$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa File: 791de0f2-89d2-3bf0-8407-e85b17cab367.roa (raw, json) Hash identifier: GEY/b4f88vu5jR7E/VNp23OvjxzOU9h9ZzeHWCCTlyo= Subject key identifier: BA:ED:A1:68:07:8F:66:80:9A:B6:B4:F5:E1:90:92:3C:DA:F7:59:D3 Certificate issuer: /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Certificate serial: 010D0C9F4328584A03A544A3AB8CE9822E7EAF00 Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16545 IP address blocks: 192.74.220.0/22 maxlen: 24 2602:ff80::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:44:a3:ab:8c:e9:82:2e:7e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=25ebacfa-5a17-4704-832a-a52556dd9b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:c2:1b:ea:4c:66:ee:44:50:3b:39:d0:14: 83:2d:9a:a0:4a:0e:a3:39:03:6e:50:0e:e8:1b:3f: 2e:46:62:1b:53:59:56:04:a3:7a:fd:74:25:b6:b6: 95:6d:45:f8:2c:b2:74:44:b4:99:9b:c1:97:1f:01: 00:f8:91:2f:6b:ec:7c:f4:0b:24:cc:23:15:67:56: f7:79:cf:09:ab:0e:09:8e:e6:05:4f:d8:67:98:0a: e6:8d:80:83:95:9d:4d:65:1d:0d:5f:fe:48:dc:eb: bc:83:b7:72:b9:26:e8:a0:6d:ef:fd:f8:7f:fa:fa: 13:1c:86:a7:1d:e8:4d:f6:c7:1d:4f:58:10:77:ea: 49:b1:4b:39:7f:7b:a3:8c:8b:b3:c4:ec:9a:33:21: 89:d0:06:b2:10:2a:f9:92:dc:1b:9f:71:15:d6:a8: 57:6a:18:8e:b4:8c:cd:57:fb:70:a9:27:60:ac:b4: d7:c7:f1:b9:a3:a2:39:d2:af:5f:c5:a2:f3:0d:d5: 28:98:65:f9:46:4c:34:5b:94:a8:33:26:a5:f0:fe: f1:5b:e6:51:31:06:4e:0d:8e:05:7e:2d:c5:cd:76: 95:74:c9:3f:d6:ba:37:25:39:7f:c6:b4:01:bb:f9: e4:b9:25:49:d7:2d:c0:14:27:59:8f:32:ec:aa:87: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:ED:A1:68:07:8F:66:80:9A:B6:B4:F5:E1:90:92:3C:DA:F7:59:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl X509v3 Authority Key Identifier: keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.74.220.0/22 IPv6: 2602:ff80::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6a:15:f6:33:86:3b:d3:41:03:1a:5b:38:87:e0:15:6a:60: 43:0d:9a:81:fe:4b:c8:48:50:05:b8:5a:e0:ef:4f:14:8a:4a: 16:ab:d6:97:71:c3:e0:21:35:36:21:b0:88:fc:32:e8:6e:06: d5:a6:02:bd:e4:46:86:c0:06:c1:47:06:5d:a7:b5:54:a9:33: b9:4c:ff:3b:b2:c3:67:1e:af:e0:98:db:15:9e:8e:cb:80:b8: e6:a8:1f:0b:32:0d:63:da:cc:7b:d7:a2:9b:c6:48:d3:94:24: ea:53:46:cf:96:31:18:0e:de:a3:08:be:da:0e:4e:43:fe:52: 1b:91:e5:dc:16:ba:41:26:97:f6:f4:81:63:50:83:4d:e7:25: 2b:b5:dd:ac:f2:18:80:ec:77:c0:9a:8c:59:55:6c:90:08:72: 97:83:88:c9:86:f4:86:6f:b8:4d:50:cb:b5:57:c6:7b:bf:88: 06:f1:76:1f:26:80:ce:40:8b:1c:12:0f:e6:36:39:02:d2:09: 60:bc:78:b7:0f:92:48:f7:c3:01:89:fe:1b:33:c6:5f:76:84: cc:6a:9d:25:9f:2b:78:be:58:21:4a:18:d0:d9:69:6f:db:e3: 5f:16:0e:65:19:ae:71:4b:70:de:1a:51:1c:df:53:61:f2:c6: e5:61:e4:f2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoDpUSjq4zpgi5+rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0ZjkzNTAtZmMzZC00MjM5LTgwYmYtZGIxMGQyNDYy YTRmMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MjVlYmFjZmEtNWExNy00NzA0LTgzMmEtYTUyNTU2ZGQ5YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWLCG+pMZu5EUDs50BSDLZqgSg6jOQNuUA7o Gz8uRmIbU1lWBKN6/XQltraVbUX4LLJ0RLSZm8GXHwEA+JEva+x89AskzCMVZ1b3 ec8Jqw4JjuYFT9hnmArmjYCDlZ1NZR0NX/5I3Ou8g7dyuSbooG3v/fh/+voTHIan HehN9scdT1gQd+pJsUs5f3ujjIuzxOyaMyGJ0AayECr5ktwbn3EV1qhXahiOtIzN V/twqSdgrLTXx/G5o6I50q9fxaLzDdUomGX5Rkw0W5SoMyal8P7xW+ZRMQZODY4F fi3FzXaVdMk/1ro3JTl/xrQBu/nkuSVJ1y3AFCdZjzLsqofndQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLrtoWgHj2aAmra09eGQkjza91nTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kODRm OTM1MC1mYzNkLTQyMzktODBiZi1kYjEwZDI0NjJhNGYvNzkxZGUwZjItODlkMi0z YmYwLTg0MDctZTg1YjE3Y2FiMzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDg0ZjkzNTAtZmMzZC00MjM5LTgw YmYtZGIxMGQyNDYyYTRmL2Q4NGY5MzUwLWZjM2QtNDIzOS04MGJmLWRiMTBkMjQ2 MmE0Zi5jcmwwHwYDVR0jBBgwFoAUZxr5I5VUwfZBlQs+fBHfIlookIswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kODRmOTM1MC1mYzNkLTQyMzktODBiZi1kYjEw ZDI0NjJhNGYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCwErcMA4E AgACMAgDBgQmAv+AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3ahX2M4Y700EDGls4h+AVamBDDZqB/kvI SFAFuFrg708UikoWq9aXccPgITU2IbCI/DLobgbVpgK95EaGwAbBRwZdp7VUqTO5 TP87ssNnHq/gmNsVno7LgLjmqB8LMg1j2sx716KbxkjTlCTqU0bPljEYDt6jCL7a Dk5D/lIbkeXcFrpBJpf29IFjUINN5yUrtd2s8hiA7HfAmoxZVWyQCHKXg4jJhvSG b7hNUMu1V8Z7v4gG8XYfJoDOQIscEg/mNjkC0glgvHi3D5JI98MBif4bM8ZfdoTM ap0lnyt4vlghShjQ2Wlv2+NfFg5lGa5xS3DeGlEc31Nh8sblYeTy -----END CERTIFICATE-----Generated at Tue Jul 1 19:57:56 2025 by rpki-client