$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa File: 7617a713-113a-32ec-a9f3-7445af2d9726.roa (raw, json) Hash identifier: acM/WIQZBAU20EpZfMKq7hbQo60h9Fdlr6tvLPpa4bA= Subject key identifier: 06:9E:B4:B8:6B:63:FB:79:CF:1A:76:70:F6:A2:FD:5E:F8:BA:77:01 Certificate issuer: /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Certificate serial: 010D0C9F4328584A5A30766284C00D5E1B862000 Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 6079 IP address blocks: 167.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:76:62:84:c0:0d:5e:1b:86:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=0bff00a8-bcca-4e85-b980-a9d1699eb443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ac:4c:a3:90:5a:70:c5:87:43:a6:b7:be:64: 9f:ee:b3:94:78:49:df:e6:fb:f4:af:49:ec:51:f3: 07:f2:f4:76:7b:a8:d8:03:f5:9c:cd:85:c8:be:a4: a6:00:12:29:14:74:fd:14:fb:3f:19:94:81:a3:ac: 66:4c:73:25:18:c5:64:06:fa:f5:3d:92:60:90:f9: 37:8e:51:d1:f0:30:ac:b7:ac:20:ab:d8:e9:e5:53: 5c:24:b5:a0:74:f5:48:0b:c1:99:22:23:40:b2:5e: fc:5b:c9:2e:40:62:71:71:03:d4:bd:fe:f1:4e:32: f5:1e:ea:c1:7e:14:c5:d4:c4:c8:e2:c1:02:d2:63: fe:ee:6c:64:94:c7:2b:22:85:06:92:26:b2:c0:18: 7f:7f:bf:14:d1:26:14:cd:89:86:11:05:3e:b3:7d: 7b:50:ce:0e:55:e5:05:2b:c0:40:88:74:b4:69:f1: c9:52:8a:32:7b:d5:e4:32:00:63:06:61:c7:29:c2: c0:82:f0:92:22:fb:67:ac:d4:ec:da:94:45:95:00: 5c:99:66:45:a5:02:e4:00:24:0c:6a:c1:d4:7c:75: 6b:45:2b:08:f2:0e:5c:fa:82:91:ac:e8:95:b5:64: d9:6d:05:1c:1e:31:5f:07:51:bf:78:e5:92:84:13: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9E:B4:B8:6B:63:FB:79:CF:1A:76:70:F6:A2:FD:5E:F8:BA:77:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl X509v3 Authority Key Identifier: keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4f:a9:90:8e:cc:f6:71:7c:a9:20:12:9f:26:3a:58:1e:22: df:5c:78:83:ec:1e:40:8f:30:fa:b3:0a:7f:5b:03:95:0c:82: 3a:45:c3:68:7a:74:50:82:76:b9:1d:f9:75:88:dd:7f:64:02: 02:58:ae:c0:b2:95:1d:7b:67:22:0d:f7:9e:b1:15:1e:5c:a9: 28:c3:6c:5b:88:5c:ca:5d:a7:dd:d9:ee:e3:0e:bc:b7:e7:35: ab:36:33:45:91:12:f7:9e:5e:9c:ff:1b:c6:e8:0a:00:9d:a1: 4c:f4:4f:66:18:05:54:91:4b:55:8e:d0:cb:7a:62:78:78:7a: 0b:08:af:29:0d:7c:e1:d2:ef:28:e4:3b:43:6d:7f:b4:c9:fb: be:0b:6c:07:5d:ae:c9:a3:c6:f3:65:e8:64:93:91:90:9f:c2: 8b:c6:24:53:7d:54:59:21:b6:9d:b0:23:b5:f7:5d:ba:0c:07: 6f:82:b6:cb:77:83:9c:8f:7f:4e:4f:6e:19:6d:0d:bf:0a:a9: fb:c8:f4:a0:e4:6e:7c:d5:b7:f3:f9:f7:da:37:1c:4d:fb:69: 3f:e2:10:51:e9:05:9e:87:cb:4e:e9:6e:bc:fb:ab:fd:cd:2d: 65:5c:7c:34:f8:66:cf:bd:64:54:b6:d9:80:9b:47:c0:8c:19: 55:ea:d7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHZihMANXhuGIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl ODRhMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk MGJmZjAwYTgtYmNjYS00ZTg1LWI5ODAtYTlkMTY5OWViNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaxMo5BacMWHQ6a3vmSf7rOUeEnf5vv0r0ns UfMH8vR2e6jYA/WczYXIvqSmABIpFHT9FPs/GZSBo6xmTHMlGMVkBvr1PZJgkPk3 jlHR8DCst6wgq9jp5VNcJLWgdPVIC8GZIiNAsl78W8kuQGJxcQPUvf7xTjL1HurB fhTF1MTI4sEC0mP+7mxklMcrIoUGkiaywBh/f78U0SYUzYmGEQU+s317UM4OVeUF K8BAiHS0afHJUooye9XkMgBjBmHHKcLAgvCSIvtnrNTs2pRFlQBcmWZFpQLkACQM asHUfHVrRSsI8g5c+oKRrOiVtWTZbQUcHjFfB1G/eOWShBNbPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaetLhrY/t5zxp2cPai/V74uncBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvNzYxN2E3MTMtMTEzYS0z MmVjLWE5ZjMtNzQ0NWFmMmQ5NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4 ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhPqZCOzPZxfKkgEp8mOlgeIt9ceIPsHkCPMPqzCn9bA5UMgjpFw2h6 dFCCdrkd+XWI3X9kAgJYrsCylR17ZyIN956xFR5cqSjDbFuIXMpdp93Z7uMOvLfn Nas2M0WREveeXpz/G8boCgCdoUz0T2YYBVSRS1WO0Mt6Ynh4egsIrykNfOHS7yjk O0Ntf7TJ+74LbAddrsmjxvNl6GSTkZCfwovGJFN9VFkhtp2wI7X3XboMB2+Ctst3 g5yPf05PbhltDb8KqfvI9KDkbnzVt/P599o3HE37aT/iEFHpBZ6Hy07pbrz7q/3N LWVcfDT4Zs+9ZFS22YCbR8CMGVXq1+M= -----END CERTIFICATE-----Generated at Sun Jun 29 18:00:47 2025 by rpki-client