$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa File: ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa (raw, json) Hash identifier: Z0nFhLABCKBhyaMrEtQqlx7jWsrcILfMyZ0RdWlBvng= Subject key identifier: C5:11:D9:1D:AE:5E:AD:F5:FE:75:BA:16:F0:95:CD:C9:67:37:31:1F Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Certificate serial: 010D0C9F4328584A51D0721CEB7247FD315245E0 Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 394413 IP address blocks: 159.28.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:72:1c:eb:72:47:fd:31:52:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=794b58cd-55db-4ced-b315-988fa76967f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:9c:30:7c:cf:d7:31:93:0e:01:12:07:32: a2:88:08:70:35:27:5f:24:05:ba:19:60:ea:dd:e1: 48:a4:33:42:ba:7a:16:98:fe:11:c8:56:91:bb:2e: c2:91:bd:97:21:63:f9:25:ba:d1:d8:75:cf:f5:94: e2:b8:12:17:53:f9:f7:b5:86:ab:8b:82:05:09:9e: 97:c7:06:51:cb:d1:ac:6f:e1:d8:e7:69:e4:bf:92: f8:3d:21:32:e1:07:96:b6:1a:30:84:3f:90:52:0f: a1:89:7a:2d:bf:4b:4a:ee:c0:9c:3f:6a:1e:69:1d: 80:74:5d:98:73:52:45:d5:0d:1c:ff:3f:8b:4c:2b: 53:59:a7:22:7b:8e:0c:f4:00:d2:c0:ca:bb:07:d5: 69:6a:74:65:79:5a:e0:59:3f:b1:54:d4:34:fb:87: 4c:4f:cb:99:76:8c:e7:7f:b1:4c:93:d1:53:08:05: 42:cc:63:e6:a0:85:5a:36:fb:6c:3e:78:e9:75:be: 28:a9:e0:d7:4a:3d:5e:9b:36:08:88:6b:3f:a8:70: f8:73:c4:44:af:2b:03:20:ee:09:6b:e4:31:96:c1: 97:b4:6e:d0:a0:c8:f6:a2:5e:c6:77:a9:a6:f9:9e: 48:00:5f:31:ff:ac:cf:88:7d:44:38:1b:e0:4c:28: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:D9:1D:AE:5E:AD:F5:FE:75:BA:16:F0:95:CD:C9:67:37:31:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl X509v3 Authority Key Identifier: keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer sbgp-ipAddrBlock: critical IPv4: 159.28.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7a:5c:16:fe:f2:3d:31:b0:c6:16:42:b7:bc:35:ea:5c:0c: f9:c6:76:92:b4:c3:9c:97:62:d4:43:72:17:c7:66:75:1a:b8: 98:db:8b:7d:40:4d:e2:7b:8d:f4:1e:2b:9e:6b:60:42:3e:b5: 06:c3:9a:8c:2c:c9:16:e2:af:5e:0d:24:e8:f6:bc:0f:07:9d: bb:e0:af:08:8f:98:3c:af:d5:62:b2:e7:67:20:1d:6e:e3:d6: c4:8d:11:92:c6:ad:bc:56:f6:d4:89:15:d8:65:23:73:12:10: b7:b9:db:4a:2f:0d:d2:b7:80:7a:7c:1d:14:3c:5d:d5:d2:f8: 11:37:43:cd:f6:2b:51:43:e9:0b:91:fa:69:7f:a3:a5:39:b3: 91:b5:fe:35:97:e3:6b:cf:49:a0:48:b2:17:b4:b9:2b:ad:ea: 31:45:5b:d4:93:42:54:fa:f7:38:92:55:e1:c8:15:1c:d2:e7: b2:47:a5:27:60:8c:c2:10:13:00:9c:4f:0a:2a:70:6a:9e:aa: d2:14:fb:80:ad:eb:07:3c:5f:6e:d1:b9:84:dc:2b:bb:5b:8e: cc:ff:44:ac:32:63:6c:05:4e:e2:ae:a8:9b:ef:0b:54:69:5c: 45:38:9d:92:20:55:eb:b4:75:92:d0:d0:f9:40:7b:f0:94:73: 83:b4:e0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HIc63JH/TFSReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMmE2ZTYtOTY4MS00OTMwLTlkODUtMTY3ZWE3ZjYx MWMyMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk Nzk0YjU4Y2QtNTVkYi00Y2VkLWIzMTUtOTg4ZmE3Njk2N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlWcMHzP1zGTDgESBzKiiAhwNSdfJAW6GWDq 3eFIpDNCunoWmP4RyFaRuy7Ckb2XIWP5JbrR2HXP9ZTiuBIXU/n3tYari4IFCZ6X xwZRy9Gsb+HY52nkv5L4PSEy4QeWthowhD+QUg+hiXotv0tK7sCcP2oeaR2AdF2Y c1JF1Q0c/z+LTCtTWacie44M9ADSwMq7B9VpanRleVrgWT+xVNQ0+4dMT8uZdozn f7FMk9FTCAVCzGPmoIVaNvtsPnjpdb4oqeDXSj1emzYIiGs/qHD4c8RErysDIO4J a+QxlsGXtG7QoMj2ol7Gd6mm+Z5IAF8x/6zPiH1EOBvgTCg+CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUR2R2uXq31/nW6FvCVzclnNzEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2My YTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdlYTdmNjExYzIvZWY0MjFkZjktMzRiOC0z YjVlLWE3ZDItYWMxMzQyMzcxN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdjMmE2ZTYtOTY4MS00OTMwLTlk ODUtMTY3ZWE3ZjYxMWMyLzQ3YzJhNmU2LTk2ODEtNDkzMC05ZDg1LTE2N2VhN2Y2 MTFjMi5jcmwwHwYDVR0jBBgwFoAUCbIebpIwvGaEJvAMx9vFkVqq6SgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80N2MyYTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdl YTdmNjExYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd6XBb+8j0xsMYWQre8NepcDPnGdpK0w5yXYtRDchfHZnUauJjbi31A TeJ7jfQeK55rYEI+tQbDmowsyRbir14NJOj2vA8HnbvgrwiPmDyv1WKy52cgHW7j 1sSNEZLGrbxW9tSJFdhlI3MSELe520ovDdK3gHp8HRQ8XdXS+BE3Q832K1FD6QuR +ml/o6U5s5G1/jWX42vPSaBIshe0uSut6jFFW9STQlT69ziSVeHIFRzS57JHpSdg jMIQEwCcTwoqcGqeqtIU+4Ct6wc8X27RuYTcK7tbjsz/RKwyY2wFTuKuqJvvC1Rp XEU4nZIgVeu0dZLQ0PlAe/CUc4O04As= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:25 2025 by rpki-client