$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa File: a6c43437-46a5-3a45-99df-bc0a47a30454.roa (raw, json) Hash identifier: Hwn8AFZJdKlnYrGl1NskygqCecefuMZD+5TVBA0C2LY= Subject key identifier: BB:70:EA:C5:E2:FB:31:2C:D4:EC:3F:C2:0A:27:FE:20:70:BE:DF:15 Certificate issuer: /CN=a79b85c1-9b95-4c95-b08d-220eb047aedf Certificate serial: 010D0C9F4328584A5765CDCBECD5838E71320DC0 Authority key identifier: 94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 8075 IP address blocks: 216.220.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cd:cb:ec:d5:83:8e:71:32:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79b85c1-9b95-4c95-b08d-220eb047aedf Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=15b72a1e-bfa3-4fb5-91db-0caf8491af37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:89:b6:ca:a6:dc:37:5e:26:9a:44:f7:63: 4b:19:97:5b:cd:78:d9:fc:ff:b5:66:6e:eb:75:3f: 1a:5d:67:9a:b2:43:c3:b5:87:92:98:ff:38:36:3f: e1:32:4b:ff:de:87:6d:40:7e:88:e7:11:80:a4:a8: 86:01:60:9a:de:7d:6b:2a:c5:60:a5:61:54:30:0b: 89:44:40:f0:88:6a:48:70:f0:69:e6:ba:4a:c1:98: 39:9b:6b:f8:b8:9a:9b:13:89:aa:95:7e:3f:7c:10: 94:9e:b6:13:93:b9:fe:07:f3:4f:71:f8:c4:98:ff: 4f:18:51:15:b9:85:1d:8f:aa:65:78:ad:a0:a4:52: c0:1f:cc:8e:3f:9f:5c:6d:32:5e:1d:35:40:29:d2: 84:09:40:54:6e:6b:5c:3c:b1:29:1d:71:5e:97:39: 9a:18:fd:67:75:65:4e:89:c3:64:dc:f3:ce:f6:a1: ce:8a:00:fe:d0:f0:46:44:b3:5e:a7:5a:bf:6a:46: 7f:9a:07:c6:8d:cf:a6:41:f5:b7:27:a7:d0:24:0c: 1b:3e:f0:ce:ae:7a:42:96:fc:e9:77:0c:51:d5:9e: e4:a6:e7:21:92:73:63:09:95:8f:fd:a7:bf:59:03: cd:f7:7c:a9:78:67:76:52:f2:21:b4:26:06:18:e9: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:70:EA:C5:E2:FB:31:2C:D4:EC:3F:C2:0A:27:FE:20:70:BE:DF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl X509v3 Authority Key Identifier: keyid:94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer sbgp-ipAddrBlock: critical IPv4: 216.220.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:01:7f:ce:5e:90:c1:39:4f:23:5a:95:b3:1b:83:36:29:e0: 39:b2:84:3a:e5:03:b1:3e:58:35:e7:bc:0f:f5:de:b3:2d:40: 6e:6c:50:61:b7:36:05:01:d8:14:76:c3:c6:2a:a3:dc:f7:e8: 6b:6a:68:53:2c:07:93:4a:11:2a:6b:fc:4e:92:b7:d6:76:6a: 68:75:4b:9a:80:4e:d5:d5:df:c2:6a:90:74:fb:da:66:b2:15: a0:85:58:0f:37:42:52:47:e0:6e:60:40:4f:23:26:e4:5f:46: 33:61:bd:aa:1b:83:64:ef:8e:98:25:0e:ab:9e:e6:f4:36:ae: f0:e0:a3:60:9f:e2:a5:5a:14:f2:e7:5a:1a:2b:58:3e:30:08: 5e:8d:45:bd:25:46:0b:87:b2:03:6b:3e:a5:4e:6d:6d:f0:a4: 38:bf:c7:7b:57:d3:93:7a:19:59:e4:6e:93:fd:ae:39:b8:c9: 46:f4:be:8e:37:35:01:f6:c6:16:b4:3a:a6:91:2f:35:03:fb: 88:b3:fd:08:2f:56:32:51:62:43:a2:c2:42:8d:ed:0b:9b:70: d7:da:09:2b:e6:1e:4d:4d:50:31:47:28:9b:52:67:b2:56:b8: 35:59:94:42:d8:de:3e:94:e4:f7:1b:92:1e:1c:c6:b1:c9:0c: 0e:12:c2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZc3L7NWDjnEyDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc5Yjg1YzEtOWI5NS00Yzk1LWIwOGQtMjIwZWIwNDdh ZWRmMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MTViNzJhMWUtYmZhMy00ZmI1LTkxZGItMGNhZjg0OTFhZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNWJtsqm3DdeJppE92NLGZdbzXjZ/P+1Zm7r dT8aXWeaskPDtYeSmP84Nj/hMkv/3odtQH6I5xGApKiGAWCa3n1rKsVgpWFUMAuJ REDwiGpIcPBp5rpKwZg5m2v4uJqbE4mqlX4/fBCUnrYTk7n+B/NPcfjEmP9PGFEV uYUdj6pleK2gpFLAH8yOP59cbTJeHTVAKdKECUBUbmtcPLEpHXFelzmaGP1ndWVO icNk3PPO9qHOigD+0PBGRLNep1q/akZ/mgfGjc+mQfW3J6fQJAwbPvDOrnpClvzp dwxR1Z7kpuchknNjCZWP/ae/WQPN93ypeGd2UvIhtCYGGOnQCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtw6sXi+zEs1Ow/wgon/iBwvt8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzli ODVjMS05Yjk1LTRjOTUtYjA4ZC0yMjBlYjA0N2FlZGYvYTZjNDM0MzctNDZhNS0z YTQ1LTk5ZGYtYmMwYTQ3YTMwNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc5Yjg1YzEtOWI5NS00Yzk1LWIw OGQtMjIwZWIwNDdhZWRmL2E3OWI4NWMxLTliOTUtNGM5NS1iMDhkLTIyMGViMDQ3 YWVkZi5jcmwwHwYDVR0jBBgwFoAUlNMFOObFh7YEazHhhQiQew4HS6MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNzliODVjMS05Yjk1LTRjOTUtYjA4ZC0yMjBl YjA0N2FlZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIBf85ekME5TyNalbMbgzYp4DmyhDrlA7E+WDXnvA/13rMtQG5sUGG3 NgUB2BR2w8Yqo9z36GtqaFMsB5NKESpr/E6St9Z2amh1S5qATtXV38JqkHT72may FaCFWA83QlJH4G5gQE8jJuRfRjNhvaobg2TvjpglDque5vQ2rvDgo2Cf4qVaFPLn WhorWD4wCF6NRb0lRguHsgNrPqVObW3wpDi/x3tX05N6GVnkbpP9rjm4yUb0vo43 NQH2xha0OqaRLzUD+4iz/QgvVjJRYkOiwkKN7QubcNfaCSvmHk1NUDFHKJtSZ7JW uDVZlELY3j6U5Pcbkh4cxrHJDA4SwkE= -----END CERTIFICATE-----Generated at Sun Jun 29 16:34:13 2025 by rpki-client