$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b686527a-a542-3f42-9e07-2ad4df571408.roa File: b686527a-a542-3f42-9e07-2ad4df571408.roa (raw, json) Hash identifier: hB4IjjR5C3Hx7R+CZTtxZYAFd6GTQzBoCLlVa15aX6I= Subject key identifier: 28:03:42:F1:74:24:BB:46:B0:51:47:B6:FD:89:B9:67:CA:E8:20:77 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F4328584A43DAF7E0DB2FBDAE28970A78 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b686527a-a542-3f42-9e07-2ad4df571408.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 32592 IP address blocks: 207.29.222.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:f7:e0:db:2f:bd:ae:28:97:0a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=b16c17ad-c36d-4501-9af6-f8349413c895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:36:7b:ea:ec:23:53:b4:6c:5e:44:c8:a8: 12:c0:d2:24:46:8b:86:23:7c:86:d4:9e:9c:70:ab: 5a:f6:08:f9:04:f1:ee:0d:37:c9:58:d8:18:22:a4: 9c:c7:4c:b6:19:8f:d5:25:89:e9:c3:5d:e3:f5:f8: 26:29:f0:6e:6d:6f:fc:30:bd:b3:c4:ef:aa:32:3c: 84:06:87:c8:86:0b:60:10:09:32:1f:99:6a:e5:33: 60:1b:99:75:04:e3:74:40:b0:cf:1b:4c:98:1d:a6: d9:f1:ee:62:bb:6c:7a:e0:26:7e:1b:8f:ba:ac:f5: 2f:da:41:95:3e:f4:ee:f7:31:35:ca:69:8f:99:38: 83:43:8a:0b:d2:12:8a:5a:e8:06:6e:95:fa:7f:86: d4:7d:ec:42:94:26:3c:cd:81:1d:ae:d3:1c:6a:c0: 85:e8:55:18:17:ba:44:8d:04:5a:e9:f4:e3:6b:1d: a2:dc:08:74:4b:42:c6:7a:e1:51:ea:77:ad:f5:a0: eb:d9:a5:2c:ef:74:49:1d:0a:12:2b:f2:2b:a5:25: 6f:cc:c6:11:47:81:61:98:8f:57:c5:c7:b0:2a:55: 45:55:4a:52:94:17:7e:54:93:4f:6a:d8:3f:d8:cd: d9:15:70:0c:c3:be:6a:06:1b:ba:ca:d7:11:99:bb: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:42:F1:74:24:BB:46:B0:51:47:B6:FD:89:B9:67:CA:E8:20:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b686527a-a542-3f42-9e07-2ad4df571408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 207.29.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:75:ad:f8:69:34:71:a3:2f:51:15:b6:d3:7c:c0:b1:7c:c0: 47:59:e3:dd:83:88:47:6e:cc:23:88:e2:f2:6f:d2:62:83:e7: ec:8b:7f:c8:a6:d0:d1:37:96:d3:c5:8b:2a:9e:c0:18:3f:2b: 25:92:31:97:ec:ca:02:08:f9:ab:cc:0b:c7:e5:c2:31:3f:e7: 1a:ac:5f:d8:9e:4c:86:ff:b4:d4:1a:93:44:ea:3d:0f:7c:86: 5a:f5:01:11:cb:e3:71:52:ba:06:7b:a4:87:ab:2b:90:dd:f8: a7:b5:d9:69:45:ed:72:65:7b:5a:45:76:b5:a6:13:07:6a:cc: d1:3e:38:2f:01:ad:7c:20:6a:48:9f:ac:2a:da:e2:d0:de:b4: 31:d1:4a:1f:35:b4:83:fe:b9:19:ce:0e:61:1b:52:e0:80:d7: 58:92:b4:4a:9a:d0:4d:c5:93:38:07:c9:e2:3a:9f:e9:41:37: 11:c0:5c:61:1c:9f:7c:5e:6d:c7:d6:b5:71:ba:c1:04:05:df: 36:52:90:5d:cb:33:f2:ef:4c:27:4c:80:af:f9:d0:47:da:f6: d3:87:2f:c7:b9:10:65:e6:b5:c6:00:c8:bd:0f:65:45:fc:5a: df:31:9e:7e:2a:18:b9:bd:52:da:d9:5f:6d:64:b0:82:7e:7a: 39:4e:c4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2vfg2y+9riiXCngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YjE2YzE3YWQtYzM2ZC00NTAxLTlhZjYtZjgzNDk0MTNjODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbc2e+rsI1O0bF5EyKgSwNIkRouGI3yG1J6c cKta9gj5BPHuDTfJWNgYIqScx0y2GY/VJYnpw13j9fgmKfBubW/8ML2zxO+qMjyE BofIhgtgEAkyH5lq5TNgG5l1BON0QLDPG0yYHabZ8e5iu2x64CZ+G4+6rPUv2kGV PvTu9zE1ymmPmTiDQ4oL0hKKWugGbpX6f4bUfexClCY8zYEdrtMcasCF6FUYF7pE jQRa6fTjax2i3Ah0S0LGeuFR6net9aDr2aUs73RJHQoSK/IrpSVvzMYRR4FhmI9X xcewKlVFVUpSlBd+VJNPatg/2M3ZFXAMw75qBhu6ytcRmbs5owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgDQvF0JLtGsFFHtv2JuWfK6CB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvYjY4NjUyN2EtYTU0Mi0z ZjQyLTllMDctMmFkNGRmNTcxNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzx3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR1rfhpNHGjL1EVttN8wLF8wEdZ492DiEduzCOI4vJv0mKD5+yLf8im 0NE3ltPFiyqewBg/KyWSMZfsygII+avMC8flwjE/5xqsX9ieTIb/tNQak0TqPQ98 hlr1ARHL43FSugZ7pIerK5Dd+Ke12WlF7XJle1pFdrWmEwdqzNE+OC8BrXwgakif rCra4tDetDHRSh81tIP+uRnODmEbUuCA11iStEqa0E3FkzgHyeI6n+lBNxHAXGEc n3xebcfWtXG6wQQF3zZSkF3LM/LvTCdMgK/50Efa9tOHL8e5EGXmtcYAyL0PZUX8 Wt8xnn4qGLm9UtrZX21ksIJ+ejlOxDM= -----END CERTIFICATE-----Generated at Sun Jul 6 00:04:36 2025 by rpki-client