$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af62b40c-2310-3ed4-a501-d77950d38537.roa File: af62b40c-2310-3ed4-a501-d77950d38537.roa (raw, json) Hash identifier: FqjBz4hwrgsdQtQybOk2EaPq4OVRQsv1oDHpRvJ3kys= Subject key identifier: C6:14:AE:C2:D0:B4:0F:A7:55:E5:65:2C:F5:6F:99:2C:5F:5D:61:A5 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584A506AEBF0C2F4ED71CAD63F80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af62b40c-2310-3ed4-a501-d77950d38537.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 23473 IP address blocks: 216.171.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:eb:f0:c2:f4:ed:71:ca:d6:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=77a5ccc6-cef2-4f93-bff3-da00892e30a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:53:1e:e0:0e:45:6b:29:f5:ef:87:db:f9: 37:c6:67:39:f9:49:c3:0c:2f:45:8a:8c:46:36:c7: 94:7f:71:a5:cb:c3:3d:ae:b5:4c:cf:c2:cd:57:01: 53:9c:f4:cd:07:c9:d5:88:f0:e7:bc:54:02:29:64: a2:ee:07:2a:a8:3a:da:ac:5f:74:d9:08:5b:12:27: 23:b8:e6:e6:7c:59:8c:2a:59:8b:13:96:93:45:1d: 76:ca:37:26:80:58:0f:da:0e:c6:c0:fe:64:9f:f5: c2:ad:23:e2:37:f9:db:a4:d8:d6:99:5f:35:60:63: 3d:2d:63:68:92:e4:66:30:37:80:f5:09:cb:bd:73: d6:49:50:1c:97:cf:2f:a6:ee:60:d0:6f:e0:59:e4: 6e:f7:44:02:73:0b:c2:85:2f:5f:8c:ed:62:7a:fd: 2b:ea:ef:a4:a2:2e:d2:04:85:46:76:90:30:6b:cb: 3a:51:5f:05:3a:c1:6f:83:78:3a:bd:4c:a0:f4:05: 99:03:7c:ac:59:50:90:4b:48:7e:b2:88:fc:23:97: de:ba:51:ef:9e:d9:b2:f4:4c:13:12:c2:20:8e:fc: e7:bd:bf:9c:67:1e:3a:38:87:1e:4d:bd:26:86:b5: 24:70:97:b0:ef:cc:3f:39:77:27:e8:a9:96:45:e8: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:14:AE:C2:D0:B4:0F:A7:55:E5:65:2C:F5:6F:99:2C:5F:5D:61:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af62b40c-2310-3ed4-a501-d77950d38537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5f:db:7a:3c:a7:c1:10:34:60:61:61:ef:9d:9b:2c:34:96: d5:7d:1a:7d:33:99:2d:7e:d1:9b:31:13:92:5f:21:23:bc:1f: 26:63:41:38:ab:ee:fd:6e:d1:d4:86:af:37:cf:16:c0:a9:d3: ad:cd:d5:70:9b:d0:bb:1d:c8:c4:4d:e7:a1:5d:46:7c:c1:4b: a3:9f:e6:46:51:d2:4a:c5:99:d2:65:6c:d7:1a:72:eb:d3:dc: 74:cf:f4:51:10:50:b1:34:4a:60:8f:59:56:d1:3e:af:c7:f3: 8b:cc:3b:38:e0:ff:35:92:c2:19:b5:1a:b5:f0:9d:f4:81:91: b3:69:dd:a5:52:75:3b:88:44:f9:e9:59:68:fc:69:f8:8a:6f: 20:72:e8:07:0d:4e:74:4b:a5:67:a4:b6:65:ce:3d:99:64:af: 8e:be:b4:2a:01:b8:53:7d:1e:16:68:f0:a6:57:9a:da:9f:ac: e9:f5:c2:6d:85:cd:e0:4f:d3:cc:7f:4a:64:1c:cd:86:aa:51: d6:3a:96:b8:06:f8:93:d1:20:6d:31:1e:81:b9:26:58:55:9c: ee:ee:25:b4:53:5b:c2:0b:ee:da:b8:08:86:8f:b0:b2:aa:c3: c6:75:7f:4c:9f:4b:17:bd:70:34:3d:52:54:1f:3a:3c:6d:76: c3:39:95:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQauvwwvTtccrWP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk NzdhNWNjYzYtY2VmMi00ZjkzLWJmZjMtZGEwMDg5MmUzMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkNTHuAORWsp9e+H2/k3xmc5+UnDDC9FioxG NseUf3Gly8M9rrVMz8LNVwFTnPTNB8nViPDnvFQCKWSi7gcqqDrarF902QhbEicj uObmfFmMKlmLE5aTRR12yjcmgFgP2g7GwP5kn/XCrSPiN/nbpNjWmV81YGM9LWNo kuRmMDeA9QnLvXPWSVAcl88vpu5g0G/gWeRu90QCcwvChS9fjO1iev0r6u+koi7S BIVGdpAwa8s6UV8FOsFvg3g6vUyg9AWZA3ysWVCQS0h+soj8I5feulHvntmy9EwT EsIgjvznvb+cZx46OIceTb0mhrUkcJew78w/OXcn6KmWReh4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYUrsLQtA+nVeVlLPVvmSxfXWGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWY2MmI0MGMtMjMxMC0z ZWQ0LWE1MDEtZDc3OTUwZDM4NTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ks7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBf23o8p8EQNGBhYe+dmyw0ltV9Gn0zmS1+0ZsxE5JfISO8HyZjQTir 7v1u0dSGrzfPFsCp063N1XCb0LsdyMRN56FdRnzBS6Of5kZR0krFmdJlbNcacuvT 3HTP9FEQULE0SmCPWVbRPq/H84vMOzjg/zWSwhm1GrXwnfSBkbNp3aVSdTuIRPnp WWj8afiKbyBy6AcNTnRLpWektmXOPZlkr46+tCoBuFN9HhZo8KZXmtqfrOn1wm2F zeBP08x/SmQczYaqUdY6lrgG+JPRIG0xHoG5JlhVnO7uJbRTW8IL7tq4CIaPsLKq w8Z1f0yfSxe9cDQ9UlQfOjxtdsM5lf8= -----END CERTIFICATE-----Generated at Mon Jun 30 14:07:40 2025 by rpki-client