$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa File: bef278fc-8194-3501-832d-baa7c8240251.roa (raw, json) Hash identifier: 68iDNxXrOgxp2X1FB2VPjLsopYQksjBoK89mabUy+Ro= Subject key identifier: 2E:50:59:62:9D:4B:88:F0:3E:67:CF:DA:3F:18:19:B2:F2:90:F7:FB Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584A5765D3524BDA5EC7ED540880 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 399244 IP address blocks: 170.205.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d3:52:4b:da:5e:c7:ed:54:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=31330d23-6406-43d7-926e-8151a555113a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ca:1c:f4:3d:b1:1a:57:14:55:35:c4:24:a5: 7b:c6:73:09:8d:bb:15:bb:65:85:f7:59:04:47:52: 8b:3a:21:c4:e5:29:97:f6:87:a1:c1:45:b1:b6:9d: 2a:ff:91:38:1a:2b:76:7c:9b:98:0e:4f:bf:92:0b: 2a:d1:f7:6e:b7:79:f3:76:e4:91:02:89:49:78:2a: 7e:10:ff:d6:de:9b:6b:b5:11:f5:8f:e9:51:09:71: e5:72:b1:0d:d6:21:10:a0:ea:ee:f8:73:9d:e2:83: 55:b7:c3:53:36:56:47:9d:c9:64:0b:f5:50:c0:22: ca:53:03:e5:22:72:70:ad:fa:91:15:57:d9:b9:dc: ad:db:16:35:5e:c8:65:8b:83:44:cd:b7:2f:33:64: 42:94:f3:a0:56:8c:c4:ef:fa:82:4a:47:ba:a9:8b: 7a:33:ca:c7:12:46:30:a4:b3:a3:0e:45:cd:cc:05: 4f:2d:c8:e8:68:ac:53:21:ef:d5:43:b3:6f:2a:78: cf:4e:5f:73:b0:93:17:08:ab:46:f4:91:a4:48:65: 8f:71:92:1a:04:a6:b9:02:7c:cd:ac:dd:72:ff:2d: a7:4f:90:2b:f4:75:08:ae:ac:86:0b:90:40:12:f1: 99:ff:97:50:b7:89:aa:c0:cf:96:0e:3e:35:3e:a8: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:50:59:62:9D:4B:88:F0:3E:67:CF:DA:3F:18:19:B2:F2:90:F7:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 170.205.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0e:32:c0:64:4b:c5:3f:e6:be:a0:d8:22:ac:f0:5d:53:e0: 17:12:d9:1e:b2:a8:99:cc:d1:a6:40:bd:2e:be:6c:8e:0e:28: d9:13:d5:1d:46:91:0e:73:e7:da:20:91:00:4b:dc:0f:3f:0a: ed:d0:43:05:47:22:6f:68:4c:1f:0f:7d:8c:9a:da:cd:99:98: f1:3f:3d:fe:26:86:d9:77:ff:14:eb:de:36:88:7e:a8:9c:a4: bb:35:ca:f2:b8:12:d5:05:0a:ae:a3:fe:9a:f1:b8:df:2c:de: d1:a2:76:ff:a9:f1:05:91:28:87:6e:1e:c2:ab:df:c5:42:ee: 8e:8f:34:a0:41:22:fd:be:83:a6:f8:8c:78:b3:4a:58:b8:e3: 4f:31:e5:0a:be:5d:4e:6e:be:b9:3d:07:e6:9e:85:74:c2:09: 88:f7:90:69:7d:b8:53:67:f0:ea:71:a0:27:6a:81:c0:58:aa: ba:d0:61:8e:d9:f5:a1:71:09:64:ae:20:b7:0d:79:d3:cc:33: 3c:d1:4d:6f:f0:df:9e:d7:f3:85:a1:3b:c2:d1:12:bb:74:27: bd:76:de:29:f9:d9:d2:86:f5:ce:79:52:36:72:c3:58:24:fe: 71:1b:55:ab:09:37:3d:9a:f3:67:5d:a1:84:d6:51:3d:68:d4: e6:ce:43:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdNSS9pex+1UCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MzEzMzBkMjMtNjQwNi00M2Q3LTkyNmUtODE1MWE1NTUxMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksoc9D2xGlcUVTXEJKV7xnMJjbsVu2WF91kE R1KLOiHE5SmX9oehwUWxtp0q/5E4Git2fJuYDk+/kgsq0fdut3nzduSRAolJeCp+ EP/W3ptrtRH1j+lRCXHlcrEN1iEQoOru+HOd4oNVt8NTNlZHnclkC/VQwCLKUwPl InJwrfqRFVfZudyt2xY1Xshli4NEzbcvM2RClPOgVozE7/qCSke6qYt6M8rHEkYw pLOjDkXNzAVPLcjoaKxTIe/VQ7NvKnjPTl9zsJMXCKtG9JGkSGWPcZIaBKa5AnzN rN1y/y2nT5Ar9HUIrqyGC5BAEvGZ/5dQt4mqwM+WDj41PqjBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5QWWKdS4jwPmfP2j8YGbLykPf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYmVmMjc4ZmMtODE5NC0z NTAxLTgzMmQtYmFhN2M4MjQwMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEOMsBkS8U/5r6g2CKs8F1T4BcS2R6yqJnM0aZAvS6+bI4OKNkT1R1G kQ5z59ogkQBL3A8/Cu3QQwVHIm9oTB8PfYya2s2ZmPE/Pf4mhtl3/xTr3jaIfqic pLs1yvK4EtUFCq6j/prxuN8s3tGidv+p8QWRKIduHsKr38VC7o6PNKBBIv2+g6b4 jHizSli4408x5Qq+XU5uvrk9B+aehXTCCYj3kGl9uFNn8OpxoCdqgcBYqrrQYY7Z 9aFxCWSuILcNedPMMzzRTW/w357X84WhO8LRErt0J7123in52dKG9c55UjZyw1gk /nEbVasJNz2a82ddoYTWUT1o1ObOQ1g= -----END CERTIFICATE-----Generated at Tue Jul 1 17:42:36 2025 by rpki-client