$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e8dd6e97-53ab-30e5-8264-98059b666ebd.roa File: e8dd6e97-53ab-30e5-8264-98059b666ebd.roa (raw, json) Hash identifier: oAi/ST4/Zj5ffVqWUpGLLXGVGY73tBHV5qzCjLboc7I= Subject key identifier: 92:7B:44:76:05:3C:3C:28:36:E7:19:83:CA:50:9A:D6:DF:B7:79:87 Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Certificate serial: 010D0C9F4328584A497067D6864F0F956CBAA880 Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e8dd6e97-53ab-30e5-8264-98059b666ebd.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 399296 IP address blocks: 134.195.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:67:d6:86:4f:0f:95:6c:ba:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=6cb3c46c-c1ae-425c-893a-3d8bdef3f6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:5b:b2:7f:d1:9b:49:5a:8c:6b:30:85:e5: 28:10:bb:14:9b:79:49:af:f6:e2:fb:d8:71:b8:9f: bd:73:0d:70:ff:26:b1:18:17:f3:5e:31:ef:3f:65: 4a:4a:32:cc:56:b9:99:2d:64:9d:8a:16:e9:ac:9b: 4d:73:5a:66:8f:b4:cb:97:ee:7a:f5:36:70:e2:5c: 39:d1:0a:5a:0d:62:73:3e:64:15:40:13:ff:9d:6a: 84:f5:6c:6c:0e:31:6f:c6:9e:c3:69:37:79:20:92: 5d:02:1b:1e:26:e6:db:e8:ab:4c:81:d9:f1:eb:bd: 5b:39:18:1b:0d:bd:be:27:be:08:4d:db:21:3f:73: 8a:54:b9:e2:89:b6:b7:c8:75:65:96:40:91:6b:3c: ad:af:1e:e5:40:fd:86:d7:65:05:54:4b:63:70:aa: d1:a5:06:5a:19:e2:d6:19:2a:b0:40:c9:2a:86:d6: e9:a2:f8:45:e1:08:6a:bc:7d:74:bd:90:04:02:66: 4a:6c:30:91:27:10:fe:e3:fa:dd:64:af:53:55:ef: 13:86:63:68:f9:ce:92:5d:38:f0:e3:eb:99:a6:9f: ce:94:a2:a3:64:88:f8:ed:73:da:78:b2:b2:a7:8f: b0:79:22:4b:9c:61:39:78:16:34:43:c8:10:fe:db: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7B:44:76:05:3C:3C:28:36:E7:19:83:CA:50:9A:D6:DF:B7:79:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e8dd6e97-53ab-30e5-8264-98059b666ebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl X509v3 Authority Key Identifier: keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer sbgp-ipAddrBlock: critical IPv4: 134.195.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:85:37:8c:4f:08:44:84:0c:6a:e1:fe:80:e0:5d:e6:51:3b: 4d:dc:0a:2d:6c:4d:c8:56:57:d1:52:80:f0:34:54:ae:50:cb: ee:fb:e3:f2:db:ae:9d:54:f9:66:1d:3a:a2:9e:f7:04:17:ae: 2c:cd:d4:16:db:64:72:dc:76:30:47:c3:95:f1:1c:c6:af:8b: d4:0d:f4:c3:47:86:4e:bd:cb:6f:61:30:c8:b8:98:58:53:b4: 44:65:37:69:c4:c3:87:fa:a2:db:e0:17:0f:e0:d8:26:31:8e: 09:70:27:b5:03:10:3b:5d:4d:43:92:73:54:88:6e:f3:ee:b2: c3:f9:17:ed:ea:48:a5:c9:10:6d:e5:a6:b8:a8:46:5b:9d:bc: 29:b2:33:d9:4a:de:80:30:a6:0d:1d:fe:f2:7a:34:e6:81:37: f9:e3:17:59:a9:90:69:81:db:2f:b3:72:7e:3e:1b:79:c2:43: e3:8c:4d:78:fb:12:41:14:cd:3a:02:24:a3:90:a4:d9:da:12: 24:af:88:e7:d8:17:7d:2d:b0:96:86:53:72:fe:39:8d:4f:81: 5a:ab:f1:44:ca:47:c7:ec:4c:db:4e:c5:03:63:5b:f3:2f:19: 46:82:fa:88:a2:93:4e:3f:e6:74:ff:41:66:dc:a7:bc:d9:90: a5:88:8d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGfWhk8PlWy6qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FiYTU1YWUtODMzYS00NDg3LThiZTEtOWI5OTdhZGJi ZWM5MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NmNiM2M0NmMtYzFhZS00MjVjLTg5M2EtM2Q4YmRlZjNmNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzVbsn/Rm0lajGswheUoELsUm3lJr/bi+9hx uJ+9cw1w/yaxGBfzXjHvP2VKSjLMVrmZLWSdihbprJtNc1pmj7TLl+569TZw4lw5 0QpaDWJzPmQVQBP/nWqE9WxsDjFvxp7DaTd5IJJdAhseJubb6KtMgdnx671bORgb Db2+J74ITdshP3OKVLniiba3yHVllkCRazytrx7lQP2G12UFVEtjcKrRpQZaGeLW GSqwQMkqhtbpovhF4QhqvH10vZAEAmZKbDCRJxD+4/rdZK9TVe8ThmNo+c6SXTjw 4+uZpp/OlKKjZIj47XPaeLKyp4+weSJLnGE5eBY0Q8gQ/tvqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ7RHYFPDwoNucZg8pQmtbft3mHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWJh NTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5N2FkYmJlYzkvZThkZDZlOTctNTNhYi0z MGU1LTgyNjQtOTgwNTliNjY2ZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FiYTU1YWUtODMzYS00NDg3LThi ZTEtOWI5OTdhZGJiZWM5LzdhYmE1NWFlLTgzM2EtNDQ4Ny04YmUxLTliOTk3YWRi YmVjOS5jcmwwHwYDVR0jBBgwFoAUm7mq9xQHJPlj+rsVMn+tqskRLrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YWJhNTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5 N2FkYmJlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCFN4xPCESEDGrh/oDgXeZRO03cCi1sTchWV9FSgPA0VK5Qy+774/Lb rp1U+WYdOqKe9wQXrizN1BbbZHLcdjBHw5XxHMavi9QN9MNHhk69y29hMMi4mFhT tERlN2nEw4f6otvgFw/g2CYxjglwJ7UDEDtdTUOSc1SIbvPussP5F+3qSKXJEG3l prioRludvCmyM9lK3oAwpg0d/vJ6NOaBN/njF1mpkGmB2y+zcn4+G3nCQ+OMTXj7 EkEUzToCJKOQpNnaEiSviOfYF30tsJaGU3L+OY1PgVqr8UTKR8fsTNtOxQNjW/Mv GUaC+oiik04/5nT/QWbcp7zZkKWIjWI= -----END CERTIFICATE-----Generated at Wed Jul 2 16:24:15 2025 by rpki-client