$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1c7a6788-fcba-31e3-8393-ca774691869d.roa File: 1c7a6788-fcba-31e3-8393-ca774691869d.roa (raw, json) Hash identifier: ziRMslk0JiBDwjMxOraBPPAe3M6fPwc4A2CvrX2WOE4= Subject key identifier: 2D:FF:39:B1:DF:6C:7D:ED:93:AA:5F:A3:D3:AE:BE:F2:D6:45:B4:1F Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A4A0BB2BC7DA866A8AF5A59A4 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1c7a6788-fcba-31e3-8393-ca774691869d.roa Signing time: Mon 23 Jun 2025 18:14:09 +0000 ROA not before: Mon 23 Jun 2025 18:14:09 +0000 ROA not after: Sun 21 Sep 2025 18:14:09 +0000 asID: 20001 IP address blocks: 147.53.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:0b:b2:bc:7d:a8:66:a8:af:5a:59:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 18:14:09 2025 GMT Not After : Sep 21 18:14:09 2025 GMT Subject: CN=dfeef99b-9bc7-4813-bb95-9f6c93565340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:11:52:d3:f8:a5:b2:23:96:87:2c:dd:d8:0a: 89:7d:8e:94:7d:fe:26:32:f2:bb:39:51:2b:32:32: 8f:ef:f3:e0:b1:bf:0a:88:a1:92:dd:86:c5:e0:71: 2f:6f:49:85:0e:d8:fa:b7:0b:c2:42:91:57:a0:60: 54:03:04:c9:ed:18:6e:42:22:69:f5:b2:3b:a4:fc: ac:ce:eb:69:29:50:b4:61:e4:cb:20:ec:60:5d:3f: 7f:7c:61:ec:fb:3c:21:95:db:61:4a:73:83:99:eb: 5b:bd:81:8e:b4:e6:94:8d:49:33:6c:83:73:88:cd: 2c:d7:48:a2:dd:79:55:cd:86:78:da:77:ff:ae:44: af:da:1a:11:38:56:fd:72:44:12:3a:6a:1a:26:57: 0b:c1:a6:6b:f5:a1:cd:ee:f3:98:ac:df:f8:c2:72: 73:64:ba:ec:e6:f3:17:e3:3f:15:6d:d1:e2:98:d9: d8:f6:2c:ba:38:5a:0c:b8:25:84:24:2e:3d:83:e2: 2a:e6:27:5b:28:2d:72:40:5a:02:9f:ca:ad:b7:61: 77:9b:73:a9:87:ca:d2:8f:bf:ac:cd:64:87:fa:83: d8:58:dd:51:82:51:c1:88:a7:f9:46:0b:24:71:74: dd:5a:a2:16:c7:b6:05:cd:bf:39:4e:c0:3e:b0:1c: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FF:39:B1:DF:6C:7D:ED:93:AA:5F:A3:D3:AE:BE:F2:D6:45:B4:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1c7a6788-fcba-31e3-8393-ca774691869d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:14:98:7e:0b:d9:ae:c2:06:10:59:4f:4e:da:8f:0e:25:d3: 5c:f3:1a:4c:98:74:d8:31:53:77:15:dc:36:b0:a6:2d:94:0d: 50:dc:75:45:2f:a1:dc:f3:60:a5:ba:4d:7e:2d:5d:09:53:83: 68:e4:a5:69:9f:a2:bb:f5:e7:69:ed:d0:1c:83:98:3d:59:ac: e6:23:52:73:5d:c4:ff:5d:2e:d3:9b:c6:f0:0b:36:a7:37:41: c6:29:db:c0:d6:1a:32:d5:4f:f0:fd:8a:7a:5a:6f:c8:55:b9: bf:01:89:3b:75:25:0d:44:07:6a:34:ce:1b:fa:d9:88:f3:6c: e5:22:cd:89:db:cd:e0:1c:70:cf:ae:28:80:dc:35:ce:8a:f4: 79:e9:fd:65:04:26:2d:6a:29:32:d3:78:93:c8:b0:bc:bc:82: 8d:b2:fa:68:58:cb:af:ea:7d:79:fb:10:17:e7:19:22:cc:3b: 1c:5e:70:d8:40:71:ea:30:26:4f:f4:93:79:40:5e:aa:08:94: 51:8f:0e:77:14:bd:7b:b4:d8:4b:7e:8e:e9:f1:ee:a1:d9:25: 68:30:d1:5e:59:9b:59:c0:a5:78:79:f0:67:1e:6c:2c:b8:44: c2:c3:a4:31:f7:4e:bd:0e:26:3f:52:6b:8e:d1:91:44:91:22: 5c:81:13:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKC7K8fahmqK9aWaQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzE4MTQwOVoXDTI1MDkyMTE4MTQwOVowLzEtMCsGA1UEAxMk ZGZlZWY5OWItOWJjNy00ODEzLWJiOTUtOWY2YzkzNTY1MzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBFS0/ilsiOWhyzd2AqJfY6Uff4mMvK7OVEr MjKP7/Pgsb8KiKGS3YbF4HEvb0mFDtj6twvCQpFXoGBUAwTJ7RhuQiJp9bI7pPys zutpKVC0YeTLIOxgXT9/fGHs+zwhldthSnODmetbvYGOtOaUjUkzbINziM0s10ii 3XlVzYZ42nf/rkSv2hoROFb9ckQSOmoaJlcLwaZr9aHN7vOYrN/4wnJzZLrs5vMX 4z8VbdHimNnY9iy6OFoMuCWEJC49g+Iq5idbKC1yQFoCn8qtt2F3m3Oph8rSj7+s zWSH+oPYWN1RglHBiKf5RgskcXTdWqIWx7YFzb85TsA+sBzGQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3/ObHfbH3tk6pfo9OuvvLWRbQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMWM3YTY3ODgtZmNiYS0z MWUzLTgzOTMtY2E3NzQ2OTE4NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkUmH4L2a7CBhBZT07ajw4l01zzGkyYdNgxU3cV3Dawpi2UDVDcdUUv odzzYKW6TX4tXQlTg2jkpWmforv152nt0ByDmD1ZrOYjUnNdxP9dLtObxvALNqc3 QcYp28DWGjLVT/D9inpab8hVub8BiTt1JQ1EB2o0zhv62YjzbOUizYnbzeAccM+u KIDcNc6K9Hnp/WUEJi1qKTLTeJPIsLy8go2y+mhYy6/qfXn7EBfnGSLMOxxecNhA ceowJk/0k3lAXqoIlFGPDncUvXu02Et+junx7qHZJWgw0V5Zm1nApXh58GcebCy4 RMLDpDH3Tr0OJj9Sa47RkUSRIlyBE4s= -----END CERTIFICATE-----Generated at Thu Jul 3 02:02:36 2025 by rpki-client