$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa File: 77ff4321-a6aa-3770-a76f-656f4a193421.roa (raw, json) Hash identifier: lEPynTrSV4R7etN9eQMeQygAZC+iTxtz7nUiO5ynhsU= Subject key identifier: 00:A1:29:E7:CA:FF:B0:8E:41:4A:E1:6D:A7:C9:64:10:3C:CD:7F:FF Certificate issuer: /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37 Certificate serial: 010D0C9F4328584A374AD2C9BC487A84493C1B90 Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 6939 IP address blocks: 173.249.160.0/22 maxlen: 24 2602:fb15::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d2:c9:bc:48:7a:84:49:3c:1b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=f9bed200-5ff6-458a-ab88-17c6cc5d39e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:f6:78:94:76:90:fb:d3:85:7d:69:fd:09: 55:3f:6a:a0:77:9b:d9:f5:6c:96:1d:51:d6:80:5f: 16:4b:b7:93:44:69:9d:5a:f3:f6:b9:0f:1c:41:d3: cc:52:f7:ed:fe:07:4e:e7:7e:22:24:b9:76:fa:31: 75:f4:70:57:d1:71:e0:1b:d6:dd:8d:22:a1:ee:fe: 23:0f:e7:8e:0d:17:98:20:a3:21:3f:01:02:1b:9d: d5:c6:36:9c:00:8d:06:f9:a1:3c:d5:ec:6a:d1:b0: 5e:77:f8:6a:94:38:cf:59:e5:ae:56:61:9c:e4:d0: 5c:f3:48:17:10:da:a3:df:ac:5b:48:f0:1b:e7:c0: a7:96:88:e5:36:0b:81:31:df:7c:48:99:9b:ac:70: 10:1a:53:bc:b0:2e:70:a7:2d:cb:a0:1d:8f:0f:32: 4a:62:f4:d8:fd:eb:94:d8:b2:14:f7:c7:bc:ed:a0: 90:cd:11:39:13:18:8a:37:90:56:76:ba:72:93:f6: 67:69:20:36:b7:3f:85:a2:75:1d:95:de:da:71:e4: 97:6f:b0:65:2d:2c:a4:ad:ad:cc:f9:de:ce:47:a2: d7:26:fa:d5:88:20:3e:e4:49:5b:2c:2b:e4:35:ee: f8:a9:76:e7:3e:9b:b2:e8:5a:48:7a:ed:bf:b8:54: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A1:29:E7:CA:FF:B0:8E:41:4A:E1:6D:A7:C9:64:10:3C:CD:7F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl X509v3 Authority Key Identifier: keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer sbgp-ipAddrBlock: critical IPv4: 173.249.160.0/22 IPv6: 2602:fb15::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ab:c4:76:13:dc:9c:08:93:91:62:9d:23:3b:e0:3d:2c:14: 17:3b:2b:38:20:90:93:0b:4d:04:f3:66:1f:f2:d1:d4:10:d8: 1a:b4:e1:75:24:b0:50:a6:0b:53:fb:59:45:58:f7:97:47:57: 73:e3:90:f6:1b:4c:38:33:d1:b0:c8:53:54:7a:22:cd:b7:3f: 2d:f8:82:f3:25:53:44:79:eb:98:8d:16:00:f6:38:4b:c2:e6: cc:6a:6e:1f:46:1e:f2:7b:af:e5:c4:b0:cc:f3:e3:af:01:6c: d1:ab:3e:ae:47:27:ea:99:75:c6:1d:ab:21:97:cf:74:f5:c4: ae:5c:30:b1:c3:40:ea:12:4d:15:0b:cb:0c:6d:4a:10:d4:f7: 96:3c:49:8c:fa:01:14:a1:fa:81:3d:18:8a:3a:45:2c:ad:f8: 35:3a:6a:fe:91:dc:4f:32:72:40:e4:ad:49:fb:00:5f:04:59: 47:b1:26:48:06:23:63:b5:e9:69:a8:c0:ee:63:44:cb:6a:97: 48:6e:0c:04:e8:39:94:b0:31:f0:fc:f1:df:01:0b:6c:4c:0f: 96:33:69:71:19:c0:76:08:ae:47:a1:2d:1c:f7:ef:88:6e:2a: 65:ce:2a:ca:44:9a:c1:83:ab:c5:2d:e6:90:d3:c7:74:5a:3a: 0c:87:13:64 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEo3StLJvEh6hEk8G5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE2YjlhZmItOWU0Ni00YWIwLTgwMjktN2Y0ZDExNjhi YjM3MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZjliZWQyMDAtNWZmNi00NThhLWFiODgtMTdjNmNjNWQzOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMD2eJR2kPvThX1p/QlVP2qgd5vZ9WyWHVHW gF8WS7eTRGmdWvP2uQ8cQdPMUvft/gdO534iJLl2+jF19HBX0XHgG9bdjSKh7v4j D+eODReYIKMhPwECG53VxjacAI0G+aE81exq0bBed/hqlDjPWeWuVmGc5NBc80gX ENqj36xbSPAb58CnlojlNguBMd98SJmbrHAQGlO8sC5wpy3LoB2PDzJKYvTY/euU 2LIU98e87aCQzRE5ExiKN5BWdrpyk/ZnaSA2tz+FonUdld7aceSXb7BlLSykra3M +d7OR6LXJvrViCA+5ElbLCvkNe74qXbnPpuy6FpIeu2/uFS0JwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAChKefK/7COQUrhbafJZBA8zX//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MTZi OWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRkMTE2OGJiMzcvNzdmZjQzMjEtYTZhYS0z NzcwLWE3NmYtNjU2ZjRhMTkzNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTE2YjlhZmItOWU0Ni00YWIwLTgw MjktN2Y0ZDExNjhiYjM3LzkxNmI5YWZiLTllNDYtNGFiMC04MDI5LTdmNGQxMTY4 YmIzNy5jcmwwHwYDVR0jBBgwFoAUo2/sfo22meVwUQcAlWiGLWoQLcowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85MTZiOWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRk MTE2OGJiMzcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCrfmgMA4E AgACMAgDBgQmAvsVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3q8R2E9ycCJORYp0jO+A9LBQXOys4IJCT C00E82Yf8tHUENgatOF1JLBQpgtT+1lFWPeXR1dz45D2G0w4M9GwyFNUeiLNtz8t +ILzJVNEeeuYjRYA9jhLwubMam4fRh7ye6/lxLDM8+OvAWzRqz6uRyfqmXXGHash l8909cSuXDCxw0DqEk0VC8sMbUoQ1PeWPEmM+gEUofqBPRiKOkUsrfg1Omr+kdxP MnJA5K1J+wBfBFlHsSZIBiNjtelpqMDuY0TLapdIbgwE6DmUsDHw/PHfAQtsTA+W M2lxGcB2CK5HoS0c9++IbiplzirKRJrBg6vFLeaQ08d0WjoMhxNk -----END CERTIFICATE-----Generated at Sun Jun 29 14:29:43 2025 by rpki-client