$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa File: e21aefd6-472c-3930-aa58-debd99be2072.roa (raw, json) Hash identifier: OBXpAIccbauSJ2RJaMJ2XzrBS2EHmKyYUtNiw7rBl4I= Subject key identifier: 9A:B2:2A:38:24:98:B4:F8:D1:76:84:31:B3:EB:67:CF:9C:BA:A8:5D Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584A43DB00BAD83E52E86BB6BCA0 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 395035 IP address blocks: 216.150.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:00:ba:d8:3e:52:e8:6b:b6:bc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=78143b8c-639e-4200-ba9c-07b8061ec58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:06:4d:bd:6f:f5:2e:89:7a:f7:67:74:21: 7f:35:9f:72:50:84:31:b6:50:81:d0:94:e2:7c:d0: bd:34:0d:cb:49:63:d4:f1:f2:f4:32:c6:9b:57:d0: 6d:cd:c6:d9:d1:83:be:53:19:b9:b8:40:ac:6d:fc: 68:6d:85:37:ee:d2:6e:0d:90:4b:4f:b6:4d:d1:9a: 8e:51:96:4d:a1:dd:8f:27:6c:c5:0c:3c:19:fe:54: de:44:36:bb:a6:8f:04:2a:a8:35:d2:18:93:6f:03: b4:0d:d9:17:d6:c3:24:02:d9:33:dc:1e:61:20:1d: 34:e1:03:0f:2f:22:bc:c7:af:f2:db:22:d3:36:f1: 99:20:a3:70:20:8a:8a:d5:ce:17:f0:60:62:aa:ae: 3f:d9:8f:5e:cb:81:cc:98:d3:c3:78:ed:f6:ab:9d: 9d:96:c1:e2:99:5d:39:1d:6c:b1:fd:19:20:69:56: cb:9c:f5:c3:72:f2:b6:e9:91:2f:18:34:98:d0:a3: 9e:88:91:0a:87:8a:f8:23:c2:f4:78:d2:8e:2d:b5: 4b:9a:93:f1:05:49:6b:84:aa:4d:e8:e0:17:b9:9c: 95:e1:6f:20:77:10:13:dc:33:4e:7f:2b:94:d4:eb: 1c:02:fc:60:f8:f2:0e:67:48:7f:26:55:24:3e:fa: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B2:2A:38:24:98:B4:F8:D1:76:84:31:B3:EB:67:CF:9C:BA:A8:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 216.150.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:52:e8:bd:8e:35:b6:6d:2a:95:d9:ee:e8:64:df:19:7e:0c: 51:78:05:e7:ba:fe:72:37:04:9a:b6:c7:06:8f:86:31:6b:a1: 2f:01:d2:34:c1:e5:49:ed:f0:0d:1b:c7:2c:3c:84:1e:fa:b6: ec:93:23:c0:f0:c6:a8:47:08:0c:14:99:ef:27:ad:a7:3c:c2: 53:7f:77:fc:cc:b3:11:47:1c:31:09:03:71:ac:5d:69:8e:2f: 4b:8e:85:03:46:b4:33:8a:4c:49:97:f7:8a:df:e6:01:5a:d1: 1a:83:e5:9d:0e:df:d2:69:2f:80:fd:83:14:42:51:65:9a:2a: 63:90:14:ca:af:5a:0e:cb:5f:7e:b7:d3:e2:4f:58:94:1c:be: 87:d3:61:85:35:8e:e9:bb:f5:ba:bf:18:24:51:a5:7a:3a:0c: 55:f7:16:7e:48:ea:d5:0a:da:b4:1a:9e:d2:3b:f0:6c:3c:97: 0a:83:0c:c5:cf:32:ec:c5:89:69:c2:cf:2d:39:a9:5c:24:14: dc:ff:df:6f:09:f5:c9:a7:85:11:d7:de:3d:79:5d:61:27:0a: 2e:8f:aa:9e:bc:bf:12:6f:5b:af:73:37:a5:92:98:6d:b4:f3: 4d:b4:c7:03:0a:c9:44:70:23:ca:1d:c9:55:d0:63:95:36:46: 87:98:70:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wC62D5S6Gu2vKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NzgxNDNiOGMtNjM5ZS00MjAwLWJhOWMtMDdiODA2MWVjNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9oGTb1v9S6JevdndCF/NZ9yUIQxtlCB0JTi fNC9NA3LSWPU8fL0MsabV9BtzcbZ0YO+Uxm5uECsbfxobYU37tJuDZBLT7ZN0ZqO UZZNod2PJ2zFDDwZ/lTeRDa7po8EKqg10hiTbwO0DdkX1sMkAtkz3B5hIB004QMP LyK8x6/y2yLTNvGZIKNwIIqK1c4X8GBiqq4/2Y9ey4HMmNPDeO32q52dlsHimV05 HWyx/RkgaVbLnPXDcvK26ZEvGDSY0KOeiJEKh4r4I8L0eNKOLbVLmpPxBUlrhKpN 6OAXuZyV4W8gdxAT3DNOfyuU1OscAvxg+PIOZ0h/JlUkPvogWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqyKjgkmLT40XaEMbPrZ8+cuqhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZTIxYWVmZDYtNDcyYy0z OTMwLWFhNTgtZGViZDk5YmUyMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2JYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZS6L2ONbZtKpXZ7uhk3xl+DFF4Bee6/nI3BJq2xwaPhjFroS8B0jTB 5Unt8A0bxyw8hB76tuyTI8DwxqhHCAwUme8nrac8wlN/d/zMsxFHHDEJA3GsXWmO L0uOhQNGtDOKTEmX94rf5gFa0RqD5Z0O39JpL4D9gxRCUWWaKmOQFMqvWg7LX363 0+JPWJQcvofTYYU1jum79bq/GCRRpXo6DFX3Fn5I6tUK2rQantI78Gw8lwqDDMXP MuzFiWnCzy05qVwkFNz/328J9cmnhRHX3j15XWEnCi6Pqp68vxJvW69zN6WSmG20 8020xwMKyURwI8odyVXQY5U2RoeYcFs= -----END CERTIFICATE-----Generated at Mon Jun 30 05:26:27 2025 by rpki-client