$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa File: 673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa (raw, json) Hash identifier: G1Xln64veU0gZME8FRsDcwn+fuithHoyYzMXUAap6D0= Subject key identifier: A0:90:95:DF:CC:0C:2A:F2:FB:FD:71:3E:83:7A:C5:EE:79:67:B4:67 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A4DA043C3E5297E7AC20BDE80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 16433 IP address blocks: 160.79.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:43:c3:e5:29:7e:7a:c2:0b:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=aec429f4-c118-4d25-8058-264ab6e923ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:96:90:1b:e4:82:8d:7e:b4:c8:b5:c9:a8: 53:50:2d:19:8f:f0:84:10:a4:c9:16:af:52:2b:f5: eb:31:18:6d:e5:bf:57:df:0b:d2:e2:80:54:d2:40: 29:30:c7:8e:e2:47:26:cd:98:2a:87:d5:50:c0:05: 33:86:d6:67:3d:dc:a9:1a:c7:77:20:84:fb:66:0f: 2c:7e:9b:cd:52:ba:c5:d6:6b:0b:e7:ee:44:1e:44: 5f:ef:a5:2c:49:16:41:3d:ca:86:76:8a:89:f4:3c: ba:99:21:c6:d9:93:3e:bd:d6:a4:66:31:ff:90:84: c2:e5:11:1a:51:03:ed:04:be:cb:64:7b:4a:e3:f1: 31:30:2e:3e:90:d5:1a:d9:b2:e4:7d:ee:10:8c:c8: 0d:a9:33:c6:4f:11:cd:9f:9b:2b:21:d4:a2:e4:d1: 55:5c:95:39:63:ca:4b:78:12:7c:7c:eb:f1:d8:25: 43:6a:1e:5e:e4:f7:82:75:1e:59:3b:25:7b:f8:92: 83:ad:a0:eb:c3:5b:05:26:f0:36:04:1e:29:45:45: a9:97:c7:3d:23:9b:2e:5e:28:5e:42:57:12:94:e9: 2e:e6:93:b2:9e:f3:c1:5c:0d:d9:6e:ab:ca:2e:0b: 04:ae:bc:84:83:97:c6:96:43:b8:ad:de:f8:7d:9c: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:90:95:DF:CC:0C:2A:F2:FB:FD:71:3E:83:7A:C5:EE:79:67:B4:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 160.79.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e3:1a:70:00:96:a2:e0:94:55:21:db:f7:ad:9b:a1:25:6a: f5:ad:a9:db:b7:37:c6:6b:b3:f1:3d:98:c0:8b:a1:ac:03:e1: b9:cb:54:32:9b:1e:ce:5a:c7:c3:9c:70:9f:b1:b3:86:5d:b0: 54:bb:f1:e2:ab:05:8f:34:37:cb:de:d2:c5:17:21:3f:fd:b3: 40:67:c6:af:86:07:a0:95:f6:e4:52:bc:9f:18:0f:37:74:ad: e1:a0:84:4e:c9:77:23:bf:12:ad:d5:c8:ab:da:76:50:21:d7: 6b:8e:d3:73:0e:65:86:c7:5d:a0:73:c9:55:f4:eb:b3:e7:b6: c6:c0:b2:91:f1:50:f8:5e:57:ad:e8:a5:cf:55:59:6e:72:38: a1:37:8c:e6:39:9a:b9:fb:b4:c3:21:c8:e9:25:ff:b9:57:fa: e3:12:98:af:c6:a4:17:ed:7b:25:fd:f7:77:dc:84:7e:23:a1: 9a:26:c2:2e:51:70:bc:57:da:49:c2:4d:49:bd:f8:57:01:cd: 25:f5:b9:55:6b:61:e8:f5:af:13:05:b5:77:b2:a5:83:ea:b8: f8:f1:97:87:cd:90:23:d5:b9:34:15:0c:1a:32:ba:07:91:e6: 12:33:e9:20:b7:87:8f:e6:da:79:ae:62:ce:d0:dc:fe:7a:9b: 28:55:a1:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoEPD5Sl+esIL3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YWVjNDI5ZjQtYzExOC00ZDI1LTgwNTgtMjY0YWI2ZTkyM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwOWkBvkgo1+tMi1yahTUC0Zj/CEEKTJFq9S K/XrMRht5b9X3wvS4oBU0kApMMeO4kcmzZgqh9VQwAUzhtZnPdypGsd3IIT7Zg8s fpvNUrrF1msL5+5EHkRf76UsSRZBPcqGdoqJ9Dy6mSHG2ZM+vdakZjH/kITC5REa UQPtBL7LZHtK4/ExMC4+kNUa2bLkfe4QjMgNqTPGTxHNn5srIdSi5NFVXJU5Y8pL eBJ8fOvx2CVDah5e5PeCdR5ZOyV7+JKDraDrw1sFJvA2BB4pRUWpl8c9I5suXihe QlcSlOku5pOynvPBXA3ZbqvKLgsErryEg5fGlkO4rd74fZx53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCQld/MDCry+/1xPoN6xe55Z7RnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNjczZmM1ZjEtODNmNi0z N2JmLWExNTUtNDEzOGExYjdhMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoE8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHjGnAAlqLglFUh2/etm6ElavWtqdu3N8Zrs/E9mMCLoawD4bnLVDKb Hs5ax8OccJ+xs4ZdsFS78eKrBY80N8ve0sUXIT/9s0Bnxq+GB6CV9uRSvJ8YDzd0 reGghE7JdyO/Eq3VyKvadlAh12uO03MOZYbHXaBzyVX067PntsbAspHxUPheV63o pc9VWW5yOKE3jOY5mrn7tMMhyOkl/7lX+uMSmK/GpBfteyX993fchH4joZomwi5R cLxX2knCTUm9+FcBzSX1uVVrYej1rxMFtXeypYPquPjxl4fNkCPVuTQVDBoyugeR 5hIz6SC3h4/m2nmuYs7Q3P56myhVoeY= -----END CERTIFICATE-----Generated at Mon Jun 30 08:50:35 2025 by rpki-client