$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b41d991e-20c0-37b4-9d1b-c624b0f99039.roa File: b41d991e-20c0-37b4-9d1b-c624b0f99039.roa (raw, json) Hash identifier: gNFjbI02MTvrazttpiDmt8dHL8+WQ29UK/0WdYnuuAQ= Subject key identifier: 1B:5F:23:0D:46:47:95:95:3B:5D:70:F1:FC:A6:F4:7F:8B:B2:CD:8B Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A3FAAD8785B796288D783DE80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b41d991e-20c0-37b4-9d1b-c624b0f99039.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 22652 IP address blocks: 173.242.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:d8:78:5b:79:62:88:d7:83:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=8b1fd149-979c-4faf-9ebb-2acec45cbd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:a6:84:c6:d9:1b:c4:53:78:dd:84:5d:67: c1:fc:39:4b:a4:1b:c3:1e:65:22:2c:1c:cb:0b:1e: 16:db:cf:d9:68:63:8f:28:38:ab:0f:89:36:90:80: 09:ca:d0:b1:04:df:ca:b6:49:ca:09:4d:54:e9:73: 55:b3:46:e2:4f:45:6a:70:4c:a0:87:50:4e:64:f2: 5b:bd:7b:e4:d2:f7:15:50:8a:e8:35:ba:0a:11:48: 72:41:f8:60:ae:7a:30:38:65:86:2b:56:82:db:27: a2:08:c2:b4:93:08:de:59:62:dd:ef:22:14:9e:0a: 74:31:41:b7:0a:59:4a:36:af:3f:16:17:74:03:98: 66:18:83:68:34:fe:6e:35:ec:8f:5e:48:9b:47:fa: be:b1:98:0c:94:05:ed:88:04:44:4c:93:f6:7c:7c: 81:79:a7:8d:b1:65:e6:c0:d8:61:4c:33:07:3e:9a: c6:3c:e0:79:cd:d1:2e:ca:cf:3b:2c:77:d9:7a:08: 81:22:d9:df:7d:df:cb:fa:c8:47:c3:f6:6e:b2:33: b4:1f:8a:08:c9:9c:ee:5e:41:88:48:20:61:58:3f: 14:be:4f:1e:57:cf:c1:79:84:a6:0c:96:f3:f1:3d: 33:3b:7b:a2:b9:36:2a:a4:31:7b:be:9c:bb:d6:40: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5F:23:0D:46:47:95:95:3B:5D:70:F1:FC:A6:F4:7F:8B:B2:CD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b41d991e-20c0-37b4-9d1b-c624b0f99039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.242.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ef:d0:c2:64:3c:2d:1b:9d:17:56:00:03:c2:bc:69:a8:64: 84:81:79:43:00:d4:6c:35:8e:89:2f:b8:69:b3:ed:7d:2f:34: 95:3d:12:2c:83:87:c0:dd:fb:7b:a9:6f:e2:ff:6d:86:fd:53: ad:fc:94:90:a7:0e:54:43:d2:34:b5:3d:74:8f:96:6f:b1:c6: 4b:fb:21:f5:2b:12:cc:14:0a:1b:3e:57:ae:98:e4:c0:94:de: 40:50:d3:2e:a0:30:2c:a5:25:50:e4:64:da:be:1d:46:de:84: 18:d5:9b:6e:e1:52:aa:11:8e:54:a1:41:0c:74:e0:55:23:e6: c6:e2:95:ba:35:9c:22:30:6e:5f:e8:57:6c:c9:bb:19:58:8a: 3a:e0:12:0a:3c:54:f8:50:8f:d4:20:8b:da:dd:8f:1a:ae:68: 42:13:0a:ec:58:78:a9:6c:07:8e:b1:bd:d8:f6:a4:ad:eb:5c: e8:0d:60:2c:58:85:ea:14:a8:bf:11:5e:24:95:f7:c7:b5:a0: ce:00:94:92:3e:67:e2:d4:8f:97:3b:23:3f:0e:31:a4:d3:29: 20:79:9b:e3:f8:86:5f:18:1b:41:43:e2:23:7a:bf:cb:d9:0d: 1b:94:af:d1:24:09:2d:68:9a:0e:2e:7e:be:55:32:ff:4f:7e: bd:ef:75:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qth4W3liiNeD3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk OGIxZmQxNDktOTc5Yy00ZmFmLTllYmItMmFjZWM0NWNiZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBamhMbZG8RTeN2EXWfB/DlLpBvDHmUiLBzL Cx4W28/ZaGOPKDirD4k2kIAJytCxBN/KtknKCU1U6XNVs0biT0VqcEygh1BOZPJb vXvk0vcVUIroNboKEUhyQfhgrnowOGWGK1aC2yeiCMK0kwjeWWLd7yIUngp0MUG3 CllKNq8/Fhd0A5hmGINoNP5uNeyPXkibR/q+sZgMlAXtiARETJP2fHyBeaeNsWXm wNhhTDMHPprGPOB5zdEuys87LHfZegiBItnffd/L+shHw/ZusjO0H4oIyZzuXkGI SCBhWD8Uvk8eV8/BeYSmDJbz8T0zO3uiuTYqpDF7vpy71kD9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtfIw1GR5WVO11w8fym9H+Lss2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYjQxZDk5MWUtMjBjMC0z N2I0LTlkMWItYzYyNGIwZjk5MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3v0MJkPC0bnRdWAAPCvGmoZISBeUMA1Gw1jokvuGmz7X0vNJU9EiyD h8Dd+3upb+L/bYb9U638lJCnDlRD0jS1PXSPlm+xxkv7IfUrEswUChs+V66Y5MCU 3kBQ0y6gMCylJVDkZNq+HUbehBjVm27hUqoRjlShQQx04FUj5sbilbo1nCIwbl/o V2zJuxlYijrgEgo8VPhQj9Qgi9rdjxquaEITCuxYeKlsB46xvdj2pK3rXOgNYCxY heoUqL8RXiSV98e1oM4AlJI+Z+LUj5c7Iz8OMaTTKSB5m+P4hl8YG0FD4iN6v8vZ DRuUr9EkCS1omg4ufr5VMv9Pfr3vdXA= -----END CERTIFICATE-----Generated at Tue Jul 1 20:02:02 2025 by rpki-client