$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0703f23a-2612-3353-bdae-766b35695313.roa File: 0703f23a-2612-3353-bdae-766b35695313.roa (raw, json) Hash identifier: GtyMTFOX8GXOGzyPI9oqrSQoRJoW8Gs7NUR6rrXBk5g= Subject key identifier: 02:3E:DC:77:A5:27:16:8E:CD:AB:53:CF:11:E5:54:42:45:AB:54:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A146594C253A8545B6F716470 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0703f23a-2612-3353-bdae-766b35695313.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 7342 IP address blocks: 216.87.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:94:c2:53:a8:54:5b:6f:71:64:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=ce9efa4b-0d78-44d4-93b8-07fe3e8df5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:af:8a:e6:70:98:57:53:e8:7d:97:15:f5: 00:7a:0b:6e:ad:90:9f:92:61:a8:83:c8:a1:9b:82: be:da:05:9e:ac:dd:64:47:15:2c:cb:68:28:36:8c: c5:f5:52:44:1e:b1:15:39:65:e1:e6:91:ae:99:93: a4:2d:75:83:21:99:40:2d:6e:1e:b0:15:a7:3c:f1: 1a:79:c1:3b:8c:c9:79:da:2e:09:4a:e4:d6:0c:d5: e2:00:14:27:44:60:71:8c:70:6d:18:be:70:16:99: ba:2b:53:b6:26:b1:d4:e6:6e:48:cd:13:fd:82:bd: 8a:dc:0f:27:98:5a:83:15:a8:9a:c8:b5:69:c6:b0: 03:c5:70:9e:8f:45:9c:a9:a9:03:3c:56:51:23:84: a5:b5:dd:ca:e4:81:7c:7c:3f:5f:02:41:08:79:c1: c3:39:b4:63:82:53:13:18:49:e7:f4:10:c6:43:41: fd:f6:6f:07:f3:5b:44:e7:74:e2:8c:2a:e3:66:e4: 15:ca:d5:ba:30:fc:2d:0a:3c:fd:3a:f8:fb:a5:99: 4d:b2:52:ec:00:52:29:17:3f:ba:00:ca:ab:bc:06: 84:81:9e:12:b1:4b:89:b4:01:e8:64:89:94:b4:d0: f1:cb:51:9d:2a:1f:ee:73:ee:e9:d4:fb:58:a3:13: e7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:DC:77:A5:27:16:8E:CD:AB:53:CF:11:E5:54:42:45:AB:54:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0703f23a-2612-3353-bdae-766b35695313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:29:d4:35:17:fe:5d:d6:64:ff:56:57:b2:b0:72:6d:4d:20: f5:af:8b:96:2e:99:fc:28:ea:a7:e8:72:f7:c4:c7:4a:e1:79: 1c:d1:01:b5:19:76:c2:65:7a:be:6f:d6:ed:52:1f:c1:4b:13: 2f:de:e4:e6:5a:4e:3f:d5:a4:bd:fd:61:7f:4a:24:47:98:10: 18:79:db:81:50:a6:de:00:94:dc:c1:55:1e:7f:f3:d0:5f:bc: 4e:f1:6c:2b:0f:57:df:1f:9d:83:8a:5d:d3:13:89:49:8d:f8: b2:36:e9:32:9a:8c:df:fc:e0:e0:50:a7:dd:f4:29:fc:82:86: 9a:da:37:09:b6:28:16:00:b5:96:68:b7:cc:99:8d:3d:7f:78: aa:9d:71:cd:b4:4d:bf:20:96:cb:56:30:d7:f1:34:81:f4:ac: d5:e7:9e:d4:1d:27:97:ab:de:5b:4c:40:22:d0:77:d5:7c:62: e9:97:ff:5d:e5:4b:77:97:74:08:1e:43:fa:b9:7b:9f:ba:9b: a9:29:06:bf:e1:17:42:26:d5:42:c0:33:1b:62:cb:d4:d6:2e: 8b:67:c7:19:f7:19:3f:c8:76:78:52:05:bf:ea:ca:9a:93:ab: 7b:3d:02:b3:78:c7:9f:68:79:8e:24:dc:86:5b:39:cf:fd:5f: 40:70:65:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZZTCU6hUW29xZHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2U5ZWZhNGItMGQ3OC00NGQ0LTkzYjgtMDdmZTNlOGRmNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOaviuZwmFdT6H2XFfUAegturZCfkmGog8ih m4K+2gWerN1kRxUsy2goNozF9VJEHrEVOWXh5pGumZOkLXWDIZlALW4esBWnPPEa ecE7jMl52i4JSuTWDNXiABQnRGBxjHBtGL5wFpm6K1O2JrHU5m5IzRP9gr2K3A8n mFqDFaiayLVpxrADxXCej0WcqakDPFZRI4Sltd3K5IF8fD9fAkEIecHDObRjglMT GEnn9BDGQ0H99m8H81tE53TijCrjZuQVytW6MPwtCjz9Ovj7pZlNslLsAFIpFz+6 AMqrvAaEgZ4SsUuJtAHoZImUtNDxy1GdKh/uc+7p1PtYoxPnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI+3HelJxaOzatTzxHlVEJFq1RqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDcwM2YyM2EtMjYxMi0z MzUzLWJkYWUtNzY2YjM1Njk1MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0p1DUX/l3WZP9WV7Kwcm1NIPWvi5Yumfwo6qfocvfEx0rheRzRAbUZ dsJler5v1u1SH8FLEy/e5OZaTj/VpL39YX9KJEeYEBh524FQpt4AlNzBVR5/89Bf vE7xbCsPV98fnYOKXdMTiUmN+LI26TKajN/84OBQp930KfyChpraNwm2KBYAtZZo t8yZjT1/eKqdcc20Tb8glstWMNfxNIH0rNXnntQdJ5er3ltMQCLQd9V8YumX/13l S3eXdAgeQ/q5e5+6m6kpBr/hF0Im1ULAMxtiy9TWLotnxxn3GT/IdnhSBb/qypqT q3s9ArN4x59oeY4k3IZbOc/9X0BwZc4= -----END CERTIFICATE-----Generated at Mon Jun 30 17:35:05 2025 by rpki-client