$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa File: c944d290-2cb7-3519-81ca-49e6c64203c5.roa (raw, json) Hash identifier: seuc4osrcrgoQTsR2voqcQkM5pdXK///Y16ArMwRKq8= Subject key identifier: 3D:DE:F8:06:81:17:06:25:D1:6E:EE:77:9B:14:2C:ED:A2:B0:F8:1C Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A5FC5D26699FB197826389B78 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 834 IP address blocks: 216.180.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:d2:66:99:fb:19:78:26:38:9b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=b842a57a-688a-4836-9a3d-dcf54ec8fe54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:36:3a:59:13:0a:b4:54:e9:c8:0c:ad:59: fb:ef:72:40:35:f3:df:ad:98:e9:90:c3:4f:97:79: 15:05:4e:6b:49:48:0f:7b:e1:39:a8:c0:b8:fc:78: 21:17:fd:5d:eb:c3:75:19:0d:23:9e:4c:87:39:ed: 91:5c:45:1f:95:44:4d:3f:9a:e0:da:55:a7:c1:6a: ea:fc:f8:fc:16:66:fe:bc:20:cd:79:87:43:86:e9: fc:97:73:34:25:0c:f1:91:0d:8c:6e:16:ec:ac:80: 53:40:fd:59:c2:ed:10:da:fa:ea:12:93:f6:8e:9d: 5c:9b:85:66:95:c9:90:ce:53:83:ae:8c:4d:37:44: 36:be:55:53:ff:cf:d4:75:91:21:9c:2c:55:27:ee: d8:23:07:7a:16:2f:72:ab:e7:ac:a9:a1:b6:25:92: f1:1f:ca:15:01:ee:90:91:3c:07:e9:e4:b2:3a:36: b0:6d:ed:7f:6f:38:ee:d8:25:08:76:b3:09:1d:e0: af:3b:90:5c:56:6d:00:2b:a3:0f:fb:fc:d8:80:af: d8:c1:fb:10:c8:35:14:87:9e:00:11:64:be:ef:2e: e3:c1:19:b2:2f:2a:71:86:c1:5b:7a:13:e3:f7:5b: f8:0f:49:eb:c1:e3:89:64:e1:07:4c:e9:e1:cf:5d: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DE:F8:06:81:17:06:25:D1:6E:EE:77:9B:14:2C:ED:A2:B0:F8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 216.180.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1a:5f:7f:9a:ea:fa:d5:f4:c3:b4:a0:31:ce:d7:0e:de:77: dd:62:9e:fa:83:07:da:73:6f:15:0c:84:a0:71:b7:33:7d:90: 4e:04:74:c0:b2:e2:6b:36:0c:a4:36:98:2d:14:4b:7a:9e:9c: bf:00:74:1a:80:d0:ac:ed:b1:2a:db:20:a4:2b:6b:ce:2f:c1: 60:23:64:5d:04:8a:dd:cd:d1:c5:39:1e:a6:9e:7f:54:96:0e: 6c:47:49:b5:f2:cd:79:09:b3:dd:94:9a:2c:f9:2b:35:0e:4c: 77:5e:cc:eb:07:ee:6b:02:7d:db:cd:3f:98:26:b9:f4:15:ed: 74:70:45:1f:e5:00:0e:8e:be:52:e1:82:a0:5e:7f:fd:a7:f6: 74:ba:f8:33:6f:09:40:b4:fa:88:2b:f4:e1:46:77:26:90:a9: ba:f4:f4:27:03:84:17:a0:b9:88:3a:e8:39:c1:7e:11:dd:37: 98:cf:34:fc:5d:d4:30:29:9f:9b:6a:70:63:14:f9:af:56:22: 69:6b:ee:21:20:a1:66:4c:8e:52:5a:f8:94:44:c1:84:b6:c9: 54:d3:5b:bd:44:5c:61:d3:bc:8c:f6:0d:b2:18:dd:80:2b:8c: 04:8c:9c:95:2d:15:b0:ed:8b:58:23:0f:3a:fe:2f:94:da:a0: d0:15:a9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdJmmfsZeCY4m3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Yjg0MmE1N2EtNjg4YS00ODM2LTlhM2QtZGNmNTRlYzhmZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOg2OlkTCrRU6cgMrVn773JANfPfrZjpkMNP l3kVBU5rSUgPe+E5qMC4/HghF/1d68N1GQ0jnkyHOe2RXEUflURNP5rg2lWnwWrq /Pj8Fmb+vCDNeYdDhun8l3M0JQzxkQ2MbhbsrIBTQP1Zwu0Q2vrqEpP2jp1cm4Vm lcmQzlODroxNN0Q2vlVT/8/UdZEhnCxVJ+7YIwd6Fi9yq+esqaG2JZLxH8oVAe6Q kTwH6eSyOjawbe1/bzju2CUIdrMJHeCvO5BcVm0AK6MP+/zYgK/YwfsQyDUUh54A EWS+7y7jwRmyLypxhsFbehPj91v4D0nrweOJZOEHTOnhz122EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3e+AaBFwYl0W7ud5sULO2isPgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYzk0NGQyOTAtMmNiNy0z NTE5LTgxY2EtNDllNmM2NDIwM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LT/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4aX3+a6vrV9MO0oDHO1w7ed91invqDB9pzbxUMhKBxtzN9kE4EdMCy 4ms2DKQ2mC0US3qenL8AdBqA0KztsSrbIKQra84vwWAjZF0Eit3N0cU5Hqaef1SW DmxHSbXyzXkJs92Umiz5KzUOTHdezOsH7msCfdvNP5gmufQV7XRwRR/lAA6OvlLh gqBef/2n9nS6+DNvCUC0+ogr9OFGdyaQqbr09CcDhBeguYg66DnBfhHdN5jPNPxd 1DApn5tqcGMU+a9WImlr7iEgoWZMjlJa+JREwYS2yVTTW71EXGHTvIz2DbIY3YAr jASMnJUtFbDti1gjDzr+L5TaoNAVqak= -----END CERTIFICATE-----Generated at Thu Jul 10 14:04:06 2025 by rpki-client