$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa File: c7f56a69-0c3c-37e5-80e1-32c30e788993.roa (raw, json) Hash identifier: xfboPHUlu/GKM7bQmKBiU7HDAh2AY9clY8v4H24NHfQ= Subject key identifier: D7:CB:DF:B2:30:0D:A2:DF:73:FC:34:7B:42:8D:82:91:17:77:E4:66 Certificate issuer: /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Certificate serial: 010D0C9F4328584A331AE7E44711323411AA8000 Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 216.152.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e7:e4:47:11:32:34:11:aa:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=f815ec89-7175-4593-a94d-20852f158efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:b5:4f:b1:eb:ff:7a:86:3d:a9:8e:3f:ec: 28:76:89:93:17:b6:3b:f1:a9:03:cd:aa:67:7d:9e: 8a:f2:09:f2:68:4c:38:91:27:31:71:76:dd:1c:68: b0:e4:de:0d:6c:0d:fd:dd:46:38:9b:07:ca:0e:70: 35:ca:68:c6:24:9f:45:1b:0b:b5:ac:e3:99:88:63: 43:55:33:4a:4e:ee:38:88:26:f7:64:98:f9:60:1e: c1:be:30:a6:39:1a:1b:61:c9:1d:32:14:eb:2b:65: b3:e6:3e:22:33:6e:d4:f5:98:ad:35:16:2b:21:f0: ed:4c:c2:a7:31:e0:62:7c:92:f6:1f:5e:04:d1:bf: a7:c8:a8:99:73:48:1f:77:5c:98:de:74:41:3e:47: 87:5c:e3:96:57:3f:c9:1f:19:cb:72:bc:93:d2:5e: 05:d4:a6:80:8d:f2:8a:41:77:53:3a:f7:fe:4e:c5: 10:42:63:b8:66:98:8a:51:06:c2:17:f5:6a:03:7b: 18:4e:ff:60:58:ca:04:22:a2:56:59:7c:43:40:15: 5d:c6:d3:b0:64:2f:ee:be:ae:4a:91:eb:36:82:28: 56:68:af:27:90:2a:58:ab:f8:db:36:5a:38:d3:16: ca:d4:84:68:75:35:9d:c8:89:42:a6:00:d5:d2:b0: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CB:DF:B2:30:0D:A2:DF:73:FC:34:7B:42:8D:82:91:17:77:E4:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl X509v3 Authority Key Identifier: keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.152.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cb:49:b7:c2:77:e6:09:a4:42:5a:f7:9c:a4:14:2c:a0:ef: 2d:5f:f5:27:bc:7a:37:dc:0e:95:84:d2:6a:24:7a:81:fc:ff: 8f:82:c3:37:69:7f:ce:e7:6b:1c:a3:9d:f1:c3:26:d8:58:30: c4:98:1d:01:ee:eb:dd:11:fc:36:bb:1d:9f:75:48:0f:20:59: a3:04:e4:34:d5:5c:89:31:a6:9e:ef:e4:24:43:ec:6b:cf:49: 87:bd:0e:d6:a9:a9:a5:fe:36:3d:d2:0c:84:99:56:3e:da:d5: 43:3f:f3:e2:b6:1a:49:4d:93:4a:14:f8:1a:94:fa:29:f8:d7: fa:a1:57:1f:d4:b3:8a:b7:78:91:7b:c1:71:57:02:e8:17:96: 2f:60:2e:dc:83:03:fe:a1:18:1c:3a:03:ac:a7:0c:e4:d7:75: 0e:8f:c3:3a:81:98:12:15:ae:64:a7:e3:8f:23:bc:c1:24:5f: f4:77:af:a3:5c:27:ba:2f:a1:c9:32:62:44:e6:2e:71:04:4b: de:8f:3f:a7:24:9c:62:ee:7e:d3:f7:8d:f4:01:6b:06:ce:52: 5f:29:ae:d3:37:02:cb:0e:19:fb:93:8e:6f:4a:e3:b2:e6:61: 70:2e:d9:b3:e7:a7:14:ca:00:bd:7e:75:2b:1a:92:73:41:c9: c1:e8:d1:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGufkRxEyNBGqgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgx ZjNmMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZjgxNWVjODktNzE3NS00NTkzLWE5NGQtMjA4NTJmMTU4ZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGi1T7Hr/3qGPamOP+wodomTF7Y78akDzapn fZ6K8gnyaEw4kScxcXbdHGiw5N4NbA393UY4mwfKDnA1ymjGJJ9FGwu1rOOZiGND VTNKTu44iCb3ZJj5YB7BvjCmORobYckdMhTrK2Wz5j4iM27U9ZitNRYrIfDtTMKn MeBifJL2H14E0b+nyKiZc0gfd1yY3nRBPkeHXOOWVz/JHxnLcryT0l4F1KaAjfKK QXdTOvf+TsUQQmO4ZpiKUQbCF/VqA3sYTv9gWMoEIqJWWXxDQBVdxtOwZC/uvq5K kes2gihWaK8nkCpYq/jbNlo40xbK1IRodTWdyIlCpgDV0rAqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfL37IwDaLfc/w0e0KNgpEXd+RmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Vh ZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvYzdmNTZhNjktMGMzYy0z N2U1LTgwZTEtMzJjMzBlNzg4OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIy MjEtYjAwYmZjMTgxZjNmL2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4 MWYzZi5jcmwwHwYDVR0jBBgwFoAUv+4sp0Nt2qgrIMzjrx/bklO5H3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBi ZmMxODFmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPLSbfCd+YJpEJa95ykFCyg7y1f9Se8ejfcDpWE0mokeoH8/4+Cwzdp f87naxyjnfHDJthYMMSYHQHu690R/Da7HZ91SA8gWaME5DTVXIkxpp7v5CRD7GvP SYe9DtapqaX+Nj3SDISZVj7a1UM/8+K2GklNk0oU+BqU+in41/qhVx/Us4q3eJF7 wXFXAugXli9gLtyDA/6hGBw6A6ynDOTXdQ6PwzqBmBIVrmSn448jvMEkX/R3r6Nc J7ovockyYkTmLnEES96PP6cknGLuftP3jfQBawbOUl8prtM3AssOGfuTjm9K47Lm YXAu2bPnpxTKAL1+dSsaknNBycHo0Ws= -----END CERTIFICATE-----Generated at Sun Jun 29 06:01:56 2025 by rpki-client