$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa File: 7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa (raw, json) Hash identifier: 3qzi4Fh5mCEy1MrJ1KXLKaoDvRyO8Bwcs5135AgDltU= Subject key identifier: 90:88:C2:CF:D4:C1:4B:12:85:A4:51:EB:BC:F8:D3:14:5D:F6:C3:DA Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Certificate serial: 010D0C9F4328584A3CE020E4D50F05AAB9F9F400 Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 53454 IP address blocks: 162.248.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:20:e4:d5:0f:05:aa:b9:f9:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=584ca218-7de4-4cd8-b02b-63e961e2ae13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:84:83:03:ae:0d:47:1b:28:21:ed:7a:8e: 1a:a4:a8:a1:50:45:c0:e7:03:33:ab:30:8d:df:9c: 8b:fc:db:24:11:59:d0:74:12:24:04:ad:39:ba:d7: a1:40:78:98:8e:d8:1f:c5:62:96:90:4d:66:63:70: a5:f6:9b:3e:53:49:46:d0:d9:e4:8b:76:ce:4d:82: 8c:2a:88:79:21:9e:04:9c:9e:c6:d1:a0:8a:ec:69: 62:8b:a3:c7:09:90:86:86:a7:8d:ae:a7:c2:ae:89: 91:71:eb:0c:12:da:08:99:04:dc:58:59:69:6c:bc: 75:11:d1:f9:0b:bd:82:da:10:ea:b3:2b:09:70:c8: 90:c0:14:c6:e0:62:50:a2:d6:28:87:f3:ed:c8:3d: 02:3a:66:0d:8e:ca:87:ef:f5:8a:73:2b:38:f1:4a: 64:22:08:9e:48:3c:14:f8:8e:35:ea:34:2f:65:04: 78:d6:04:a3:6a:e0:29:78:fa:ed:2d:22:c8:9e:28: 33:95:a1:ef:4a:3a:58:00:11:e7:ff:89:f4:0b:b8: 00:f2:3f:df:13:0c:b7:f3:48:ff:46:7d:b9:58:e7: 74:9e:c1:c9:e3:c6:12:d7:14:b5:18:fd:40:38:67: 17:67:8b:7e:ba:3e:03:14:25:72:00:b1:89:39:ca: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:88:C2:CF:D4:C1:4B:12:85:A4:51:EB:BC:F8:D3:14:5D:F6:C3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl X509v3 Authority Key Identifier: keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer sbgp-ipAddrBlock: critical IPv4: 162.248.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c5:4c:88:3a:f2:80:56:80:17:cb:9d:d6:80:f9:ba:16:c8: 7e:93:73:91:21:c0:3a:a0:73:41:bc:77:cd:40:b1:f3:cc:e8: 6a:a6:5b:57:4e:75:83:6e:7e:fc:73:e9:f7:06:ce:3b:84:ac: b8:9d:79:5e:b3:4b:16:56:01:f8:24:c6:3e:3a:64:2d:b8:15: 41:ce:78:03:fd:b5:93:e2:34:c5:f1:b1:7b:3f:dc:84:52:0c: c7:2a:d1:2e:37:46:7b:a2:8c:c9:b9:9f:74:3e:d7:4c:63:c5: 16:b2:1d:5f:65:33:09:ee:1b:e9:c8:69:80:db:35:79:97:f8: 61:bf:24:c0:99:94:28:39:eb:78:e4:6e:b4:d4:59:79:60:ed: 19:6a:19:53:a5:f6:98:f2:5e:cc:ef:f2:31:da:05:e1:97:4c: de:04:38:40:75:53:fa:67:06:ea:ed:93:b9:2e:76:37:c4:fb: e4:37:4a:0e:a3:db:eb:cf:4a:55:29:79:26:dc:e9:97:aa:71: d8:c1:46:95:c5:a5:88:d3:81:f3:6e:8e:3d:05:04:e0:ce:4b: a9:63:04:e3:17:e6:2c:02:f4:c9:2d:d6:d2:bb:65:29:80:61: 97:08:d6:e5:0b:d2:04:bf:e8:4d:08:5e:9a:41:af:5b:a8:81: e0:cc:9d:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CDk1Q8Fqrn59AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmMGMwNDItY2YzNi00ZDZmLTk1NGEtYmVlNjFhNWIz ZGNjMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk NTg0Y2EyMTgtN2RlNC00Y2Q4LWIwMmItNjNlOTYxZTJhZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0CEgwOuDUcbKCHteo4apKihUEXA5wMzqzCN 35yL/NskEVnQdBIkBK05utehQHiYjtgfxWKWkE1mY3Cl9ps+U0lG0Nnki3bOTYKM Koh5IZ4EnJ7G0aCK7Glii6PHCZCGhqeNrqfCromRcesMEtoImQTcWFlpbLx1EdH5 C72C2hDqsysJcMiQwBTG4GJQotYoh/PtyD0COmYNjsqH7/WKcys48UpkIgieSDwU +I416jQvZQR41gSjauApePrtLSLInigzlaHvSjpYABHn/4n0C7gA8j/fEwy380j/ Rn25WOd0nsHJ48YS1xS1GP1AOGcXZ4t+uj4DFCVyALGJOcrnsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCIws/UwUsShaRR67z40xRd9sPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZmYw YzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2MWE1YjNkY2MvNzMwMGEwYTctYTc0My0z YzA2LWJkZjItMmI5NDZkZGRlMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWZmMGMwNDItY2YzNi00ZDZmLTk1 NGEtYmVlNjFhNWIzZGNjL2FmZjBjMDQyLWNmMzYtNGQ2Zi05NTRhLWJlZTYxYTVi M2RjYy5jcmwwHwYDVR0jBBgwFoAUYMltwESmb70vbssD6msX/LpsLokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZmYwYzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2 MWE1YjNkY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjFTIg68oBWgBfLndaA+boWyH6Tc5EhwDqgc0G8d81AsfPM6GqmW1dO dYNufvxz6fcGzjuErLideV6zSxZWAfgkxj46ZC24FUHOeAP9tZPiNMXxsXs/3IRS DMcq0S43RnuijMm5n3Q+10xjxRayHV9lMwnuG+nIaYDbNXmX+GG/JMCZlCg563jk brTUWXlg7RlqGVOl9pjyXszv8jHaBeGXTN4EOEB1U/pnBurtk7kudjfE++Q3Sg6j 2+vPSlUpeSbc6ZeqcdjBRpXFpYjTgfNujj0FBODOS6ljBOMX5iwC9Mkt1tK7ZSmA YZcI1uUL0gS/6E0IXppBr1uogeDMnag= -----END CERTIFICATE-----Generated at Mon Jun 30 10:41:16 2025 by rpki-client