$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa File: d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa (raw, json) Hash identifier: K1ZfChZ75yfwmJHPgg1zM7cjGFgPZK81zz/iykF6koA= Subject key identifier: 1A:EC:1E:A6:5C:E0:6C:7D:44:88:47:1F:0C:19:2C:C5:E1:7E:06:0A Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A3FAADD8F08AB16742C90DA40 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 22652 IP address blocks: 199.167.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:dd:8f:08:ab:16:74:2c:90:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=a4fe3d81-1fb0-439a-a8fe-b0539723589a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:96:93:60:df:59:22:e7:a4:e4:0e:45:a1: 70:b1:34:a2:ff:4c:f0:cb:e4:3c:c5:19:40:b1:08: 5a:10:1b:9d:56:de:b6:02:b4:4d:7a:c6:7f:8d:b2: d1:e4:f5:e8:36:22:e9:fd:21:4e:05:56:92:8a:ad: 8b:4e:c0:74:26:e2:86:fc:1c:5c:ea:23:74:32:6a: e4:ec:99:70:95:c6:0d:5d:4c:f7:51:95:16:57:a5: ba:40:cf:f9:07:0f:a2:a9:96:ba:55:87:8e:fe:1e: 38:b0:c7:bf:e7:4b:0e:59:32:f8:e4:70:03:c1:48: 26:38:ca:3a:54:53:b4:29:6b:32:eb:cb:a0:ce:e4: 2f:50:6b:69:79:d2:b0:21:fb:d9:56:5f:cc:e3:ab: 81:ff:25:0e:3d:a2:ce:fd:23:3c:7f:d4:ab:94:f2: 08:4c:6b:5e:f9:bb:3c:2f:d3:75:5e:59:bf:39:f0: 03:c6:fd:3f:4e:2c:5e:4b:78:df:4e:e3:c5:a6:11: 21:16:1d:7e:84:b1:41:f7:c1:7e:49:d2:1e:71:be: 0e:72:96:fa:c1:b6:8b:78:d1:7e:96:28:dd:64:d4: 17:fe:65:04:08:88:db:e2:ae:73:d2:fb:db:5e:9a: f8:64:c3:50:74:17:dd:98:ce:6d:2a:17:23:ab:40: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EC:1E:A6:5C:E0:6C:7D:44:88:47:1F:0C:19:2C:C5:E1:7E:06:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 199.167.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e7:7b:95:22:d1:bc:8c:21:f8:91:73:59:b3:4e:97:ed:58: 41:6e:11:6c:81:b0:5e:ee:6f:42:5f:30:1c:30:25:ac:32:ba: af:c5:f8:d7:ae:11:02:ff:36:ca:54:2b:97:46:65:72:c1:ce: e2:74:48:86:13:84:16:35:73:2b:e1:21:02:c4:4a:e9:09:3b: 34:a8:84:ce:4c:6e:0c:6d:e6:10:b4:e6:be:9f:83:ad:22:93: 89:b6:6f:65:43:ee:0d:4d:a7:ce:d8:56:d3:ed:8c:57:c1:4d: 69:e8:2e:39:e5:7f:6d:44:6d:34:bd:22:be:14:fa:68:30:f2: 30:ae:29:d8:26:70:af:26:ee:f2:84:4b:e0:70:0c:d4:11:09: 63:24:c6:02:cd:71:0f:4f:80:d5:3b:b1:39:97:0b:5d:0a:a0: a6:b1:97:32:84:8a:f8:4a:23:1b:14:7d:4f:6b:06:48:0b:9c: 0d:e9:b5:2e:1f:1b:5f:d9:81:88:16:6d:fe:84:f8:68:ea:54: 62:ab:b7:4e:c1:f7:d7:4e:14:72:a9:38:75:1f:33:28:4e:a8: 6c:c2:fd:5e:75:dc:65:04:72:53:4c:c0:1e:91:42:ac:74:a1: a6:44:d2:ee:ab:2e:74:8c:9d:e4:bf:93:83:0e:e1:a2:25:d9: 50:75:0e:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qt2PCKsWdCyQ2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk YTRmZTNkODEtMWZiMC00MzlhLWE4ZmUtYjA1Mzk3MjM1ODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIOWk2DfWSLnpOQORaFwsTSi/0zwy+Q8xRlA sQhaEBudVt62ArRNesZ/jbLR5PXoNiLp/SFOBVaSiq2LTsB0JuKG/Bxc6iN0Mmrk 7JlwlcYNXUz3UZUWV6W6QM/5Bw+iqZa6VYeO/h44sMe/50sOWTL45HADwUgmOMo6 VFO0KWsy68ugzuQvUGtpedKwIfvZVl/M46uB/yUOPaLO/SM8f9SrlPIITGte+bs8 L9N1Xlm/OfADxv0/TixeS3jfTuPFphEhFh1+hLFB98F+SdIecb4Ocpb6wbaLeNF+ lijdZNQX/mUECIjb4q5z0vvbXpr4ZMNQdBfdmM5tKhcjq0DXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrsHqZc4Gx9RIhHHwwZLMXhfgYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZDg2ZTAyNDEtNGIzYS0z MWRlLWI0YjctMDFhZDdjM2ZjYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6doMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7ne5Ui0byMIfiRc1mzTpftWEFuEWyBsF7ub0JfMBwwJawyuq/F+Neu EQL/NspUK5dGZXLBzuJ0SIYThBY1cyvhIQLESukJOzSohM5Mbgxt5hC05r6fg60i k4m2b2VD7g1Np87YVtPtjFfBTWnoLjnlf21EbTS9Ir4U+mgw8jCuKdgmcK8m7vKE S+BwDNQRCWMkxgLNcQ9PgNU7sTmXC10KoKaxlzKEivhKIxsUfU9rBkgLnA3ptS4f G1/ZgYgWbf6E+GjqVGKrt07B99dOFHKpOHUfMyhOqGzC/V513GUEclNMwB6RQqx0 oaZE0u6rLnSMneS/k4MO4aIl2VB1DhU= -----END CERTIFICATE-----Generated at Tue Jul 1 20:42:59 2025 by rpki-client