$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa File: 5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa (raw, json) Hash identifier: fBOo2Cz7nxAvQlB+DS0kVdjGyJoDlLJArb1nPRj7ycE= Subject key identifier: 97:F6:9E:D1:26:2E:A9:27:C1:3A:FC:62:7E:4C:6B:EE:98:4B:DD:98 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584A374AD588E27592A7275C5680 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 23473 IP address blocks: 216.171.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d5:88:e2:75:92:a7:27:5c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=a9f915bd-3b5f-41d8-ade8-b16a2987f59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:63:4c:a3:c7:38:66:46:44:5d:b3:1b:87: a4:4f:07:8e:cb:12:5f:7e:30:f7:72:7e:2e:04:f5: 16:31:c2:66:6b:61:0d:25:74:1b:c0:fb:f2:98:0f: 1b:10:56:0e:0f:33:66:3c:22:bd:53:65:6c:66:72: 33:f1:a0:d2:43:c6:23:fe:61:64:f4:41:df:fb:c7: 7a:23:1d:7d:b0:5e:82:9c:43:4d:8a:3d:bb:0c:92: d7:15:25:92:58:f7:4a:0a:4b:92:01:be:f0:d1:4d: ee:69:de:3c:48:cb:65:06:f5:ea:13:63:d4:5e:51: 58:9b:99:53:f6:81:17:1a:2d:75:51:d8:81:e0:48: a2:58:ed:50:9f:d3:1e:d4:46:c7:2d:5a:b4:b1:bb: 3c:3e:07:56:15:26:d8:bf:4a:3c:4b:1d:39:d2:e8: e7:e5:9c:40:26:bc:71:5f:83:af:21:f3:10:b3:5a: dc:f7:77:aa:7b:7a:5b:f6:22:4d:5d:e3:ef:e0:fa: 08:03:b2:76:b8:4a:61:14:61:7f:a3:55:5c:c8:4e: 17:26:aa:4c:02:dc:95:84:42:93:4a:07:c1:e2:98: 1d:72:f7:ec:d1:ca:b2:d9:4a:c4:b6:38:83:de:54: 1b:aa:c5:62:34:8c:3e:a9:da:a5:ba:f0:7d:51:10: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:9E:D1:26:2E:A9:27:C1:3A:FC:62:7E:4C:6B:EE:98:4B:DD:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e1:12:42:c2:7c:3f:d9:d9:d5:f7:21:03:29:70:f1:1b:df: 2e:a5:06:cd:4c:77:3f:54:fa:41:0f:e0:fd:c6:b8:50:97:47: cd:0e:41:c9:6f:81:05:e9:46:75:46:c5:d3:8b:1d:f9:50:78: 25:d5:62:29:03:9e:70:9f:90:82:9d:48:4d:c8:f0:af:3b:b3: 8e:7d:ec:bf:08:84:19:38:b4:19:4c:f2:8b:96:82:5e:98:cb: 5e:58:cb:06:14:41:7c:77:6f:0f:02:ed:f5:53:c4:a5:54:b5: 18:91:be:ac:ab:0e:60:49:28:59:3e:21:c0:bc:89:24:7d:24: 7d:85:3a:62:17:0b:95:1a:66:b1:23:97:72:6c:40:ec:b0:5f: fd:d0:1e:9b:0b:50:bd:48:8a:bb:46:04:5c:d0:a5:7a:84:64: 55:a4:3b:af:91:34:64:ca:04:6f:a3:e9:63:c4:b3:47:c1:ad: 7d:9b:08:90:80:69:0b:9c:0f:f5:9c:f7:9a:03:a5:e4:69:c4: 32:8b:ae:86:ce:4e:83:ed:62:d1:f4:bd:80:6a:42:d7:ab:ff: 27:82:8b:07:3d:08:cb:11:1e:41:3e:e0:60:bf:87:b0:6f:76: c5:7a:ad:7c:d0:df:bc:84:3b:65:c2:a9:88:5b:be:45:19:91: f3:44:0d:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StWI4nWSpydcVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTlmOTE1YmQtM2I1Zi00MWQ4LWFkZTgtYjE2YTI5ODdmNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuhjTKPHOGZGRF2zG4ekTweOyxJffjD3cn4u BPUWMcJma2ENJXQbwPvymA8bEFYODzNmPCK9U2VsZnIz8aDSQ8Yj/mFk9EHf+8d6 Ix19sF6CnENNij27DJLXFSWSWPdKCkuSAb7w0U3uad48SMtlBvXqE2PUXlFYm5lT 9oEXGi11UdiB4EiiWO1Qn9Me1EbHLVq0sbs8PgdWFSbYv0o8Sx050ujn5ZxAJrxx X4OvIfMQs1rc93eqe3pb9iJNXePv4PoIA7J2uEphFGF/o1VcyE4XJqpMAtyVhEKT SgfB4pgdcvfs0cqy2UrEtjiD3lQbqsViNIw+qdqluvB9URAg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf2ntEmLqknwTr8Yn5Ma+6YS92YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWU0MjQ3ZTEtMjllZC0z YWI0LTg0NTYtMWJjNTIxYTBkMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3hEkLCfD/Z2dX3IQMpcPEb3y6lBs1Mdz9U+kEP4P3GuFCXR80OQclv gQXpRnVGxdOLHflQeCXVYikDnnCfkIKdSE3I8K87s4597L8IhBk4tBlM8ouWgl6Y y15YywYUQXx3bw8C7fVTxKVUtRiRvqyrDmBJKFk+IcC8iSR9JH2FOmIXC5UaZrEj l3JsQOywX/3QHpsLUL1IirtGBFzQpXqEZFWkO6+RNGTKBG+j6WPEs0fBrX2bCJCA aQucD/Wc95oDpeRpxDKLrobOToPtYtH0vYBqQter/yeCiwc9CMsRHkE+4GC/h7Bv dsV6rXzQ37yEO2XCqYhbvkUZkfNEDUI= -----END CERTIFICATE-----Generated at Mon Jun 30 17:17:49 2025 by rpki-client