$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa File: 55304d86-38bb-30a6-9c19-973accc138e1.roa (raw, json) Hash identifier: AuihcmIj6ym1c1q7vwlwb+ZMUaX0JDtMQjKxzGpIsSs= Subject key identifier: 8C:2D:BF:0F:6D:7F:D7:E7:1D:45:5E:6D:00:8B:D0:3C:EF:A3:85:7A Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584A3B7AF619E5882082C4094AC0 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 396982 IP address blocks: 208.94.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f6:19:e5:88:20:82:c4:09:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=c4f776db-dbaa-43af-92e8-a97a4ddb03a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:74:4e:9d:73:f8:fd:8c:54:37:02:f8:9c: 8e:3d:d8:69:1c:d8:8c:06:06:e6:86:57:90:c9:37: 65:bf:68:7b:72:a9:fa:51:29:e2:24:df:f6:f8:36: be:39:72:aa:1a:2e:55:03:b2:44:57:7d:b8:01:6f: e7:09:69:ed:78:31:17:6d:b9:1a:9f:7e:91:73:42: f5:39:07:67:15:3a:d0:0f:2d:46:b3:93:64:bc:90: 8f:57:b9:60:43:33:df:00:4b:a8:a8:ec:d2:75:14: 24:aa:f3:88:50:8f:60:d9:79:4a:6a:ea:13:b1:f5: 16:1d:88:55:73:c1:ff:d9:2e:a0:ed:8d:d2:f6:1d: fd:f6:32:03:06:b8:27:e6:4c:98:7f:67:cc:f7:2e: ea:52:60:80:38:20:1f:09:89:59:2b:fd:4b:22:ba: 82:39:6e:d3:5b:db:41:26:b2:73:71:df:a0:22:52: 75:82:7f:5c:ea:2d:ec:b6:1e:bc:0f:00:69:c0:0f: ae:25:30:73:c4:f1:ec:67:01:23:2b:c4:47:e8:c8: 42:d4:42:e8:1d:58:c9:eb:50:46:9f:f1:3e:25:91: c9:95:10:05:7e:73:fa:31:70:d5:96:37:06:55:64: 59:c3:3d:1d:0a:38:f8:62:e3:80:ce:e9:ff:13:8c: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2D:BF:0F:6D:7F:D7:E7:1D:45:5E:6D:00:8B:D0:3C:EF:A3:85:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8d:8f:56:4d:a2:d8:88:e4:b3:31:3e:ae:65:3d:22:ab:8e: c5:2f:1e:b3:26:cd:a2:2c:86:80:39:62:47:b5:7e:c6:33:1a: cb:97:3b:ed:0c:63:ac:4e:c9:76:b3:3f:39:8c:3a:c9:95:aa: b3:7f:e8:f8:ca:c0:bc:91:e0:50:fb:de:71:68:34:48:87:84: d5:1f:83:5b:65:a3:ab:82:e6:99:a2:86:11:c2:96:86:ea:87: 30:10:03:fb:56:13:84:e3:fc:64:a7:bc:7d:e1:a5:67:9a:f2: 49:a6:50:4d:22:58:1b:08:f2:b7:a2:b8:f0:8b:73:47:32:7b: 99:e8:71:93:6c:66:a1:ca:dc:7f:7b:71:67:25:f6:bd:e6:a5: a3:33:6f:9b:90:a4:17:00:d5:15:56:af:0f:6c:4a:59:a7:94: 93:2e:76:47:72:a6:93:af:81:de:4c:b0:5e:33:7f:49:27:35: 63:10:89:d0:58:12:07:d1:80:92:f9:cf:fb:b3:63:93:9b:1f: 44:95:f6:58:fb:01:23:6f:6f:77:28:a5:17:00:09:b1:e5:bb: 03:99:7f:8c:4f:af:de:6d:3d:72:ba:7b:fa:a3:1c:45:ae:fb: 31:29:54:09:c9:2a:a9:f5:97:fe:8f:24:12:04:85:3f:5e:d9: 28:f9:cc:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evYZ5YgggsQJSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YzRmNzc2ZGItZGJhYS00M2FmLTkyZTgtYTk3YTRkZGIwM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYd0Tp1z+P2MVDcC+JyOPdhpHNiMBgbmhleQ yTdlv2h7cqn6USniJN/2+Da+OXKqGi5VA7JEV324AW/nCWnteDEXbbkan36Rc0L1 OQdnFTrQDy1Gs5NkvJCPV7lgQzPfAEuoqOzSdRQkqvOIUI9g2XlKauoTsfUWHYhV c8H/2S6g7Y3S9h399jIDBrgn5kyYf2fM9y7qUmCAOCAfCYlZK/1LIrqCOW7TW9tB JrJzcd+gIlJ1gn9c6i3sth68DwBpwA+uJTBzxPHsZwEjK8RH6MhC1ELoHVjJ61BG n/E+JZHJlRAFfnP6MXDVljcGVWRZwz0dCjj4YuOAzun/E4yqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwtvw9tf9fnHUVebQCL0Dzvo4V6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvNTUzMDRkODYtMzhiYi0z MGE2LTljMTktOTczYWNjYzEzOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Nj1ZNotiI5LMxPq5lPSKrjsUvHrMmzaIshoA5Yke1fsYzGsuXO+0M Y6xOyXazPzmMOsmVqrN/6PjKwLyR4FD73nFoNEiHhNUfg1tlo6uC5pmihhHClobq hzAQA/tWE4Tj/GSnvH3hpWea8kmmUE0iWBsI8reiuPCLc0cye5nocZNsZqHK3H97 cWcl9r3mpaMzb5uQpBcA1RVWrw9sSlmnlJMudkdyppOvgd5MsF4zf0knNWMQidBY EgfRgJL5z/uzY5ObH0SV9lj7ASNvb3copRcACbHluwOZf4xPr95tPXK6e/qjHEWu +zEpVAnJKqn1l/6PJBIEhT9e2Sj5zK8= -----END CERTIFICATE-----Generated at Wed Jul 2 00:50:22 2025 by rpki-client