$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/692ee817-17ab-3739-9d0c-1581ba0a4da5.roa File: 692ee817-17ab-3739-9d0c-1581ba0a4da5.roa (raw, json) Hash identifier: GCpzlI1D038GP/e57oGGBMKvaK7E/mEBFYPi5NXuzyQ= Subject key identifier: 17:DF:5A:EA:37:DA:12:1D:FD:72:A9:E0:8F:1E:25:82:2E:FC:67:3A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A4C3B1B6E60FA56F691BBEB80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/692ee817-17ab-3739-9d0c-1581ba0a4da5.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 15320 IP address blocks: 173.242.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1b:6e:60:fa:56:f6:91:bb:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=c695593b-1fad-4d8c-9969-0f8223da91f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8b:e9:04:4b:33:92:8d:60:d9:f2:63:62:24: 44:1c:8a:e2:b0:13:ae:1e:5f:49:cd:71:79:85:eb: db:b1:52:ea:ec:32:3b:8f:19:63:2e:46:0b:5e:76: 77:c2:f5:65:4f:09:3b:74:39:5a:10:45:54:1f:64: b8:6c:1a:33:6d:57:b8:d5:f0:af:b4:58:fb:b1:4a: 37:3e:e6:87:67:0c:ab:b1:bb:55:09:71:d2:08:9c: 6a:e7:06:82:c2:15:ba:51:6d:35:4f:af:4a:50:68: e2:65:ec:d9:f0:1a:7c:31:f9:75:71:6c:01:1b:eb: b5:54:20:56:1e:65:36:4d:50:0c:ca:4e:ad:d2:19: b9:68:ac:46:c7:19:0e:b2:22:62:d4:e0:f7:a8:ad: ad:13:57:a4:21:2f:37:e2:4b:dc:22:1f:41:00:e8: fe:2a:ae:4c:67:8a:2d:8b:cc:b6:34:67:97:af:c2: 2b:43:c2:dd:62:34:a5:0b:ea:41:e5:0b:d6:59:2d: b5:2c:f6:f6:93:11:b7:04:21:6f:87:57:75:84:15: f1:0b:64:8d:5a:4a:17:e6:87:66:c8:fb:bc:73:2d: 1b:62:00:df:0a:f0:b7:6c:57:91:81:32:c4:82:14: 65:fa:48:b7:62:4a:b1:ce:e4:8b:4d:2d:b0:97:e8: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DF:5A:EA:37:DA:12:1D:FD:72:A9:E0:8F:1E:25:82:2E:FC:67:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/692ee817-17ab-3739-9d0c-1581ba0a4da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 173.242.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4b:2a:32:36:d9:38:b1:1e:43:31:ad:fd:df:45:93:37:ac: 09:eb:94:4d:f6:20:65:2f:97:26:ba:5f:da:a2:08:00:27:0f: e5:c8:ab:84:eb:aa:fb:8b:e4:9e:7d:37:4a:cc:96:89:5a:db: ea:fc:7d:80:10:5e:2d:28:7c:08:95:cb:2e:d9:09:dc:32:28: 5d:da:08:3b:d8:84:ce:78:65:93:d2:55:be:35:a7:e3:4d:a5: cd:46:1b:46:e2:20:33:e8:29:02:d7:87:1d:fc:d9:ce:2c:65: 75:0e:6e:b1:a0:42:3e:44:6a:8e:07:b9:5e:34:fe:5b:be:5b: 28:0e:e1:13:9c:4e:2d:10:04:e8:03:9f:e0:f9:19:cf:fe:aa: 22:34:1c:d2:dd:a3:de:cb:6a:a4:04:ec:de:96:ee:d1:f6:cc: df:7b:83:1a:7c:1e:ee:4e:8e:79:ff:19:8d:fd:36:4d:cc:f1: 18:23:ce:75:b5:ed:20:3b:c2:6f:a4:01:c6:7e:73:12:27:6b: b3:c4:61:ee:5d:cc:dd:55:87:f3:eb:e9:5b:fa:91:f3:c4:38: a3:12:7d:67:ce:5d:b4:0d:c4:eb:bf:9e:cb:3c:f3:c1:d6:2e: a6:17:92:f5:c2:0b:7a:92:52:fb:22:8b:b5:01:66:8f:5f:c7: bc:22:b2:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxtuYPpW9pG764AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YzY5NTU5M2ItMWZhZC00ZDhjLTk5NjktMGY4MjIzZGE5MWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4vpBEszko1g2fJjYiREHIrisBOuHl9JzXF5 hevbsVLq7DI7jxljLkYLXnZ3wvVlTwk7dDlaEEVUH2S4bBozbVe41fCvtFj7sUo3 PuaHZwyrsbtVCXHSCJxq5waCwhW6UW01T69KUGjiZezZ8Bp8Mfl1cWwBG+u1VCBW HmU2TVAMyk6t0hm5aKxGxxkOsiJi1OD3qK2tE1ekIS834kvcIh9BAOj+Kq5MZ4ot i8y2NGeXr8IrQ8LdYjSlC+pB5QvWWS21LPb2kxG3BCFvh1d1hBXxC2SNWkoX5odm yPu8cy0bYgDfCvC3bFeRgTLEghRl+ki3YkqxzuSLTS2wl+hk4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBffWuo32hId/XKp4I8eJYIu/Gc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjkyZWU4MTctMTdhYi0z NzM5LTlkMGMtMTU4MWJhMGE0ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpLKjI22TixHkMxrf3fRZM3rAnrlE32IGUvlya6X9qiCAAnD+XIq4Tr qvuL5J59N0rMlola2+r8fYAQXi0ofAiVyy7ZCdwyKF3aCDvYhM54ZZPSVb41p+NN pc1GG0biIDPoKQLXhx382c4sZXUObrGgQj5Eao4HuV40/lu+WygO4ROcTi0QBOgD n+D5Gc/+qiI0HNLdo97LaqQE7N6W7tH2zN97gxp8Hu5Ojnn/GY39Nk3M8RgjznW1 7SA7wm+kAcZ+cxIna7PEYe5dzN1Vh/Pr6Vv6kfPEOKMSfWfOXbQNxOu/nss888HW LqYXkvXCC3qSUvsii7UBZo9fx7wisrU= -----END CERTIFICATE-----Generated at Tue Jul 1 09:21:09 2025 by rpki-client