$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa File: f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa (raw, json) Hash identifier: gTsJnoHZ3TomDEv20yYh5q3riQDoTFzGGEpYH14pgUY= Subject key identifier: 42:CA:0F:BA:CA:05:DD:31:A0:77:7F:93:1A:C1:C6:86:7E:15:36:0F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F43285849F87A7A1A8AD80654AEB3C600 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 23473 IP address blocks: 216.171.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7a:1a:8a:d8:06:54:ae:b3:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=24c016b8-962f-4ea8-8a61-157c8091b8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:da:70:38:20:17:c7:94:1a:0c:60:cf:b5: 6d:8c:0c:0b:3e:95:b1:bc:89:df:26:b3:ed:1e:37: e9:59:6d:3e:05:fe:05:ab:c2:2f:5b:ea:34:ed:1a: ed:e2:1e:27:13:20:7c:60:f5:03:11:b6:ec:49:22: 84:21:82:1f:85:86:cf:de:27:57:7c:26:be:98:c4: 84:7a:f0:df:2b:bf:7f:af:0e:9b:e9:e6:32:8a:7a: 83:85:5e:40:fb:d5:f0:59:b1:50:11:62:8d:d0:e5: a6:c0:60:71:0a:27:4a:3d:a1:a9:6f:cc:d2:36:7e: b6:c2:d6:79:e9:dd:34:7c:e7:00:e7:73:c3:f2:ee: d4:ea:a4:8a:6d:15:db:ce:67:ed:39:12:3e:7d:d0: 63:83:0e:33:93:97:c3:ab:a4:7c:3c:8d:1d:e2:60: e4:9f:a7:94:cc:54:5b:a2:1b:8a:5f:84:13:14:54: ae:fd:10:71:69:4c:b6:0c:94:bf:68:65:dd:02:61: a4:cc:8c:43:bd:41:38:6a:1c:fc:2a:1e:b5:3c:ef: 88:f5:19:99:36:15:f0:ff:54:cd:0c:f4:3c:c4:e4: 1a:96:2c:43:2a:e3:02:54:8d:02:fb:35:ee:50:12: d8:40:58:ce:87:f2:a3:c5:e5:d9:56:1d:74:d9:8d: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CA:0F:BA:CA:05:DD:31:A0:77:7F:93:1A:C1:C6:86:7E:15:36:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cb:04:01:9f:5f:25:51:2f:a3:d5:9e:d1:d1:ae:6d:bc:f7: 7b:a5:19:15:9b:2a:a6:ae:45:66:18:86:3d:b6:69:12:1a:f5: 23:b9:1e:9a:07:a8:a6:c4:13:91:ea:4f:5c:a7:7f:46:b4:8d: 02:de:ee:9c:3e:df:2b:93:85:02:31:2e:36:87:19:43:23:f0: 6c:b6:54:b2:6f:6b:6d:05:f7:71:fc:29:14:ea:5b:cf:81:c0: 01:ba:55:4e:6d:a4:e8:1e:04:b6:dd:12:d0:89:e6:ad:c7:d7: c4:15:b3:a7:53:ec:3d:6c:17:06:5b:01:13:ac:60:bd:82:9e: 24:75:94:14:e6:d0:d5:32:f6:1b:74:31:54:a3:5a:8d:8c:97: 83:40:04:e3:9f:a3:81:2d:f4:ff:20:02:eb:d3:02:2c:42:d4: 25:4f:97:16:64:52:8a:61:da:3e:17:00:9b:d4:b3:49:e6:cb: 53:7f:0d:ff:22:d1:50:23:5e:3e:a0:4b:78:22:e7:7d:2b:f9: c6:4b:94:86:c1:3f:97:9c:98:ec:65:c2:4b:d7:37:31:77:82: 13:05:01:59:02:0c:60:32:b2:9b:2e:66:bf:43:70:dc:ca:f2: c5:f6:cd:2c:b7:81:e5:99:d2:6c:64:a4:d9:87:7f:71:ea:79: b1:8e:9e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4enoaitgGVK6zxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MjRjMDE2YjgtOTYyZi00ZWE4LThhNjEtMTU3YzgwOTFiOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1afacDggF8eUGgxgz7VtjAwLPpWxvInfJrPt HjfpWW0+Bf4Fq8IvW+o07Rrt4h4nEyB8YPUDEbbsSSKEIYIfhYbP3idXfCa+mMSE evDfK79/rw6b6eYyinqDhV5A+9XwWbFQEWKN0OWmwGBxCidKPaGpb8zSNn62wtZ5 6d00fOcA53PD8u7U6qSKbRXbzmftORI+fdBjgw4zk5fDq6R8PI0d4mDkn6eUzFRb ohuKX4QTFFSu/RBxaUy2DJS/aGXdAmGkzIxDvUE4ahz8Kh61PO+I9RmZNhXw/1TN DPQ8xOQalixDKuMCVI0C+zXuUBLYQFjOh/KjxeXZVh102Y3q5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELKD7rKBd0xoHd/kxrBxoZ+FTYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjIxODk3Y2ItNDIyOC0z ODBhLThhNWQtYmJkMWIzYWY3ZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHLBAGfXyVRL6PVntHRrm2893ulGRWbKqauRWYYhj22aRIa9SO5HpoH qKbEE5HqT1ynf0a0jQLe7pw+3yuThQIxLjaHGUMj8Gy2VLJva20F93H8KRTqW8+B wAG6VU5tpOgeBLbdEtCJ5q3H18QVs6dT7D1sFwZbAROsYL2CniR1lBTm0NUy9ht0 MVSjWo2Ml4NABOOfo4Et9P8gAuvTAixC1CVPlxZkUoph2j4XAJvUs0nmy1N/Df8i 0VAjXj6gS3gi530r+cZLlIbBP5ecmOxlwkvXNzF3ghMFAVkCDGAyspsuZr9DcNzK 8sX2zSy3geWZ0mxkpNmHf3HqebGOnrY= -----END CERTIFICATE-----Generated at Tue Jul 1 00:46:32 2025 by rpki-client