$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa File: 21aee54d-c4e1-3466-8a02-2480fde4af39.roa (raw, json) Hash identifier: D3s7Fe/i9VIN/v5g6SdxZjyRRjWO3jUm7UkNOxVMgM0= Subject key identifier: 36:F2:5C:A5:15:C2:D9:4A:74:AE:7F:E8:29:27:4D:E9:CF:D0:5A:EF Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A374AD50D3F21A70047C22C80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 212238 IP address blocks: 141.193.202.0/24 maxlen: 24 207.230.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d5:0d:3f:21:a7:00:47:c2:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=bc817966-b3b8-4617-b086-cbbbcfb74827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:01:83:98:fb:2d:a0:d0:32:fd:a7:a3:8f: ec:97:50:bc:5d:28:fe:88:6f:b4:0f:d2:50:df:78: c1:99:36:a6:61:b7:c1:21:c4:30:12:6e:f2:8a:ba: f1:36:4c:db:67:c4:b4:02:8a:ac:aa:22:7d:93:50: 18:71:6d:53:47:62:5c:b8:b5:e0:0f:2e:c1:4a:4d: 53:1e:d3:84:57:32:29:cd:a3:24:60:90:db:62:3f: da:88:e1:04:b2:72:4f:15:2d:47:4b:53:a0:97:f8: 59:62:ac:fc:51:ad:12:52:ce:2f:37:9c:e2:e5:8b: 12:81:e0:59:96:29:6c:cf:cd:d4:50:a0:25:87:fb: e1:d7:67:76:41:d2:83:25:8e:c3:e5:37:6f:65:22: 93:ae:75:95:63:84:7f:b9:85:5e:3e:ef:ba:6f:cc: dc:bc:03:1e:05:b4:b2:f6:80:8b:d8:cc:4c:88:9c: e9:a5:20:dc:ed:88:83:ea:92:dc:27:8a:91:ad:0b: a0:2e:a8:06:76:39:3b:51:1b:ba:54:96:ac:b5:af: 6b:a9:3f:cb:d4:4d:07:db:25:1b:56:d3:99:98:2c: 27:6d:a7:9a:41:db:d3:e9:ed:63:de:7e:02:88:70: 6d:ed:67:74:6d:a5:16:8a:9e:98:93:dd:7e:23:91: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F2:5C:A5:15:C2:D9:4A:74:AE:7F:E8:29:27:4D:E9:CF:D0:5A:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 141.193.202.0/24 207.230.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c7:33:14:c0:3f:28:91:17:51:e0:8d:c4:5e:c4:40:36:34: aa:ee:ef:b9:43:a3:ca:bd:da:0b:18:43:de:42:d5:d9:85:63: 55:96:a5:0f:70:9c:7b:57:d7:42:93:53:ae:47:b6:41:85:b9: e8:19:d7:0c:a6:83:40:f7:dc:5a:dc:dd:80:d7:95:d8:81:e1: bb:9e:ec:e2:49:4d:ab:47:d7:00:bd:3d:b5:cc:07:3b:13:16: 83:1d:71:da:65:9c:1c:5c:c0:0a:98:77:6c:d0:ee:13:b5:aa: eb:5f:6c:d4:1f:62:ec:ce:78:dd:e8:6a:53:58:e4:0e:70:37: 92:9b:f9:47:cf:6b:fd:f5:24:48:0a:d6:70:b6:c5:a5:45:6c: 03:75:2d:34:0b:77:94:d1:ca:d0:c4:fd:c8:8f:7a:9c:5b:99: 6e:80:de:54:19:60:37:e8:22:9b:39:f3:f9:bd:60:be:09:d4: fe:8e:9f:f7:fc:d4:5d:17:9a:f1:58:90:0d:69:8e:fb:4d:ae: c2:2d:74:3e:d9:7d:18:6b:e6:3b:54:42:81:4d:7d:d6:16:a5: a2:e4:c4:16:7a:02:d6:cd:a2:7e:7a:00:5d:07:67:89:e2:d1: d4:f2:e9:f0:0f:03:93:ff:88:19:be:4a:c8:96:55:80:74:83: a4:b8:54:4a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo3StUNPyGnAEfCLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YmM4MTc5NjYtYjNiOC00NjE3LWIwODYtY2JiYmNmYjc0ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHwBg5j7LaDQMv2no4/sl1C8XSj+iG+0D9JQ 33jBmTamYbfBIcQwEm7yirrxNkzbZ8S0AoqsqiJ9k1AYcW1TR2JcuLXgDy7BSk1T HtOEVzIpzaMkYJDbYj/aiOEEsnJPFS1HS1Ogl/hZYqz8Ua0SUs4vN5zi5YsSgeBZ lilsz83UUKAlh/vh12d2QdKDJY7D5TdvZSKTrnWVY4R/uYVePu+6b8zcvAMeBbSy 9oCL2MxMiJzppSDc7YiD6pLcJ4qRrQugLqgGdjk7URu6VJasta9rqT/L1E0H2yUb VtOZmCwnbaeaQdvT6e1j3n4CiHBt7Wd0baUWip6Yk91+I5E48wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDbyXKUVwtlKdK5/6CknTenP0FrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjFhZWU1NGQtYzRlMS0z NDY2LThhMDItMjQ4MGZkZTRhZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjcHKAwQA z+Z/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADLHMxTAPyiRF1HgjcRexEA2NKru77lDo8q92gsYQ95C1dmF Y1WWpQ9wnHtX10KTU65HtkGFuegZ1wymg0D33Frc3YDXldiB4bue7OJJTatH1wC9 PbXMBzsTFoMdcdplnBxcwAqYd2zQ7hO1qutfbNQfYuzOeN3oalNY5A5wN5Kb+UfP a/31JEgK1nC2xaVFbAN1LTQLd5TRytDE/ciPepxbmW6A3lQZYDfoIps58/m9YL4J 1P6On/f81F0XmvFYkA1pjvtNrsItdD7ZfRhr5jtUQoFNfdYWpaLkxBZ6AtbNon56 AF0HZ4ni0dTy6fAPA5P/iBm+SsiWVYB0g6S4VEo= -----END CERTIFICATE-----Generated at Sun Jun 29 04:30:23 2025 by rpki-client