$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa File: d45f5eac-1bd9-334c-8c77-70a141935177.roa (raw, json) Hash identifier: 2uLNKJuD8YATg+aS98IAQxboDPhec04kZvrMLW6Awhc= Subject key identifier: 1C:F7:0A:0D:D2:C6:4A:44:C4:78:96:4C:2C:31:AB:60:4F:82:38:47 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584A2D858FD43DD1D29989FD3540 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 396356 IP address blocks: 167.100.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:8f:d4:3d:d1:d2:99:89:fd:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=c203f172-428c-4eb7-806a-75318bf4ae98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:49:94:87:82:70:18:ce:f5:ac:fa:88:60: 42:e5:99:db:81:98:75:75:be:bf:fb:b9:7c:f1:2f: 04:8c:8c:79:5d:dd:49:ce:93:c1:26:2d:3b:1b:4b: d9:dc:7e:d0:c3:2f:2c:0f:ff:f3:39:67:0d:c8:19: 8a:58:c7:e5:52:97:23:9f:05:d5:b5:69:f8:7d:15: 58:f1:a9:90:c3:21:e2:62:1a:cc:4e:37:8a:49:a8: 65:44:da:a8:c5:87:a6:5f:1e:63:e6:d2:16:0d:66: 89:62:63:a2:85:c2:b3:b1:f3:d5:fb:ab:7b:13:e9: 71:22:18:0c:ec:55:51:ef:16:fd:bc:68:38:4b:1d: 78:22:9c:23:99:2b:3c:93:07:e9:dd:d2:b2:fb:d1: 76:22:78:0a:30:2d:36:97:c0:c6:07:f9:1f:a3:71: c6:a4:08:5f:9b:85:a8:79:42:a1:03:0d:93:26:e0: 18:00:81:f4:cf:9a:ee:7c:6c:b0:9d:72:c8:91:80: d1:ee:e4:bf:b4:5c:08:cd:24:51:a0:8a:83:15:37: 72:40:a3:ac:5d:43:d2:b0:b1:b5:69:c4:0f:c1:54: bd:bf:95:aa:34:1c:25:53:ed:16:d1:b3:ce:25:3f: 3d:5e:d1:37:52:5a:4b:d8:71:05:9a:bd:15:0d:d7: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F7:0A:0D:D2:C6:4A:44:C4:78:96:4C:2C:31:AB:60:4F:82:38:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 167.100.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5f:9d:9b:24:5d:5b:22:23:fd:ab:8e:4b:8c:c9:ba:43:1f: 39:c3:67:5c:b4:bf:17:4a:3b:16:b0:54:24:1f:b3:0f:9c:14: 30:b2:09:c1:3a:dd:89:34:b8:b0:6d:76:fe:05:74:1e:34:b4: e8:b5:c3:15:8f:a8:80:d3:2f:25:94:dc:77:b7:df:11:e1:59: 69:e0:78:83:e1:77:02:f8:71:d1:b0:72:5f:d0:8d:f7:d1:9c: 11:53:50:68:42:e1:17:db:37:5d:01:55:cc:2b:a4:3f:2d:35: 62:6e:21:7c:ba:f1:99:3f:89:b0:c0:c1:d3:92:3d:9e:e6:fa: ad:b8:68:9a:f3:9f:70:27:43:c6:00:ac:77:39:c6:74:4f:ed: 7b:67:fe:0d:2a:e6:7d:89:8d:06:e3:15:80:4d:e5:9d:f9:e4: 2b:99:fe:e5:e0:29:6f:5f:84:cd:8f:5a:c6:63:95:5b:74:b8: 58:e5:6d:29:84:0b:ae:33:48:95:3c:02:4d:ec:fd:05:b2:80: 09:78:64:86:16:d9:2b:9e:a5:e2:21:9b:1e:c8:dd:80:7f:58: 7f:68:20:25:00:1e:12:96:57:e0:7e:b0:5e:65:bd:32:30:02: aa:bd:54:b6:f0:f3:4f:9c:e1:e3:7d:10:47:80:7c:80:e2:42: 0b:fc:94:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothY/UPdHSmYn9NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk YzIwM2YxNzItNDI4Yy00ZWI3LTgwNmEtNzUzMThiZjRhZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweBJlIeCcBjO9az6iGBC5ZnbgZh1db6/+7l8 8S8EjIx5Xd1JzpPBJi07G0vZ3H7Qwy8sD//zOWcNyBmKWMflUpcjnwXVtWn4fRVY 8amQwyHiYhrMTjeKSahlRNqoxYemXx5j5tIWDWaJYmOihcKzsfPV+6t7E+lxIhgM 7FVR7xb9vGg4Sx14IpwjmSs8kwfp3dKy+9F2IngKMC02l8DGB/kfo3HGpAhfm4Wo eUKhAw2TJuAYAIH0z5rufGywnXLIkYDR7uS/tFwIzSRRoIqDFTdyQKOsXUPSsLG1 acQPwVS9v5WqNBwlU+0W0bPOJT89XtE3UlpL2HEFmr0VDdd3TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz3Cg3SxkpExHiWTCwxq2BPgjhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDQ1ZjVlYWMtMWJkOS0z MzRjLThjNzctNzBhMTQxOTM1MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp2RoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1fnZskXVsiI/2rjkuMybpDHznDZ1y0vxdKOxawVCQfsw+cFDCyCcE6 3Yk0uLBtdv4FdB40tOi1wxWPqIDTLyWU3He33xHhWWngeIPhdwL4cdGwcl/QjffR nBFTUGhC4RfbN10BVcwrpD8tNWJuIXy68Zk/ibDAwdOSPZ7m+q24aJrzn3AnQ8YA rHc5xnRP7Xtn/g0q5n2JjQbjFYBN5Z355CuZ/uXgKW9fhM2PWsZjlVt0uFjlbSmE C64zSJU8Ak3s/QWygAl4ZIYW2SuepeIhmx7I3YB/WH9oICUAHhKWV+B+sF5lvTIw Aqq9VLbw80+c4eN9EEeAfIDiQgv8lDo= -----END CERTIFICATE-----Generated at Sun Jun 29 07:59:50 2025 by rpki-client