$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa File: 9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa (raw, json) Hash identifier: g1wZ4fPJXr9/NU5f55V4Z/tASPlrsxoYnq/vxku67l0= Subject key identifier: 1A:C2:2A:48:E7:1B:0B:BA:5E:11:F2:9E:E2:65:E3:8B:E4:CC:37:23 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849CD34C6632F25118BE65C2700 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 30058 IP address blocks: 216.227.168.0/23 maxlen: 24 2001:49f0:d13e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c6:63:2f:25:11:8b:e6:5c:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=70d8ef9c-dac5-4151-88c9-4bca591cf7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:e6:c1:bd:af:0c:79:88:c5:fe:fd:8e:29: 83:c9:80:d3:73:3e:83:52:1c:70:86:5b:fd:db:4e: 1f:ca:83:ce:d3:eb:ff:73:37:31:05:dc:a4:75:3e: 3d:04:f1:e4:a0:21:7a:6f:72:94:96:3e:b7:25:21: 5d:a6:ac:b3:2c:01:3f:7f:ee:c8:fb:e3:db:7a:86: 8c:e1:00:aa:20:b7:f4:36:0a:cc:dd:43:99:2e:fb: b2:4f:72:04:1e:61:8d:07:9a:44:e6:7f:af:7d:ff: 4b:72:24:8b:4b:4c:74:9e:1a:0f:80:90:f2:ac:a0: b0:b2:de:07:46:aa:7c:b9:e1:fe:e7:6e:29:6d:68: 02:40:15:a9:c9:d9:b8:8f:2f:bf:b0:a5:9b:4e:f3: 16:d6:22:79:09:09:14:0b:ca:70:a0:11:c1:81:35: b8:62:78:2a:c2:21:08:70:42:96:47:f5:60:07:3b: df:59:08:58:7f:00:aa:aa:af:5a:c7:10:15:71:fe: cb:29:b0:5d:66:24:06:56:d4:ba:67:33:2f:1c:28: 51:2b:7e:e2:ae:05:40:00:2b:e1:b8:98:66:95:6a: 53:f5:3e:dc:b9:16:92:91:21:de:4f:87:23:da:01: 49:9b:41:39:84:e6:51:f0:56:e0:7b:ae:6f:92:76: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C2:2A:48:E7:1B:0B:BA:5E:11:F2:9E:E2:65:E3:8B:E4:CC:37:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.168.0/23 IPv6: 2001:49f0:d13e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:51:7c:81:1c:3d:5a:d4:2b:88:6b:73:a8:ba:63:5e:bc:ea: 10:c8:82:a2:9b:02:72:63:6d:57:51:bb:c1:ea:fc:a8:1a:90: 40:26:3a:aa:81:0b:84:02:f0:19:27:39:82:be:34:86:e5:77: 19:03:92:5f:18:75:aa:31:df:61:44:8e:ce:c8:b6:d0:51:df: c4:c6:d9:cb:fe:30:9b:06:44:81:c9:61:62:b2:05:c8:a8:ba: 2d:0f:05:ad:9a:0e:94:7c:e5:55:fd:c5:21:a8:ea:d6:aa:79: 32:70:a1:24:45:6f:c0:cb:cf:f0:2f:16:84:ab:01:f2:22:b6: 60:75:44:47:dd:c8:81:97:64:8e:4f:c1:13:20:4b:b3:67:0c: b1:5a:83:bf:b3:7f:10:f2:7f:e3:1e:52:ad:42:9f:22:92:95: 1a:1a:10:8d:61:89:d8:59:e4:d8:37:b8:22:5d:6e:21:30:af: 79:1b:31:82:54:05:df:a0:fa:cb:0b:32:5e:4b:28:75:a5:5d: 3e:be:01:0a:24:d6:05:6d:40:f2:8d:40:6b:18:08:ef:a8:a0: 28:72:08:2c:c3:59:d0:24:66:57:8e:82:95:12:d4:af:2d:c3: 83:e9:b4:fa:96:03:5f:76:1c:4b:16:06:1d:9e:47:9e:90:7f: 99:b3:40:56 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnNNMZjLyURi+ZcJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk NzBkOGVmOWMtZGFjNS00MTUxLTg4YzktNGJjYTU5MWNmN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLrmwb2vDHmIxf79jimDyYDTcz6DUhxwhlv9 204fyoPO0+v/czcxBdykdT49BPHkoCF6b3KUlj63JSFdpqyzLAE/f+7I++PbeoaM 4QCqILf0NgrM3UOZLvuyT3IEHmGNB5pE5n+vff9LciSLS0x0nhoPgJDyrKCwst4H Rqp8ueH+524pbWgCQBWpydm4jy+/sKWbTvMW1iJ5CQkUC8pwoBHBgTW4YngqwiEI cEKWR/VgBzvfWQhYfwCqqq9axxAVcf7LKbBdZiQGVtS6ZzMvHChRK37irgVAACvh uJhmlWpT9T7cuRaSkSHeT4cj2gFJm0E5hOZR8Fbge65vknaoswIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBrCKkjnGwu6XhHynuJl44vkzDcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOWQ3YTM0MmMtNDJiYS0z MjdjLWE2ZDUtMDdhNWM3OTRkMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB2OOoMA8E AgACMAkDBwAgAUnw0T4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAv1F8gRw9WtQriGtzqLpjXrzqEMiCopsC cmNtV1G7wer8qBqQQCY6qoELhALwGSc5gr40huV3GQOSXxh1qjHfYUSOzsi20FHf xMbZy/4wmwZEgclhYrIFyKi6LQ8FrZoOlHzlVf3FIajq1qp5MnChJEVvwMvP8C8W hKsB8iK2YHVER93IgZdkjk/BEyBLs2cMsVqDv7N/EPJ/4x5SrUKfIpKVGhoQjWGJ 2Fnk2De4Il1uITCveRsxglQF36D6ywsyXksodaVdPr4BCiTWBW1A8o1AaxgI76ig KHIILMNZ0CRmV46ClRLUry3Dg+m0+pYDX3YcSxYGHZ5HnpB/mbNAVg== -----END CERTIFICATE-----Generated at Fri Jun 6 11:01:42 2025 by rpki-client