$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa File: 9866eb47-8ef3-3d63-8638-76ae76aa2833.roa (raw, json) Hash identifier: cWxR0Ql0DtOK3MCgFYXD5obJmijhJfR7YwKyRhEL1+U= Subject key identifier: 75:D0:4B:14:1A:7A:A9:53:F6:A7:61:65:4F:46:96:FC:F1:EC:82:A1 Certificate issuer: /CN=94f0eda7-0771-41a2-8806-38174b050cc8 Certificate serial: 010D0C9F4328584A6C55D3977F91890D18D06540 Authority key identifier: 74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 32549 IP address blocks: 216.168.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d3:97:7f:91:89:0d:18:d0:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f0eda7-0771-41a2-8806-38174b050cc8 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=677fcabd-2134-435c-9027-ead45cc1364c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:aa:53:64:ea:87:d4:bc:1d:99:fc:5e:3c: 6a:c5:70:85:6a:d5:08:d8:f6:89:ca:31:64:fc:b0: cc:0d:93:e1:65:97:86:4b:90:1e:ef:db:7f:f4:40: a3:6f:9c:9b:5f:28:f7:13:49:b6:10:eb:ca:9c:70: 20:b9:c9:0b:9c:5e:30:04:2f:1c:db:ff:ad:13:30: 8b:9b:d6:e1:d6:9d:77:22:63:aa:c4:95:f5:31:e6: e8:4c:9d:fb:fe:4b:79:2c:fe:de:ea:d3:df:de:5a: 87:b2:99:e5:d9:91:79:cf:1c:98:07:26:d2:1b:e4: e1:f5:f3:31:e7:e5:07:59:eb:43:2b:c7:3d:bb:55: da:3d:d6:46:76:99:0d:23:81:c4:ff:ed:1b:7c:ad: ec:ef:6b:c3:e9:bf:84:fa:c6:7b:89:fb:aa:5a:83: a6:4a:97:11:8f:35:af:be:a8:6f:4d:79:b0:e0:0d: 39:bc:fa:45:0a:2a:48:24:e3:a0:57:15:15:30:bb: 7b:23:b2:15:ee:5a:58:31:87:f6:f5:91:ba:83:4a: 13:9d:b8:72:4f:53:8a:59:4e:8c:a0:86:4f:6b:96: 2c:63:ec:fa:de:bf:34:c1:25:11:c6:a2:e9:43:51: 8e:fc:78:0a:e6:6f:1e:4d:36:c9:e6:1b:96:ef:cb: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:4B:14:1A:7A:A9:53:F6:A7:61:65:4F:46:96:FC:F1:EC:82:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl X509v3 Authority Key Identifier: keyid:74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer sbgp-ipAddrBlock: critical IPv4: 216.168.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e9:85:bc:df:0a:65:28:9b:31:c4:ab:40:b0:32:8b:dc:32: a1:26:8a:aa:cd:3d:ff:e7:93:00:8b:e5:38:c1:60:b6:db:15: e2:23:3c:9f:6a:c9:ce:83:c9:61:70:14:67:95:5c:ef:2e:30: 46:b3:ea:c4:ad:2d:31:93:eb:89:96:2a:5c:2c:ec:ee:44:df: ea:ee:a6:ab:2b:1c:57:9c:37:df:ab:d7:0a:e2:c5:12:1d:4f: 64:dc:03:b1:fa:41:f5:24:6f:bd:89:be:03:4c:2d:88:58:94: a3:2b:ea:d9:fb:e1:cf:7b:a3:43:d0:86:6e:60:88:87:9a:08: d3:59:19:da:92:fd:ae:ad:19:6d:53:ff:4b:a1:c3:6b:5a:bc: 7d:83:35:0c:47:58:95:4e:78:c2:4e:5f:66:23:35:2e:65:05: 7c:42:9a:94:c2:9c:fa:7f:48:0e:8d:2d:9f:35:31:75:20:91: cc:b0:61:19:ba:2a:15:f4:83:ff:17:11:c5:cb:d1:9b:51:84: f1:a5:99:02:32:e6:ab:88:e4:5f:88:a5:dc:31:7b:7f:ce:33: 8f:a8:45:3a:bf:b8:5f:0a:c9:77:44:f9:90:67:41:e9:ec:72: 39:d1:06:bd:cd:cf:54:14:d9:02:88:2d:d6:79:09:e5:97:15: eb:f3:ac:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdOXf5GJDRjQZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmMGVkYTctMDc3MS00MWEyLTg4MDYtMzgxNzRiMDUw Y2M4MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Njc3ZmNhYmQtMjEzNC00MzVjLTkwMjctZWFkNDVjYzEzNjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1WqU2Tqh9S8HZn8XjxqxXCFatUI2PaJyjFk /LDMDZPhZZeGS5Ae79t/9ECjb5ybXyj3E0m2EOvKnHAguckLnF4wBC8c2/+tEzCL m9bh1p13ImOqxJX1MeboTJ37/kt5LP7e6tPf3lqHspnl2ZF5zxyYBybSG+Th9fMx 5+UHWetDK8c9u1XaPdZGdpkNI4HE/+0bfK3s72vD6b+E+sZ7ifuqWoOmSpcRjzWv vqhvTXmw4A05vPpFCipIJOOgVxUVMLt7I7IV7lpYMYf29ZG6g0oTnbhyT1OKWU6M oIZPa5YsY+z63r80wSURxqLpQ1GO/HgK5m8eTTbJ5huW78t9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXQSxQaeqlT9qdhZU9Glvzx7IKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NGYw ZWRhNy0wNzcxLTQxYTItODgwNi0zODE3NGIwNTBjYzgvOTg2NmViNDctOGVmMy0z ZDYzLTg2MzgtNzZhZTc2YWEyODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTRmMGVkYTctMDc3MS00MWEyLTg4 MDYtMzgxNzRiMDUwY2M4Lzk0ZjBlZGE3LTA3NzEtNDFhMi04ODA2LTM4MTc0YjA1 MGNjOC5jcmwwHwYDVR0jBBgwFoAUdCmN28VPa5BfIRgLhfzaNiex4VMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85NGYwZWRhNy0wNzcxLTQxYTItODgwNi0zODE3 NGIwNTBjYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbphbzfCmUomzHEq0CwMovcMqEmiqrNPf/nkwCL5TjBYLbbFeIjPJ9q yc6DyWFwFGeVXO8uMEaz6sStLTGT64mWKlws7O5E3+rupqsrHFecN9+r1wrixRId T2TcA7H6QfUkb72JvgNMLYhYlKMr6tn74c97o0PQhm5giIeaCNNZGdqS/a6tGW1T /0uhw2tavH2DNQxHWJVOeMJOX2YjNS5lBXxCmpTCnPp/SA6NLZ81MXUgkcywYRm6 KhX0g/8XEcXL0ZtRhPGlmQIy5quI5F+Ipdwxe3/OM4+oRTq/uF8KyXdE+ZBnQens cjnRBr3Nz1QU2QKILdZ5CeWXFevzrFI= -----END CERTIFICATE-----Generated at Wed Jul 30 12:15:58 2025 by rpki-client