$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/952c6c65-2162-30b3-a35a-5cf727dc5961.roa File: 952c6c65-2162-30b3-a35a-5cf727dc5961.roa (raw, json) Hash identifier: jGacxJsdlO04kLv24fiFaO10pcUh3f9qgOwyNn3FhbY= Subject key identifier: AB:22:D5:85:50:E3:B5:9A:9B:1A:80:54:79:24:28:A7:C2:18:06:C4 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584A506AEDA97D1DBE1BA15FD800 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/952c6c65-2162-30b3-a35a-5cf727dc5961.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 23473 IP address blocks: 216.171.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:ed:a9:7d:1d:be:1b:a1:5f:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=6def102f-441a-487c-96b0-ce5155665c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:1e:31:72:da:6f:80:b4:ea:58:af:78:c5: d8:8f:bf:02:46:e1:f5:6b:e1:41:b9:ca:6b:91:8a: 4c:73:7f:d5:d0:2c:94:1a:3e:77:4b:1f:36:f2:dd: f2:8a:33:2c:94:91:16:df:fc:37:c4:1d:eb:99:ff: 41:bd:35:21:fb:9d:8c:0a:ef:0d:dd:65:4c:f4:8b: 9e:df:52:67:fe:45:b7:40:15:35:5c:78:ff:b3:7e: 8d:ee:e0:31:69:31:e5:1e:d0:00:06:e1:7a:ee:cf: 57:75:9c:5c:d8:ae:1b:c1:9d:a8:c1:37:67:6c:26: 56:ce:36:f9:0a:02:a7:78:b0:58:07:7f:9d:93:98: 33:fa:c2:21:d7:b1:33:76:36:76:c0:01:58:7c:65: b4:1d:31:49:31:a6:89:64:03:ac:e2:4e:34:99:68: b5:6c:f5:de:79:95:dd:be:7c:6e:7b:e9:4e:4c:b4: 21:15:a2:e1:46:fe:c7:d0:ee:22:f7:22:52:a0:a3: 93:f8:48:57:f4:16:fd:aa:17:a3:b1:28:f9:b0:2a: 76:9c:c7:10:ea:e5:ae:bf:1f:52:1a:4a:fe:34:8e: 02:b5:14:c7:00:7d:ec:4a:98:2b:32:58:75:d9:e5: 49:5b:c3:34:7e:89:4c:af:1f:9f:2f:16:4b:70:73: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:D5:85:50:E3:B5:9A:9B:1A:80:54:79:24:28:A7:C2:18:06:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/952c6c65-2162-30b3-a35a-5cf727dc5961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:63:6c:37:c5:3f:d3:8b:72:9b:1e:55:24:a0:26:ea:e7:59: da:bf:4a:40:29:f3:98:73:52:a6:87:41:72:2d:47:dc:93:e6: b9:75:26:da:d3:2b:0c:47:58:ef:b7:57:f7:04:bc:bc:77:ef: ee:7b:b0:11:9b:01:69:48:64:89:e8:d2:3d:44:99:97:42:22: 98:ea:a6:3e:e5:cc:91:3e:0f:f7:eb:a8:96:05:e0:a3:00:d9: 1f:53:8e:28:ef:49:2d:d4:1e:5f:93:d8:18:41:b0:93:76:e0: 9e:e4:b7:d4:d2:a4:a1:42:f8:ea:e9:dc:47:f9:95:24:fe:6b: b2:f4:53:7d:cb:3a:14:f2:b4:24:c8:a6:ef:5d:03:28:54:d0: c7:50:7b:6b:1f:b2:9e:6b:ea:ce:c5:52:91:1c:f7:03:08:81: 7e:cd:eb:3e:f3:87:69:05:cf:36:78:df:95:46:92:d4:60:b1: 0e:24:0e:fb:88:68:9a:cf:dc:d3:ed:34:21:75:3e:cf:d5:28: 2d:17:f2:f9:09:2b:94:d4:b0:aa:8a:8d:0a:f5:8d:64:24:71: d5:2f:13:0b:6e:aa:82:1f:0c:60:c0:b9:e2:e4:3b:17:28:9d: ec:ec:d6:8e:5e:e3:67:be:ac:e6:98:60:27:98:45:88:ea:76: 1b:1c:51:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQau2pfR2+G6Ff2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk NmRlZjEwMmYtNDQxYS00ODdjLTk2YjAtY2U1MTU1NjY1YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzYeMXLab4C06liveMXYj78CRuH1a+FBucpr kYpMc3/V0CyUGj53Sx828t3yijMslJEW3/w3xB3rmf9BvTUh+52MCu8N3WVM9Iue 31Jn/kW3QBU1XHj/s36N7uAxaTHlHtAABuF67s9XdZxc2K4bwZ2owTdnbCZWzjb5 CgKneLBYB3+dk5gz+sIh17EzdjZ2wAFYfGW0HTFJMaaJZAOs4k40mWi1bPXeeZXd vnxue+lOTLQhFaLhRv7H0O4i9yJSoKOT+EhX9Bb9qhejsSj5sCp2nMcQ6uWuvx9S Gkr+NI4CtRTHAH3sSpgrMlh12eVJW8M0folMrx+fLxZLcHM0yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsi1YVQ47WamxqAVHkkKKfCGAbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTUyYzZjNjUtMjE2Mi0z MGIzLWEzNWEtNWNmNzI3ZGM1OTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFljbDfFP9OLcpseVSSgJurnWdq/SkAp85hzUqaHQXItR9yT5rl1JtrT KwxHWO+3V/cEvLx37+57sBGbAWlIZIno0j1EmZdCIpjqpj7lzJE+D/frqJYF4KMA 2R9TjijvSS3UHl+T2BhBsJN24J7kt9TSpKFC+Orp3Ef5lST+a7L0U33LOhTytCTI pu9dAyhU0MdQe2sfsp5r6s7FUpEc9wMIgX7N6z7zh2kFzzZ435VGktRgsQ4kDvuI aJrP3NPtNCF1Ps/VKC0X8vkJK5TUsKqKjQr1jWQkcdUvEwtuqoIfDGDAueLkOxco nezs1o5e42e+rOaYYCeYRYjqdhscUXw= -----END CERTIFICATE-----Generated at Tue Jul 1 13:54:53 2025 by rpki-client