$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e8f95502-55f6-3cfc-a9fe-87baa3d96362.roa File: e8f95502-55f6-3cfc-a9fe-87baa3d96362.roa (raw, json) Hash identifier: 5ZrNfcuPh6Thb6gj0xwwaw0DUFOeUKCDbuKzYE+wMNk= Subject key identifier: D7:DF:7F:B7:0B:B5:BC:EF:CF:06:5A:5F:7C:28:C5:77:6D:2A:2C:EF Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A506AF4FE3C11CDB7EA6A8E80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e8f95502-55f6-3cfc-a9fe-87baa3d96362.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 395075 IP address blocks: 216.113.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f4:fe:3c:11:cd:b7:ea:6a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=3f76fa8c-b0af-4820-b16c-cba646e8a8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:44:1f:86:e3:7b:ba:cb:8e:2e:b8:51:32: 54:69:2d:be:88:96:59:54:73:97:4f:21:37:4f:f5: 44:09:0e:40:0d:2c:d7:12:5c:ab:19:5d:bb:f4:52: 9b:eb:d9:b9:93:13:c5:d3:03:48:6d:c1:66:9d:0a: 90:5d:44:08:66:9d:df:c5:b6:cb:31:b7:41:72:76: 1f:e9:1e:f6:43:2d:19:00:c3:5a:35:79:e7:e4:09: cd:75:da:5b:19:b4:12:7d:2c:9e:f1:9f:34:34:4d: bf:8e:d6:ff:12:8b:ea:a0:fe:1e:93:55:7e:03:da: 8b:46:90:80:5c:3d:0c:98:66:38:00:14:8c:0f:b2: 85:cc:b6:4b:82:18:de:8a:d0:4c:0e:83:6c:a3:71: 27:4f:d9:e7:56:16:68:e6:b6:a5:70:a7:c1:65:1d: 9a:83:1c:5f:84:81:09:89:3f:97:ba:15:fa:df:c6: 0e:48:20:81:db:f3:89:45:a9:95:1b:44:eb:8b:59: a2:93:ff:79:8a:9e:fd:16:1d:f1:bd:9b:81:19:b1: 0c:15:c7:6c:b9:60:5f:74:82:fa:c4:1d:af:b3:31: 74:60:bd:39:97:a1:2f:bc:e0:fa:73:12:79:15:3f: 68:09:ae:39:37:8c:9b:5c:98:be:de:e3:34:fb:63: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DF:7F:B7:0B:B5:BC:EF:CF:06:5A:5F:7C:28:C5:77:6D:2A:2C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e8f95502-55f6-3cfc-a9fe-87baa3d96362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 216.113.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e2:26:55:8d:08:d4:8a:b1:33:5f:ff:22:ea:2b:27:2f:ce: e3:b6:42:47:6f:c0:97:c2:58:7f:20:17:5d:76:7d:29:b3:38: 08:da:e3:e2:77:6b:7b:5c:13:d0:a4:83:c2:88:a4:00:85:a7: 40:3f:72:a5:9f:8a:ac:62:db:9a:45:03:52:59:91:4d:a2:df: 0b:68:cd:21:60:6d:82:c7:45:bf:4d:64:2e:f3:6a:32:98:7b: 19:75:d3:5d:34:a2:60:c5:0d:51:00:b4:f9:81:7f:da:97:63: 3f:fe:b8:b4:92:d4:cb:5d:95:29:1b:75:64:0c:d4:94:ab:6c: 24:25:71:7d:90:6b:14:83:d9:a8:47:34:63:76:b2:48:50:87: ca:ea:1f:e5:ac:c8:ce:6f:34:25:67:3f:ea:ba:c7:59:ec:51: 3d:e3:76:99:54:a5:e4:e3:a7:19:79:4b:05:b1:f9:f5:31:40: da:84:6b:49:7b:31:a8:d4:3f:09:11:38:e7:35:6d:3c:e8:37: d0:9f:84:bc:c7:63:84:3c:28:fe:5d:c8:0d:56:43:1a:a6:ec: 5a:9a:a4:59:c4:4b:bb:29:8e:cf:31:95:5d:b9:de:a1:1f:70: cc:0d:b7:d8:08:d9:12:9c:9d:a9:16:cb:38:cc:2a:cf:ab:de: 87:38:29:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavT+PBHNt+pqjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk M2Y3NmZhOGMtYjBhZi00ODIwLWIxNmMtY2JhNjQ2ZThhOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8pEH4bje7rLji64UTJUaS2+iJZZVHOXTyE3 T/VECQ5ADSzXElyrGV279FKb69m5kxPF0wNIbcFmnQqQXUQIZp3fxbbLMbdBcnYf 6R72Qy0ZAMNaNXnn5AnNddpbGbQSfSye8Z80NE2/jtb/EovqoP4ek1V+A9qLRpCA XD0MmGY4ABSMD7KFzLZLghjeitBMDoNso3EnT9nnVhZo5ralcKfBZR2agxxfhIEJ iT+XuhX638YOSCCB2/OJRamVG0Tri1mik/95ip79Fh3xvZuBGbEMFcdsuWBfdIL6 xB2vszF0YL05l6EvvOD6cxJ5FT9oCa45N4ybXJi+3uM0+2NyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfff7cLtbzvzwZaX3woxXdtKizvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZThmOTU1MDItNTVmNi0z Y2ZjLWE5ZmUtODdiYWEzZDk2MzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHniJlWNCNSKsTNf/yLqKycvzuO2QkdvwJfCWH8gF112fSmzOAja4+J3 a3tcE9Ckg8KIpACFp0A/cqWfiqxi25pFA1JZkU2i3wtozSFgbYLHRb9NZC7zajKY exl10100omDFDVEAtPmBf9qXYz/+uLSS1MtdlSkbdWQM1JSrbCQlcX2QaxSD2ahH NGN2skhQh8rqH+WsyM5vNCVnP+q6x1nsUT3jdplUpeTjpxl5SwWx+fUxQNqEa0l7 MajUPwkROOc1bTzoN9CfhLzHY4Q8KP5dyA1WQxqm7FqapFnES7spjs8xlV253qEf cMwNt9gI2RKcnakWyzjMKs+r3oc4KW8= -----END CERTIFICATE-----Generated at Wed Jul 2 14:37:54 2025 by rpki-client