$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa File: a17da1ac-b6ea-38cc-babe-f45e1268382c.roa (raw, json) Hash identifier: U87XirrVMknbGJ8EVUpH27nDG7j8pI7H4VPoCuEAboA= Subject key identifier: D1:89:82:D9:EC:63:6C:31:E5:B5:6F:7A:43:80:8C:B8:2D:F0:31:71 Certificate issuer: /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Certificate serial: 010D0C9F4328584A58CB08A483CD79E58B46F540 Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 20220 IP address blocks: 158.51.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:08:a4:83:cd:79:e5:8b:46:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=ee2e117b-7223-4516-a797-02f2d1bdb1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:33:28:23:5d:2e:5c:49:9e:7d:e3:65:bd: 2c:27:95:52:2e:7b:47:23:31:1c:1f:b7:2a:c3:29: bd:67:d3:f2:6f:45:37:85:08:87:e1:b1:49:9d:2d: 5f:be:b8:48:16:0f:29:a9:a9:e8:e8:2b:93:03:c1: e7:47:60:91:d0:d7:20:a1:71:61:e1:ce:58:7c:c5: 23:c6:94:fd:90:b2:79:98:35:d9:cc:a4:dc:37:a3: 6c:a0:d1:50:d0:3e:d2:7b:b2:63:0d:14:53:c2:c6: 23:5d:16:32:eb:6e:bf:41:1b:d6:57:bb:17:25:15: f5:68:5e:e8:68:a0:54:27:7c:20:2e:a4:67:e1:fc: 49:b5:a2:7d:2f:6e:c8:4e:d7:e9:12:ef:a0:1d:29: fe:cc:28:d1:6e:f6:5e:cf:60:28:23:21:d7:72:4e: 40:c4:4d:10:a9:7a:67:2e:f5:51:e8:80:4a:71:82: f7:20:08:90:fc:e3:0f:46:49:e9:f6:3a:3b:49:c3: 20:ae:55:b5:d7:52:fb:2b:fc:0b:48:55:e7:73:63: 54:5d:c0:d9:08:78:16:f9:1f:2d:9f:27:a0:96:e8: dc:19:ab:b9:0b:1b:64:03:ec:28:c3:40:3a:ee:01: ba:1f:b2:3b:34:8f:5b:e7:e3:2c:af:63:7f:53:b6: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:89:82:D9:EC:63:6C:31:E5:B5:6F:7A:43:80:8C:B8:2D:F0:31:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl X509v3 Authority Key Identifier: keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer sbgp-ipAddrBlock: critical IPv4: 158.51.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:5c:b0:5e:fa:13:bf:00:d1:81:66:9d:c5:40:aa:93:76:e8: aa:52:ef:3f:a9:7d:e1:a2:05:1d:8c:1d:c2:df:b5:52:b0:3f: f3:8e:e9:0c:54:3e:69:30:9d:2e:9c:9f:30:e8:5c:0b:1f:61: 2b:9a:0b:bc:14:32:54:14:49:72:c0:a4:e3:9b:a7:a3:51:32: f7:62:50:ce:f9:60:38:a5:ed:c2:d0:a5:62:ae:2c:5e:f0:14: 3a:f7:e2:15:97:58:cd:97:76:01:d2:53:2a:97:7e:8c:28:4f: f3:8e:d6:ee:4b:14:e5:fe:25:dd:41:42:14:64:a3:f4:0f:fa: d0:54:d9:5b:a1:6e:90:4c:d3:88:43:8b:37:9e:17:d5:a9:2a: 71:1c:fe:06:7e:f1:e8:0b:4c:6b:86:d6:67:c9:50:90:43:de: 0c:ef:d5:d5:13:05:26:25:bb:86:2f:33:3f:dc:41:ee:09:40: cd:69:9e:b3:69:e5:86:91:18:e2:d0:a7:e3:64:03:af:c5:de: 5a:d9:f6:3f:e2:ad:a5:61:72:09:1f:1c:a0:75:9c:6a:de:b2: 24:63:18:af:ab:9b:aa:79:9f:dc:39:cb:70:ec:4a:ad:e6:52: a3:c9:e5:d5:a5:7c:3d:8d:a5:79:4b:b1:70:f2:b4:7b:cd:3f: 84:37:55:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywikg8155YtG9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U4MWVkOGMtOTI1MC00OTZiLTlmYzYtMTA3MDFiOTY3 YzViMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZWUyZTExN2ItNzIyMy00NTE2LWE3OTctMDJmMmQxYmRiMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd0zKCNdLlxJnn3jZb0sJ5VSLntHIzEcH7cq wym9Z9Pyb0U3hQiH4bFJnS1fvrhIFg8pqano6CuTA8HnR2CR0NcgoXFh4c5YfMUj xpT9kLJ5mDXZzKTcN6NsoNFQ0D7Se7JjDRRTwsYjXRYy626/QRvWV7sXJRX1aF7o aKBUJ3wgLqRn4fxJtaJ9L27ITtfpEu+gHSn+zCjRbvZez2AoIyHXck5AxE0QqXpn LvVR6IBKcYL3IAiQ/OMPRknp9jo7ScMgrlW111L7K/wLSFXnc2NUXcDZCHgW+R8t nyeglujcGau5CxtkA+wow0A67gG6H7I7NI9b5+Msr2N/U7ZRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGJgtnsY2wx5bVvekOAjLgt8DFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgx ZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcwMWI5NjdjNWIvYTE3ZGExYWMtYjZlYS0z OGNjLWJhYmUtZjQ1ZTEyNjgzODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2U4MWVkOGMtOTI1MC00OTZiLTlm YzYtMTA3MDFiOTY3YzViLzdlODFlZDhjLTkyNTAtNDk2Yi05ZmM2LTEwNzAxYjk2 N2M1Yi5jcmwwHwYDVR0jBBgwFoAUJh9ckCEXBboDp20rujcKKNISqkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgxZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcw MWI5NjdjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJcsF76E78A0YFmncVAqpN26KpS7z+pfeGiBR2MHcLftVKwP/OO6QxU PmkwnS6cnzDoXAsfYSuaC7wUMlQUSXLApOObp6NRMvdiUM75YDil7cLQpWKuLF7w FDr34hWXWM2XdgHSUyqXfowoT/OO1u5LFOX+Jd1BQhRko/QP+tBU2VuhbpBM04hD izeeF9WpKnEc/gZ+8egLTGuG1mfJUJBD3gzv1dUTBSYlu4YvMz/cQe4JQM1pnrNp 5YaRGOLQp+NkA6/F3lrZ9j/iraVhcgkfHKB1nGresiRjGK+rm6p5n9w5y3DsSq3m UqPJ5dWlfD2NpXlLsXDytHvNP4Q3Vaw= -----END CERTIFICATE-----Generated at Mon Jun 30 13:28:10 2025 by rpki-client