$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa File: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (raw, json) Hash identifier: bh5XYXdmHdv24AqVrjGRQ7c2IvpBHaQ1BTTNCV1mCUY= Subject key identifier: 9C:76:EC:64:7F:3D:D2:26:4E:F2:C2:A2:D8:6D:11:85:27:0B:F0:99 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584A7085F0639CDE10B3CF5FB680 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 399889 IP address blocks: 216.170.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f0:63:9c:de:10:b3:cf:5f:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=b048821a-86aa-425d-a705-f90d9fe5a00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:40:b1:92:38:d1:5d:43:44:df:69:0b:fe: 24:6b:ba:02:83:b9:21:e8:41:63:95:0f:a2:0e:61: e5:e8:b9:25:7b:25:ac:5f:b3:99:81:e4:14:ff:2d: 07:ed:db:13:c1:4f:58:76:6c:ce:c1:9a:b5:f4:21: 4c:97:f7:37:8c:f5:9f:ac:63:d8:cb:19:26:41:1e: 08:6c:0a:b8:c3:cc:f5:94:71:3c:c7:3a:45:9b:4a: e4:d6:da:de:63:01:b0:0d:1c:fb:98:b2:f2:84:a8: 20:37:67:a2:30:3c:cd:41:1a:16:89:14:5e:f2:ca: a4:e6:d2:a3:c9:58:81:d6:7e:25:6e:e3:1e:fc:15: 76:0e:0d:4c:31:a6:93:8d:30:c9:bc:a3:d9:38:fe: 57:b9:89:2e:a9:17:94:8d:e5:d5:00:d6:b6:7b:14: c6:2e:7c:3c:13:55:8a:be:f3:62:ec:86:b9:02:9b: 94:1b:a9:4d:77:34:57:d8:03:58:22:4e:e7:e7:5f: 12:a2:ae:f9:84:f2:49:40:6c:5e:24:7a:c8:3e:7d: 55:d3:16:ef:dc:98:ce:de:31:28:06:7f:19:08:4d: a0:32:bd:fb:37:8f:72:60:fe:c5:ec:89:94:9b:05: 16:07:05:f9:85:a7:05:0b:0d:7e:fa:06:36:c4:51: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:EC:64:7F:3D:D2:26:4E:F2:C2:A2:D8:6D:11:85:27:0B:F0:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: 216.170.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c8:03:85:ae:ed:ec:4d:1c:5e:24:ab:4e:f5:5c:37:a0:86: a1:e8:de:24:c4:48:b7:cb:d2:61:7d:a6:1b:75:66:1d:c2:4b: 6b:40:ad:88:d4:99:1e:4d:2f:52:41:5c:c8:fa:7c:d0:28:d7: c7:6b:4f:7d:be:16:50:db:82:42:86:a2:81:b2:1f:93:98:18: 69:a8:bc:c4:90:bc:83:5a:fb:77:9f:e6:d6:cf:81:72:98:4a: 0c:ab:40:e2:1d:29:3f:2b:b6:1e:0d:c3:d9:50:45:9d:0b:1f: 39:30:8c:a2:12:b7:e7:73:d6:9a:c1:8d:8a:9d:fb:72:d1:6d: 7e:43:ba:e7:b2:92:71:49:87:8e:ad:71:c6:1e:cc:e2:34:00: 55:68:24:dc:75:40:d5:42:86:c3:3f:6e:ba:74:22:00:78:b3: 80:9f:d4:2f:84:0b:07:d4:79:8d:ac:96:d4:22:6d:88:2b:85: b0:33:b9:f2:02:a4:d9:85:77:f8:d9:4c:54:04:f4:83:61:71: 32:73:2d:5d:c0:89:64:4f:bd:bc:92:8b:2f:8d:62:20:9f:ef: 07:f1:51:8e:84:20:ff:9d:c7:05:68:41:06:4a:92:f0:b8:4c: a7:a2:de:98:bc:68:5b:1f:50:eb:2b:0f:45:dd:9a:8f:14:a5: d8:5a:e5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfBjnN4Qs89ftoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk YjA0ODgyMWEtODZhYS00MjVkLWE3MDUtZjkwZDlmZTVhMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSNAsZI40V1DRN9pC/4ka7oCg7kh6EFjlQ+i DmHl6LkleyWsX7OZgeQU/y0H7dsTwU9YdmzOwZq19CFMl/c3jPWfrGPYyxkmQR4I bAq4w8z1lHE8xzpFm0rk1treYwGwDRz7mLLyhKggN2eiMDzNQRoWiRRe8sqk5tKj yViB1n4lbuMe/BV2Dg1MMaaTjTDJvKPZOP5XuYkuqReUjeXVANa2exTGLnw8E1WK vvNi7Ia5ApuUG6lNdzRX2ANYIk7n518Soq75hPJJQGxeJHrIPn1V0xbv3JjO3jEo Bn8ZCE2gMr37N49yYP7F7ImUmwUWBwX5hacFCw1++gY2xFExwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx27GR/PdImTvLCothtEYUnC/CZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvYjRhYmFmNTEtNDJlMi0z OTRkLTgwZTEtYmM2M2Y1NGMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITIA4Wu7exNHF4kq071XDeghqHo3iTESLfL0mF9pht1Zh3CS2tArYjU mR5NL1JBXMj6fNAo18drT32+FlDbgkKGooGyH5OYGGmovMSQvINa+3ef5tbPgXKY SgyrQOIdKT8rth4Nw9lQRZ0LHzkwjKISt+dz1prBjYqd+3LRbX5DuueyknFJh46t ccYezOI0AFVoJNx1QNVChsM/brp0IgB4s4Cf1C+ECwfUeY2sltQibYgrhbAzufIC pNmFd/jZTFQE9INhcTJzLV3AiWRPvbySiy+NYiCf7wfxUY6EIP+dxwVoQQZKkvC4 TKei3pi8aFsfUOsrD0Xdmo8Updha5XM= -----END CERTIFICATE-----Generated at Fri Jul 11 04:49:28 2025 by rpki-client