$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa File: 257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa (raw, json) Hash identifier: aChDYRWfDSla4opcJDpEtaT0idSsBHJkUI8B0i4jgmc= Subject key identifier: 0F:79:BF:3A:51:D8:95:8A:7A:E9:04:26:62:72:66:84:3E:52:2C:1F Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F43285849E91FA34F1E4175D26E0C6F00 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 136473 IP address blocks: 168.245.216.0/21 maxlen: 24 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a3:4f:1e:41:75:d2:6e:0c:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=8e2425bb-c3af-4c94-bf1a-925a93fad043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:1d:54:f4:29:29:60:ba:fb:de:8a:78:b2: 52:52:6a:a2:79:df:dd:bc:1f:1b:f6:a7:33:0f:c5: ff:f4:e0:bf:46:5f:dd:4e:c9:26:7f:d5:5e:04:69: be:36:5e:02:c0:35:47:5a:cf:bd:b9:77:70:58:68: d6:f6:b5:bd:33:e9:ec:c2:d7:63:b0:41:d5:24:06: f2:7e:67:18:08:e7:8c:84:9c:49:d8:4b:34:c8:fd: 55:a4:e2:55:05:62:4a:cd:7e:98:b1:5e:fb:11:d4: 6f:03:4c:83:8f:c3:25:fa:39:9a:33:5b:53:f1:89: cd:9a:87:3d:83:fc:be:1e:eb:ef:1b:fa:10:a1:ff: 85:cc:21:88:34:8a:38:0c:f0:bb:c2:c4:6c:ac:6a: 3f:0a:1e:78:31:15:23:a9:e0:e0:b9:87:d1:16:58: 72:61:35:e9:87:98:84:f2:e6:90:40:51:7b:60:37: 78:81:88:8d:ca:d5:9d:3f:0f:8c:43:6b:fc:c8:7d: e0:df:df:08:86:b1:24:24:eb:38:9e:6e:63:ca:b6: 94:fa:59:8d:b5:58:d8:ba:17:a6:6b:33:14:f8:97: 48:9f:4c:5b:5a:44:fa:7c:6f:a4:e5:e4:b6:49:3d: 46:a8:18:39:11:65:45:7d:7e:8d:5d:ae:0a:20:67: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:79:BF:3A:51:D8:95:8A:7A:E9:04:26:62:72:66:84:3E:52:2C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 168.245.216.0/21 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:27:8b:67:46:61:05:ea:66:0c:89:21:72:fe:4c:51:55:3f: 44:a6:02:b6:23:bc:1f:ee:0a:36:78:3d:d7:b1:be:02:49:c7: 2b:b0:d3:51:f6:08:7f:37:d2:11:b2:a6:45:cd:c0:95:4e:a3: 5c:01:4d:b9:31:ac:c5:a3:02:44:2c:c0:14:fb:6f:fd:72:ec: fe:d5:29:5b:8b:32:78:d8:92:fa:e3:25:b4:eb:b3:16:f0:ce: 6d:75:fc:14:81:02:59:06:ac:2d:e4:cd:3a:03:3f:e8:af:15: 73:84:28:37:8e:29:26:c2:f4:33:0d:10:f1:48:55:cc:b8:ce: 26:ae:4c:0a:b7:e8:1d:83:73:15:2b:11:13:b2:79:6a:6f:a5: 16:1a:29:03:7f:f4:28:f6:89:3e:9b:36:b8:95:a1:2c:bc:7a: 1e:f6:07:15:5c:4f:1c:bd:49:08:2d:b8:d6:5c:2f:3d:ba:0b: d1:b5:f6:e5:dd:44:32:87:ed:b1:1a:df:4e:b4:1c:4f:b5:0d: 93:d5:c0:47:11:75:c3:95:8c:96:00:98:4c:ef:1b:31:a1:8e: de:75:5a:bb:e5:7c:4f:3f:5a:08:17:3e:05:10:52:f4:60:c8: f2:87:63:3a:db:8b:a2:23:e4:10:14:29:a8:01:7b:c2:ad:a9: 27:5f:d2:fd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnpH6NPHkF10m4MbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk OGUyNDI1YmItYzNhZi00Yzk0LWJmMWEtOTI1YTkzZmFkMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC8dVPQpKWC6+96KeLJSUmqied/dvB8b9qcz D8X/9OC/Rl/dTskmf9VeBGm+Nl4CwDVHWs+9uXdwWGjW9rW9M+nswtdjsEHVJAby fmcYCOeMhJxJ2Es0yP1VpOJVBWJKzX6YsV77EdRvA0yDj8Ml+jmaM1tT8YnNmoc9 g/y+HuvvG/oQof+FzCGINIo4DPC7wsRsrGo/Ch54MRUjqeDguYfRFlhyYTXph5iE 8uaQQFF7YDd4gYiNytWdPw+MQ2v8yH3g398IhrEkJOs4nm5jyraU+lmNtVjYuhem azMU+JdIn0xbWkT6fG+k5eS2ST1GqBg5EWVFfX6NXa4KIGcmOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA95vzpR2JWKeukEJmJyZoQ+UiwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMjU3ZTlhNDItNGVjMC0z YTg1LTg5YTktYTIwNWI4ZjllM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG 0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGMni2dGYQXqZgyJIXL+TFFVP0SmArYjvB/uCjZ4PdexvgJJ xyuw01H2CH830hGypkXNwJVOo1wBTbkxrMWjAkQswBT7b/1y7P7VKVuLMnjYkvrj JbTrsxbwzm11/BSBAlkGrC3kzToDP+ivFXOEKDeOKSbC9DMNEPFIVcy4ziauTAq3 6B2DcxUrEROyeWpvpRYaKQN/9Cj2iT6bNriVoSy8eh72BxVcTxy9SQgtuNZcLz26 C9G19uXdRDKH7bEa3060HE+1DZPVwEcRdcOVjJYAmEzvGzGhjt51WrvlfE8/WggX PgUQUvRgyPKHYzrbi6Ij5BAUKagBe8KtqSdf0v0= -----END CERTIFICATE-----Generated at Fri Jul 4 21:15:13 2025 by rpki-client