$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa File: 5025a268-fe54-38c3-b693-a58aa12b8433.roa (raw, json) Hash identifier: QPqvTAxfpR3+lbEzNPxPjrPLkzdt2OeYjzoP5nF+MFQ= Subject key identifier: 36:03:7E:20:CB:5D:61:9C:C3:03:BB:6C:A0:02:EE:01:D1:9B:8A:5D Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A3FAADC4798BA7E0A68565080 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 22652 IP address blocks: 173.231.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:dc:47:98:ba:7e:0a:68:56:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=de20adb1-0a99-4b3c-9250-d10108db4287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:21:bc:b1:db:b3:90:c8:41:63:47:5d:89: bd:28:b7:c7:b5:46:2e:45:a8:77:6f:b9:d7:6c:50: cc:dc:86:fe:0d:2b:10:06:fa:d5:a1:8c:2d:f4:6b: 56:20:e8:d9:0b:d7:3a:17:ca:a8:d5:28:04:2e:da: 55:e3:b4:a9:6d:07:17:0c:7c:76:56:21:ab:a1:e2: 43:d2:0d:16:6d:c0:b7:51:e2:e2:7b:eb:9b:99:d2: 43:65:18:d2:c7:7d:f3:da:55:e0:2c:18:58:38:04: 1a:35:ed:2d:e0:1f:e2:0f:9a:4e:a0:d9:22:33:88: 6a:e8:24:7d:63:a7:0f:53:c8:a3:83:92:43:f7:f3: df:55:ec:b2:44:f5:24:e0:39:23:0a:c2:e6:50:86: 55:38:09:e6:3a:24:84:32:9d:48:7a:71:51:2d:33: 2c:ef:4b:f0:19:c4:20:c6:14:7d:73:13:50:bb:9b: c6:d0:5f:a6:55:a4:64:11:0c:17:9c:93:78:5d:3f: ca:e9:16:e3:43:0f:fb:a7:de:37:c3:23:c2:1f:3b: 49:66:6f:ee:af:5d:3b:81:46:d2:54:a9:cd:bc:36: e7:af:3d:d1:5c:ad:07:28:61:92:df:3f:79:0d:46: e3:ce:1a:78:04:2f:80:ec:01:25:1f:fd:bd:9b:b7: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:03:7E:20:CB:5D:61:9C:C3:03:BB:6C:A0:02:EE:01:D1:9B:8A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8a:de:2f:e8:3d:6f:ce:6d:ac:51:85:3c:f3:0c:4d:7c:b4: 3d:46:ad:b4:2f:89:40:8d:0b:90:60:15:6b:92:5d:e3:df:50: b8:c7:5b:c0:be:89:a9:f8:ba:22:d6:8d:74:c0:4e:5f:d1:e2: 94:df:2d:3c:d6:37:c9:97:2e:26:f0:1e:24:48:60:9b:c5:45: 59:7e:f8:ee:f7:a0:08:94:4f:22:93:a2:98:ca:cd:78:c0:d6: 40:48:71:db:76:f6:52:4e:a3:96:49:38:60:54:91:40:40:40: fc:5e:47:f4:49:ec:50:93:10:5e:c0:5e:5e:84:1e:5f:4c:2e: 7a:7a:e2:d4:37:ff:33:98:f3:e6:ff:50:ba:f2:41:37:25:40: 5d:14:d9:16:a3:28:05:66:f6:9c:88:24:11:36:8a:1c:b7:08: a9:6d:8d:58:02:09:a4:0b:2e:3f:32:94:a1:2b:01:37:e3:44: d3:3c:81:15:4e:d3:00:3f:5c:ab:e4:d0:58:fb:ea:b8:47:ef: 72:a9:b3:84:1a:af:85:f7:ac:2c:eb:af:76:36:3c:37:07:fe: 71:e5:7d:78:1d:c0:33:cc:05:36:a5:96:92:51:d9:7b:f7:34: cd:41:30:98:75:e9:6b:72:f0:5c:67:3f:ef:aa:bf:44:d4:71: 75:01:12:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtxHmLp+CmhWUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk ZGUyMGFkYjEtMGE5OS00YjNjLTkyNTAtZDEwMTA4ZGI0Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo4hvLHbs5DIQWNHXYm9KLfHtUYuRah3b7nX bFDM3Ib+DSsQBvrVoYwt9GtWIOjZC9c6F8qo1SgELtpV47SpbQcXDHx2ViGroeJD 0g0WbcC3UeLie+ubmdJDZRjSx33z2lXgLBhYOAQaNe0t4B/iD5pOoNkiM4hq6CR9 Y6cPU8ijg5JD9/PfVeyyRPUk4DkjCsLmUIZVOAnmOiSEMp1IenFRLTMs70vwGcQg xhR9cxNQu5vG0F+mVaRkEQwXnJN4XT/K6RbjQw/7p943wyPCHztJZm/ur107gUbS VKnNvDbnrz3RXK0HKGGS3z95DUbjzhp4BC+A7AElH/29m7eStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYDfiDLXWGcwwO7bKAC7gHRm4pdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTAyNWEyNjgtZmU1NC0z OGMzLWI2OTMtYTU4YWExMmI4NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAred1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGK3i/oPW/ObaxRhTzzDE18tD1GrbQviUCNC5BgFWuSXePfULjHW8C+ ian4uiLWjXTATl/R4pTfLTzWN8mXLibwHiRIYJvFRVl++O73oAiUTyKTopjKzXjA 1kBIcdt29lJOo5ZJOGBUkUBAQPxeR/RJ7FCTEF7AXl6EHl9MLnp64tQ3/zOY8+b/ ULryQTclQF0U2RajKAVm9pyIJBE2ihy3CKltjVgCCaQLLj8ylKErATfjRNM8gRVO 0wA/XKvk0Fj76rhH73Kps4Qar4X3rCzrr3Y2PDcH/nHlfXgdwDPMBTallpJR2Xv3 NM1BMJh16Wty8FxnP++qv0TUcXUBEuc= -----END CERTIFICATE-----Generated at Wed Jul 2 19:52:01 2025 by rpki-client