$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa File: 70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa (raw, json) Hash identifier: yY3syQXzfusgySXxv8ORqKLw4CGPGJLZoXCFmpiF+jc= Subject key identifier: DD:0C:89:95:C9:33:B7:E7:5E:8F:CA:68:73:B2:E2:EF:A0:DD:0E:B6 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584A3CE029008782C90B4B6B6E00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 399185 IP address blocks: 16.7.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:29:00:87:82:c9:0b:4b:6b:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=bc5b9169-1b47-41bc-a044-bdf5781d635d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:dc:93:a7:86:49:15:00:42:51:72:1f:71: dc:c4:7f:da:01:62:21:f2:74:fa:1c:e6:56:72:63: 6e:b2:c2:4d:87:83:7e:56:c4:c0:ca:3f:bd:d1:22: f7:71:ec:4e:92:5e:8c:b0:d4:72:77:89:52:db:d3: 03:0c:d1:ed:42:04:eb:b7:59:36:34:dd:16:06:e6: 56:8a:73:47:df:c3:36:0c:e0:eb:7d:39:6e:44:7c: c6:9c:06:db:39:19:36:ac:f6:09:cb:bc:4a:5c:23: b9:38:a5:b4:08:a4:37:ee:77:6d:56:b9:9d:40:aa: 70:bf:3d:64:e1:bb:63:6c:58:5b:42:c9:5d:a3:e8: 79:80:c8:8c:94:a1:f4:43:4a:07:33:73:6d:d7:59: 3e:44:cd:f2:f1:54:ac:b1:60:ef:08:94:46:cc:76: b8:21:3a:d7:e7:c2:59:69:0c:a0:62:d7:ac:27:fa: 72:31:94:a6:cb:15:cc:7f:c3:f6:31:1d:dc:3a:89: 07:92:d4:a0:76:4b:ac:31:49:3b:6c:a5:9a:a7:4e: 83:4e:35:67:0f:d8:37:d6:0d:5e:69:5f:35:63:e7: 3c:de:91:72:c5:eb:38:b8:79:a5:5c:ea:16:0f:71: be:9b:f2:18:ab:dd:87:25:5f:51:8e:fe:69:d4:e3: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0C:89:95:C9:33:B7:E7:5E:8F:CA:68:73:B2:E2:EF:A0:DD:0E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1f:1c:c3:e9:5b:69:e7:57:32:0b:f0:15:9a:46:55:3c:d7: b1:43:f6:75:70:0d:40:21:fc:82:f2:f5:aa:3f:1d:04:d6:3d: 2b:98:d6:c8:7c:9a:65:46:61:d2:9a:43:04:19:05:43:a8:a1: dd:7a:2f:56:df:84:44:c6:b5:70:6b:57:22:f7:13:e6:97:e6: e9:ef:56:79:66:5d:a3:cb:40:d6:d1:71:ba:30:04:b1:93:49: c1:da:0f:a6:71:6c:3c:8a:e3:39:db:72:80:30:1c:8f:b6:e6: 2e:07:85:df:4e:c3:94:93:28:e9:ff:db:93:8b:eb:a2:71:9b: 30:27:9c:74:af:54:3c:79:80:5c:02:4c:be:ae:ad:a8:a9:bf: 40:03:7e:16:f5:5f:ad:36:18:e6:aa:e5:91:17:39:93:35:32: dd:33:91:09:a7:63:73:9c:02:75:19:08:0e:a3:db:92:96:b9: e1:64:b5:10:eb:2c:83:f8:07:64:63:90:b4:c8:6f:31:04:a3: e6:82:1b:e7:1a:5f:97:ac:ad:d3:78:68:91:52:c4:13:f4:ca: aa:32:67:ec:fb:c9:fa:91:c1:41:f2:16:a0:ff:70:f6:0f:2a: b6:fe:a0:1a:79:14:e4:1c:1c:66:0b:4b:02:93:b5:ac:0c:6f: 6b:37:5f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CkAh4LJC0trbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk YmM1YjkxNjktMWI0Ny00MWJjLWEwNDQtYmRmNTc4MWQ2MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHnck6eGSRUAQlFyH3HcxH/aAWIh8nT6HOZW cmNussJNh4N+VsTAyj+90SL3cexOkl6MsNRyd4lS29MDDNHtQgTrt1k2NN0WBuZW inNH38M2DODrfTluRHzGnAbbORk2rPYJy7xKXCO5OKW0CKQ37ndtVrmdQKpwvz1k 4btjbFhbQsldo+h5gMiMlKH0Q0oHM3Nt11k+RM3y8VSssWDvCJRGzHa4ITrX58JZ aQygYtesJ/pyMZSmyxXMf8P2MR3cOokHktSgdkusMUk7bKWap06DTjVnD9g31g1e aV81Y+c83pFyxes4uHmlXOoWD3G+m/IYq92HJV9Rjv5p1ONxDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0MiZXJM7fnXo/KaHOy4u+g3Q62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNzBiMzRhN2YtNDZiNy0z MWEzLTlkYjQtNjJlZTlhNzI5N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEAcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIfHMPpW2nnVzIL8BWaRlU817FD9nVwDUAh/ILy9ao/HQTWPSuY1sh8 mmVGYdKaQwQZBUOood16L1bfhETGtXBrVyL3E+aX5unvVnlmXaPLQNbRcbowBLGT ScHaD6ZxbDyK4znbcoAwHI+25i4Hhd9Ow5STKOn/25OL66JxmzAnnHSvVDx5gFwC TL6uraipv0ADfhb1X602GOaq5ZEXOZM1Mt0zkQmnY3OcAnUZCA6j25KWueFktRDr LIP4B2RjkLTIbzEEo+aCG+caX5esrdN4aJFSxBP0yqoyZ+z7yfqRwUHyFqD/cPYP Krb+oBp5FOQcHGYLSwKTtawMb2s3Xys= -----END CERTIFICATE-----Generated at Tue Jul 1 16:53:26 2025 by rpki-client