$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa File: 63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa (raw, json) Hash identifier: uiltAaTWMhrTlVOV2lUxDZ+CXCfKpECLUpGSdhwIAJg= Subject key identifier: 30:7F:7B:1B:21:1C:40:40:8E:00:3E:A9:B7:29:F2:6A:72:4F:70:89 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584A23C01A70075E588AECFB7100 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 26548 IP address blocks: 167.253.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1a:70:07:5e:58:8a:ec:fb:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=5e98fbe1-3f78-4158-a5b5-881fab012e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:57:fd:1d:de:54:13:2c:d0:6f:92:69:88: 94:bf:ef:c1:5a:f9:51:23:e6:45:01:f1:91:37:ca: 46:f7:ad:41:f3:57:2c:97:1d:40:6e:c8:cf:85:b3: 13:40:62:c6:ec:11:f8:c7:ae:6c:a2:52:b7:94:e1: 9a:fd:46:83:08:75:96:67:33:c8:1c:bf:d1:1d:86: f2:bd:1f:31:df:17:b7:d6:e8:d5:cf:16:ae:87:20: 9a:cf:77:b0:3e:e7:13:18:60:d5:15:9a:86:d2:f7: 69:11:e6:b8:3e:46:4d:20:9c:b4:17:b6:f0:9e:f5: 23:40:70:42:4b:d4:36:cc:8e:a7:86:ef:a1:4e:b5: ac:ae:20:21:e5:a7:d3:4f:3d:2d:cd:33:0a:58:d8: c6:49:5d:99:89:bb:37:14:77:b0:ad:03:33:7f:3d: e1:fa:4a:f6:e7:75:85:5a:a8:ca:c8:17:36:b7:50: 52:68:7e:74:9e:73:19:81:84:51:bd:56:2d:86:1e: 9b:c6:df:40:91:4b:90:b6:f3:f6:c3:b7:30:f2:af: 54:14:d8:db:27:6c:2d:45:35:c9:ae:6f:51:71:0d: 78:e1:f5:06:65:e2:41:47:ac:19:c3:2f:6a:7c:31: 39:cb:a8:c8:02:77:b0:95:c7:ef:6f:1c:a7:6b:4f: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7F:7B:1B:21:1C:40:40:8E:00:3E:A9:B7:29:F2:6A:72:4F:70:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:81:c5:42:9b:56:21:f9:3c:6a:59:4f:0e:40:6f:5a:8b:fa: aa:f0:5f:02:a7:c3:15:b1:4e:f6:b6:31:c9:b1:0c:9c:38:04: 37:57:ea:4a:55:13:02:c1:da:42:07:ad:51:86:2c:c0:3b:e9: 5d:c8:42:77:af:df:07:16:d3:c9:ba:12:d5:3f:67:79:fd:71: e2:03:28:c3:85:3c:63:d7:bb:73:da:47:6f:75:34:b4:cc:90: 74:ba:7a:e1:f4:1d:a6:ec:a6:49:a5:43:1e:a0:78:ad:64:d8: 14:6d:a2:86:8c:e2:5e:bb:9c:d5:e0:9e:da:0f:34:b7:2f:7e: 47:de:64:de:81:9f:c3:d0:42:28:9a:10:8f:69:13:c6:7c:20: 28:c6:d4:23:15:2a:82:f2:4b:e5:45:45:ed:b6:15:9a:89:29: 3e:b2:5c:bd:4a:ea:67:f9:07:46:3b:da:e0:95:39:da:80:c4: a5:f1:0b:aa:17:78:bc:fc:a3:5b:db:4e:ac:b4:3c:21:9d:9e: 35:37:80:98:d0:c9:2c:6d:07:a4:24:06:d7:2f:18:89:65:30: 35:1e:9e:77:4c:94:43:cb:db:89:91:12:da:89:93:7a:11:51: 85:7f:3e:55:48:15:7d:20:6a:ca:99:0c:94:3e:6b:13:49:99: 97:77:ff:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBpwB15Yiuz7cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NWU5OGZiZTEtM2Y3OC00MTU4LWE1YjUtODgxZmFiMDEyZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrhX/R3eVBMs0G+SaYiUv+/BWvlRI+ZFAfGR N8pG961B81cslx1AbsjPhbMTQGLG7BH4x65solK3lOGa/UaDCHWWZzPIHL/RHYby vR8x3xe31ujVzxauhyCaz3ewPucTGGDVFZqG0vdpEea4PkZNIJy0F7bwnvUjQHBC S9Q2zI6nhu+hTrWsriAh5afTTz0tzTMKWNjGSV2Zibs3FHewrQMzfz3h+kr253WF WqjKyBc2t1BSaH50nnMZgYRRvVYthh6bxt9AkUuQtvP2w7cw8q9UFNjbJ2wtRTXJ rm9RcQ144fUGZeJBR6wZwy9qfDE5y6jIAnewlcfvbxyna0/tnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDB/exshHEBAjgA+qbcp8mpyT3CJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvNjNhNzkzNTQtYjdhNi0z ZjlhLTlhYmItOGQ4YjgyZDE0YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCBxUKbViH5PGpZTw5Ab1qL+qrwXwKnwxWxTva2McmxDJw4BDdX6kpV EwLB2kIHrVGGLMA76V3IQnev3wcW08m6EtU/Z3n9ceIDKMOFPGPXu3PaR291NLTM kHS6euH0HabspkmlQx6geK1k2BRtooaM4l67nNXgntoPNLcvfkfeZN6Bn8PQQiia EI9pE8Z8ICjG1CMVKoLyS+VFRe22FZqJKT6yXL1K6mf5B0Y72uCVOdqAxKXxC6oX eLz8o1vbTqy0PCGdnjU3gJjQySxtB6QkBtcvGIllMDUenndMlEPL24mREtqJk3oR UYV/PlVIFX0gasqZDJQ+axNJmZd3/xg= -----END CERTIFICATE-----Generated at Tue Jul 1 07:41:47 2025 by rpki-client