWFjNDllYTRkODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM3MTcwODMtNjk3MC00ZDMyLTg1 NzMtMGJmYTg5NzAwYzllL2FjNzE3MDgzLTY5NzAtNGQzMi04NTczLTBiZmE4OTcw MGM5ZS5jcmwwHwYDVR0jBBgwFoAUIF+z6njl6UcKxVau6vVt4D2e/a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZh ODk3MDBjOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx9RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0xapMsp1TVAgBx1VxjT0IHgDJxMluJ7RwUwIk1calc0gOiPxCbZwDt hKPYCWbjUcTNFKp3/wIW3yWyFpfSfkeQZuACy3s7kLhcBnEbU0nOkCjn+qDMR4Ev vU7YZKUQKFPfbYJooaznLpHMr2ER1fKyT3YSNcxEP5u8Qc+Ef5Ti3PkQJWykS4YF 9FGuuMRUkFBr2vm79u4vomXwUDO7xwQdskZKrfksviphyQy2oENjTsjqaUHnfhGL 7MsXBmR/cbJQDVlMk3JYSzPnC2Q6ugcVCwQLAVD6pp6VBrFsTeMTWE2YcEvTBhg4 Js0RzYTmIyNUMmyGJdpj1B+Q+tDJ/lQ= -----END CERTIFICATE-----Generated at Wed Jul 9 23:23:52 2025 by rpki-client