$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa File: 2fc97616-433c-34a4-a801-399ce469f872.roa (raw, json) Hash identifier: pCtoKpyOeqbN9rxNOlten1Sdp8TYA7CVe8ZHRS3w6gE= Subject key identifier: D0:FF:16:4B:C0:EA:A4:FA:A2:EE:EA:4C:D0:83:70:26:76:57:D4:01 Certificate issuer: /CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Certificate serial: 010D0C9F4328584A1F901C18FB4FAB3FC3369540 Authority key identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 1299 IP address blocks: 162.222.20.0/22 maxlen: 22 192.40.220.0/22 maxlen: 22 198.241.12.0/22 maxlen: 22 2606:8c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:1c:18:fb:4f:ab:3f:c3:36:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=79718a27-ec1b-451b-bafa-58d1d8a8fc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:b6:fb:4f:a6:2a:a9:c2:fb:a2:fc:c0:8a: 59:ca:7d:d5:f9:e0:b5:d0:08:c4:bd:88:03:34:93: e4:bf:3f:fd:c8:c6:0c:c8:5a:96:91:fd:a7:79:35: 5f:d5:fc:34:85:dd:15:96:c3:e4:74:6a:31:24:e9: 92:ed:11:2c:62:0a:52:66:2c:13:28:82:23:32:d5: 58:37:e8:bb:6c:f9:78:bb:e2:80:2a:35:ac:d0:b9: 91:d0:0e:b4:1d:e6:e0:4c:23:71:fd:6f:29:4b:47: e2:d4:1e:ed:36:68:31:22:1e:06:49:4d:36:f9:1a: 62:f2:e0:46:78:e1:32:c2:b0:99:e0:80:a1:89:74: c6:88:49:2d:a0:b7:9d:0a:c6:54:a8:76:db:ff:76: f8:4b:42:c2:73:e5:64:c1:3b:40:b8:4b:f1:c4:ed: ef:54:3b:00:14:42:3e:5f:7f:90:db:0a:65:52:c4: 46:d0:83:de:9a:4f:c7:07:d2:e4:75:d9:ea:9d:c7: 5e:de:6c:e2:07:41:cf:ea:2d:01:60:76:6d:50:34: 59:a6:aa:fa:ea:7f:ee:c4:11:85:af:be:a6:82:ce: e4:cf:12:71:33:1b:65:28:68:33:8b:ff:a6:dc:fb: 59:25:fb:92:87:3f:3e:9e:b7:a4:5f:5a:b1:12:ce: 05:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FF:16:4B:C0:EA:A4:FA:A2:EE:EA:4C:D0:83:70:26:76:57:D4:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl X509v3 Authority Key Identifier: keyid:ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer sbgp-ipAddrBlock: critical IPv4: 162.222.20.0/22 192.40.220.0/22 198.241.12.0/22 IPv6: 2606:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:71:a0:3d:79:6a:06:4d:e6:60:6f:76:b0:7f:73:72:1d:5e: 07:37:9a:a2:6d:6b:1e:70:fb:7a:cd:a3:6a:b2:c5:a4:20:a7: a8:16:97:f3:20:4e:3f:44:f9:68:82:ac:04:e4:04:51:93:56: cf:53:f0:9e:5f:54:19:19:42:b4:90:f3:cf:1e:6a:d1:02:1a: cf:83:21:cd:4d:f1:d7:77:b2:2e:21:e4:6c:7a:5a:1a:4f:43: 63:ed:e1:72:46:67:62:4e:32:3c:33:12:e7:14:e9:a3:60:62: 99:c5:9e:41:02:9c:0f:46:00:9e:9f:8e:5a:8b:93:43:19:d1: c9:9d:fe:da:24:fa:0b:e9:7a:42:2f:88:71:c8:59:8c:75:03: 81:a6:8c:6a:7d:c6:6c:a2:48:4b:30:88:45:14:ad:7c:f7:70: f7:1d:cd:9c:85:f4:43:f8:29:f9:6b:82:50:54:27:40:01:99: 70:9d:1c:ed:b3:2b:23:e5:b2:c7:3b:0d:0d:22:f0:f0:d0:2c: 86:2d:f4:18:75:8b:ba:e9:54:5c:01:44:14:28:e9:9e:1b:36: 75:b5:4e:c4:36:db:fa:a4:ec:37:b1:55:4f:5b:bc:f8:b8:a3: 3d:aa:23:cb:93:37:da:0e:74:48:a9:44:c4:83:fa:fd:8d:4a: 55:78:57:4c -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEofkBwY+0+rP8M2lUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E1ZWEzM2ItZWU4MC00MmQ4LTgyNTUtYjBjNjFmMjhi MDZmMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk Nzk3MThhMjctZWMxYi00NTFiLWJhZmEtNThkMWQ4YThmYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcG2+0+mKqnC+6L8wIpZyn3V+eC10AjEvYgD NJPkvz/9yMYMyFqWkf2neTVf1fw0hd0VlsPkdGoxJOmS7REsYgpSZiwTKIIjMtVY N+i7bPl4u+KAKjWs0LmR0A60HebgTCNx/W8pS0fi1B7tNmgxIh4GSU02+Rpi8uBG eOEywrCZ4IChiXTGiEktoLedCsZUqHbb/3b4S0LCc+VkwTtAuEvxxO3vVDsAFEI+ X3+Q2wplUsRG0IPemk/HB9Lkddnqncde3mziB0HP6i0BYHZtUDRZpqr66n/uxBGF r76mgs7kzxJxMxtlKGgzi/+m3PtZJfuShz8+nrekX1qxEs4FaQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFND/FkvA6qT6ou7qTNCDcCZ2V9QBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVl YTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYyOGIwNmYvMmZjOTc2MTYtNDMzYy0z NGE0LWE4MDEtMzk5Y2U0NjlmODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2E1ZWEzM2ItZWU4MC00MmQ4LTgy NTUtYjBjNjFmMjhiMDZmLzdhNWVhMzNiLWVlODAtNDJkOC04MjU1LWIwYzYxZjI4 YjA2Zi5jcmwwHwYDVR0jBBgwFoAU7c4hFN88/AybrNtX0nu8s9RSsg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2 MWYyOGIwNmYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCot4UAwQC wCjcAwQCxvEMMA0EAgACMAcDBQAmBoyAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG5xoD15agZN5mBvdrB/ c3IdXgc3mqJtax5w+3rNo2qyxaQgp6gWl/MgTj9E+WiCrATkBFGTVs9T8J5fVBkZ QrSQ888eatECGs+DIc1N8dd3si4h5Gx6WhpPQ2Pt4XJGZ2JOMjwzEucU6aNgYpnF nkECnA9GAJ6fjlqLk0MZ0cmd/tok+gvpekIviHHIWYx1A4GmjGp9xmyiSEswiEUU rXz3cPcdzZyF9EP4KflrglBUJ0ABmXCdHO2zKyPlssc7DQ0i8PDQLIYt9Bh1i7rp VFwBRBQo6Z4bNnW1TsQ22/qk7DexVU9bvPi4oz2qI8uTN9oOdEipRMSD+v2NSlV4 V0w= -----END CERTIFICATE-----Generated at Tue Jul 1 09:34:17 2025 by rpki-client