$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa File: 43620bc0-0a8d-3868-a9e5-6957181b005a.roa (raw, json) Hash identifier: Fvjbuq63MtfCg4I2/5DJI4DR6fvFK+xdeqrKLWjMJ6M= Subject key identifier: 23:79:66:6A:FF:A3:A4:6D:1F:C5:67:E2:DF:7B:65:40:C5:24:6F:59 Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Certificate serial: 010D0C9F4328584A5CFB27FB2CE3B9D119C49700 Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 46606 IP address blocks: 162.241.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:27:fb:2c:e3:b9:d1:19:c4:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=474e8547-340d-413a-a855-2ad4a82b741a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:17:38:a1:d5:5b:52:b9:2f:cd:90:ff:a6: 76:96:78:71:55:46:48:15:42:82:79:db:fa:92:31: f8:f5:9d:a7:44:cd:a7:7b:20:6d:36:ca:9a:d7:ee: 32:14:a8:d8:18:a0:eb:33:aa:c5:67:50:52:ec:55: ac:78:73:a1:b6:a2:b4:e4:3b:01:26:1c:e8:78:3c: 14:e4:6b:35:b8:db:04:d7:28:e1:79:01:98:0e:8f: b7:68:65:57:4b:19:af:0b:89:ee:9e:39:e5:c6:7b: 6a:7d:18:8f:a6:42:c0:08:a0:1b:bf:b0:9f:d5:f8: a8:58:b9:25:cb:86:70:fc:d9:a8:24:0f:93:ed:1e: f6:58:33:4c:72:6c:ae:37:24:03:06:c4:97:fd:15: cd:f4:49:02:5d:05:09:99:1e:b8:06:5a:20:1d:9f: cd:9a:95:61:f6:ca:71:26:2d:aa:37:79:f6:5f:cc: 22:53:53:11:08:48:85:27:6e:69:40:c3:86:49:49: c4:11:6b:5e:b4:a5:7f:88:95:03:ae:b1:e5:0e:e2: aa:1d:b5:ca:49:35:41:8e:4c:8e:2b:de:10:27:c0: 9a:3c:10:a2:6d:28:1f:46:70:7f:c0:04:04:ca:94: 9f:dd:27:bc:ca:0b:92:99:c2:39:d8:4b:ba:2d:80: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:79:66:6A:FF:A3:A4:6D:1F:C5:67:E2:DF:7B:65:40:C5:24:6F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/43620bc0-0a8d-3868-a9e5-6957181b005a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl X509v3 Authority Key Identifier: keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer sbgp-ipAddrBlock: critical IPv4: 162.241.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:be:cc:7b:5a:e2:75:4b:76:8a:58:16:25:44:98:72:f5:1d: 10:4a:7a:65:29:88:41:4d:7e:58:5e:65:4f:c3:89:d9:f4:38: 7e:80:5c:04:0f:d1:71:9c:1b:eb:85:dc:ac:45:bf:a6:e5:82: 3f:90:2d:c7:26:cc:f6:4c:76:43:88:88:04:19:b2:95:f6:59: 33:25:07:c2:85:57:26:6d:35:ef:e9:82:ff:50:13:d6:c5:e8: 33:ef:07:c0:82:9b:69:75:c5:01:02:cb:c8:08:2c:48:1d:85: 7e:20:bf:86:35:d4:b7:d4:23:d4:7c:ce:70:11:90:d5:f9:10: bf:c6:15:53:59:2b:36:29:90:cf:a1:18:77:01:5a:8c:c2:4f: 4d:75:27:08:25:9a:9f:f0:ff:e2:bd:f0:30:7c:7a:6d:e7:99: fe:31:bc:1f:43:b1:8a:fd:ed:5b:8f:35:30:9b:1e:0b:c1:68: bb:5d:d7:77:49:59:d0:3d:15:33:6e:ab:dd:dd:8c:83:27:59: a4:92:21:0a:ab:ba:8f:31:b4:ea:e1:71:bb:c9:5c:b1:2a:50: 61:81:a7:4e:c3:f4:e7:1d:11:ba:26:68:05:5f:b2:cc:e0:ff: 70:18:bb:aa:15:65:83:8e:ad:6e:03:aa:b5:44:a6:4d:f4:61: 02:e2:6e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+yf7LOO50RnElwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi OTFiMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDc0ZTg1NDctMzQwZC00MTNhLWE4NTUtMmFkNGE4MmI3NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTAXOKHVW1K5L82Q/6Z2lnhxVUZIFUKCedv6 kjH49Z2nRM2neyBtNsqa1+4yFKjYGKDrM6rFZ1BS7FWseHOhtqK05DsBJhzoeDwU 5Gs1uNsE1yjheQGYDo+3aGVXSxmvC4nunjnlxntqfRiPpkLACKAbv7Cf1fioWLkl y4Zw/NmoJA+T7R72WDNMcmyuNyQDBsSX/RXN9EkCXQUJmR64BlogHZ/NmpVh9spx Ji2qN3n2X8wiU1MRCEiFJ25pQMOGSUnEEWtetKV/iJUDrrHlDuKqHbXKSTVBjkyO K94QJ8CaPBCibSgfRnB/wAQEypSf3Se8yguSmcI52Eu6LYD8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN5Zmr/o6RtH8Vn4t97ZUDFJG9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvNDM2MjBiYzAtMGE4ZC0z ODY4LWE5ZTUtNjk1NzE4MWIwMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0 MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe+zHta4nVLdopYFiVEmHL1HRBKemUpiEFNflheZU/Didn0OH6AXAQP 0XGcG+uF3KxFv6blgj+QLccmzPZMdkOIiAQZspX2WTMlB8KFVyZtNe/pgv9QE9bF 6DPvB8CCm2l1xQECy8gILEgdhX4gv4Y11LfUI9R8znARkNX5EL/GFVNZKzYpkM+h GHcBWozCT011Jwglmp/w/+K98DB8em3nmf4xvB9DsYr97VuPNTCbHgvBaLtd13dJ WdA9FTNuq93djIMnWaSSIQqruo8xtOrhcbvJXLEqUGGBp07D9OcdEbomaAVfsszg /3AYu6oVZYOOrW4DqrVEpk30YQLibgk= -----END CERTIFICATE-----Generated at Tue Jul 1 17:24:44 2025 by rpki-client