$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa File: e9da57f8-2566-3d24-9238-98da3a3c87ff.roa (raw, json) Hash identifier: H1S1l6yCv0hJgfm6DftiAiPYgpZ5B3+yTLz0uk/FbnM= Subject key identifier: 46:A8:F7:50:D1:A0:CF:B7:B7:74:71:A5:3B:40:8F:89:5D:42:6D:83 Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Certificate serial: 010D0C9F4328584A03A54297F7A4460F2E454F80 Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 22773 IP address blocks: 134.195.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:42:97:f7:a4:46:0f:2e:45:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=79c7a4b6-d56f-43fc-b02d-53d53037f72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:68:ae:34:8a:18:f3:a4:a1:74:fd:21:fd: 36:8b:8b:ba:c6:e0:cc:0a:f3:2f:a1:64:55:6f:7d: 34:48:94:cf:c6:13:5e:ba:74:bc:6e:b1:23:20:85: f2:5e:0a:a8:20:35:79:f3:45:02:87:9d:f1:d6:20: e7:9c:c8:c5:92:61:78:2d:23:3e:15:30:f4:cb:43: e0:62:c3:37:7a:a3:ee:c2:e6:75:e4:b5:dd:f0:2b: 03:b6:4b:f5:e0:f6:bc:37:67:86:e2:be:80:24:c5: 10:5b:e2:6c:8a:06:ce:56:c3:bf:58:c0:3b:0e:35: b1:fc:ff:c8:68:9f:63:46:09:d8:05:d5:b1:dc:b9: 8a:7f:b2:48:64:84:bf:65:37:89:2f:1b:8b:a4:27: cf:93:f2:b6:cf:f5:69:1f:42:be:aa:b7:4d:c9:5e: 60:e7:12:91:13:8f:7d:f7:b3:6c:04:52:04:a4:b6: aa:4e:96:49:e3:de:c9:80:85:26:44:14:a6:eb:32: a4:72:ef:70:ac:f9:1e:24:75:84:2a:d0:7e:b6:55: 8f:1e:9e:f3:eb:32:99:07:e2:51:da:ae:46:d7:42: a4:48:1d:20:72:dd:6f:4e:94:aa:21:ba:17:80:2a: 74:7b:f8:16:a5:22:4c:df:02:eb:ca:38:c7:7a:f6: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:F7:50:D1:A0:CF:B7:B7:74:71:A5:3B:40:8F:89:5D:42:6D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl X509v3 Authority Key Identifier: keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer sbgp-ipAddrBlock: critical IPv4: 134.195.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cb:4c:70:0a:fd:f4:89:cb:85:d4:d9:45:85:98:cc:46:ba: 07:fd:4d:81:3e:d4:ec:09:ff:58:68:6a:80:b4:d5:35:df:34: bd:41:b9:e0:ab:9c:ef:6a:cc:03:95:42:a0:b5:43:dc:be:2a: 9e:a4:bc:13:17:db:fe:90:13:c7:f9:e7:b4:f1:96:ac:7a:b2: 11:92:92:40:4d:8e:00:10:4f:3c:38:5d:39:f7:39:e7:0b:4a: 10:f0:57:6d:a7:c2:f7:76:b6:75:7c:6a:76:07:da:de:b1:0e: f6:af:4d:93:af:3a:1c:8a:66:e8:bd:1d:6a:41:ea:41:ad:4d: 53:85:1d:52:34:45:01:19:0a:d2:cc:50:bc:86:57:a4:73:a1: 91:0f:18:1e:9e:f9:eb:35:5c:42:3b:44:56:2b:be:cf:80:e2: f8:ac:8d:ed:b8:bb:62:7b:99:1e:97:5b:39:a0:ff:df:59:16: 5a:c7:bd:1b:6f:31:6b:fd:e0:85:6b:1c:bd:06:b5:b7:26:ca: 2c:a6:65:9f:41:79:c0:d3:a7:8e:05:a6:a5:70:a1:6b:e8:91: e1:55:c3:e5:5c:df:e2:11:26:65:bf:a5:03:58:9c:a5:f7:9b: 65:fe:38:47:1f:63:6b:1d:c5:9e:c4:dd:ee:ea:d6:d9:3c:e6: c3:f0:6e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUKX96RGDy5FT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FiYTU1YWUtODMzYS00NDg3LThiZTEtOWI5OTdhZGJi ZWM5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NzljN2E0YjYtZDU2Zi00M2ZjLWIwMmQtNTNkNTMwMzdmNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwVorjSKGPOkoXT9If02i4u6xuDMCvMvoWRV b300SJTPxhNeunS8brEjIIXyXgqoIDV580UCh53x1iDnnMjFkmF4LSM+FTD0y0Pg YsM3eqPuwuZ15LXd8CsDtkv14Pa8N2eG4r6AJMUQW+JsigbOVsO/WMA7DjWx/P/I aJ9jRgnYBdWx3LmKf7JIZIS/ZTeJLxuLpCfPk/K2z/VpH0K+qrdNyV5g5xKRE499 97NsBFIEpLaqTpZJ497JgIUmRBSm6zKkcu9wrPkeJHWEKtB+tlWPHp7z6zKZB+JR 2q5G10KkSB0gct1vTpSqIboXgCp0e/gWpSJM3wLryjjHevbsTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEao91DRoM+3t3RxpTtAj4ldQm2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWJh NTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5N2FkYmJlYzkvZTlkYTU3ZjgtMjU2Ni0z ZDI0LTkyMzgtOThkYTNhM2M4N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FiYTU1YWUtODMzYS00NDg3LThi ZTEtOWI5OTdhZGJiZWM5LzdhYmE1NWFlLTgzM2EtNDQ4Ny04YmUxLTliOTk3YWRi YmVjOS5jcmwwHwYDVR0jBBgwFoAUm7mq9xQHJPlj+rsVMn+tqskRLrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YWJhNTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5 N2FkYmJlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/LTHAK/fSJy4XU2UWFmMxGugf9TYE+1OwJ/1hoaoC01TXfNL1BueCr nO9qzAOVQqC1Q9y+Kp6kvBMX2/6QE8f557Txlqx6shGSkkBNjgAQTzw4XTn3OecL ShDwV22nwvd2tnV8anYH2t6xDvavTZOvOhyKZui9HWpB6kGtTVOFHVI0RQEZCtLM ULyGV6RzoZEPGB6e+es1XEI7RFYrvs+A4visje24u2J7mR6XWzmg/99ZFlrHvRtv MWv94IVrHL0GtbcmyiymZZ9BecDTp44FpqVwoWvokeFVw+Vc3+IRJmW/pQNYnKX3 m2X+OEcfY2sdxZ7E3e7q1tk85sPwbpE= -----END CERTIFICATE-----Generated at Mon Jun 30 21:04:06 2025 by rpki-client