$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/a7b07991-276a-397d-8a33-ada4bc735f4f.roa File: a7b07991-276a-397d-8a33-ada4bc735f4f.roa (raw, json) Hash identifier: nF64DBSiRVTXNfqwSbyeKl/nrE59k303uqIc9JhZEJI= Subject key identifier: EC:56:5F:E4:25:40:B6:D2:03:9A:5B:D9:F6:99:1B:A1:BB:1A:3D:75 Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584A5335A8B720D3ED06052C9320 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/a7b07991-276a-397d-8a33-ada4bc735f4f.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 54613 IP address blocks: 142.202.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a8:b7:20:d3:ed:06:05:2c:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=f9e4cf47-4d0c-4835-b177-293d9e4816f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:e9:b4:67:7b:8b:60:9c:b0:c8:42:06:75: 0e:59:c9:1d:47:7b:13:36:41:4d:f1:d7:e9:f2:bc: c7:8a:18:0e:45:74:fd:fe:3b:47:41:ec:8e:b6:59: 70:03:f4:ce:bc:7e:5d:cf:8f:5d:2a:d5:29:2b:25: 2f:70:72:71:ed:80:b9:62:96:e1:dc:c8:03:94:ef: b8:75:c9:f5:ed:55:34:76:d1:4b:25:5b:fb:9e:85: 43:ef:eb:85:0b:82:42:6f:a3:68:00:e9:bf:ee:33: 28:fa:a9:f9:df:76:8b:99:fa:b8:d5:e5:32:a9:d1: 7e:00:fe:a9:6b:6f:3e:18:c6:5b:98:5d:fa:58:c4: 52:c5:c2:37:53:79:28:cf:15:31:9d:ef:be:07:48: b9:36:ca:89:a7:5e:7e:83:94:10:58:4a:cc:de:df: 12:3f:9d:49:1c:7b:84:13:ae:6b:0a:90:e4:59:63: 46:f9:09:cc:48:51:e1:28:dd:6f:66:62:9c:fd:65: 74:d4:ad:8d:5c:65:34:16:a8:a4:e6:c9:b7:e8:29: 9d:75:81:d9:28:b2:bb:c0:e4:0f:d6:d6:b0:1a:a2: fa:47:dc:8b:dd:9c:19:56:0a:78:c8:b7:fd:dd:21: 11:1b:1b:32:85:9e:eb:85:ac:b2:9e:86:aa:9f:ee: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:5F:E4:25:40:B6:D2:03:9A:5B:D9:F6:99:1B:A1:BB:1A:3D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/a7b07991-276a-397d-8a33-ada4bc735f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 142.202.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e1:eb:47:ab:db:dd:e3:83:13:1b:6c:9d:4e:64:7d:0f:42: aa:14:05:41:c9:bb:f9:bd:a4:d1:66:c6:a6:33:10:67:a0:7c: 02:f3:28:9b:70:61:eb:eb:ce:27:a6:52:93:0c:1a:0e:ac:8a: 37:a9:a9:32:71:b3:8f:8a:32:35:9a:47:e8:fe:38:94:23:c7: ba:59:47:60:06:7b:10:9e:f5:bb:cc:6f:06:08:e8:2b:ac:7b: b0:13:80:72:c7:3f:a7:62:d1:41:e4:a1:72:60:64:00:cd:1f: 17:48:ee:8f:25:ee:ac:ce:80:ae:ca:62:97:26:33:c6:60:c7: 15:41:1f:07:8e:28:ea:4c:71:ad:fc:d9:32:ca:70:6c:17:ba: 7a:ca:d2:b6:fa:8a:aa:d1:17:9c:4a:db:10:7e:71:3b:16:0c: fa:0d:15:4c:36:6b:eb:af:92:18:46:d8:40:78:b0:34:64:58: 5a:16:cf:0a:66:eb:39:86:9e:9e:d9:39:d3:0a:c0:cb:fa:c7: 0e:99:00:d3:9a:a0:3c:f6:93:82:fd:13:b6:eb:0c:14:54:03: 63:1b:9d:8e:70:d2:9d:c0:9e:78:8d:49:d9:2f:b8:16:b2:b1: da:06:93:46:37:3e:7a:06:a0:cc:4b:27:9e:b9:be:41:12:b0: 9a:d7:6b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNai3INPtBgUskyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZjllNGNmNDctNGQwYy00ODM1LWIxNzctMjkzZDllNDgxNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDXptGd7i2CcsMhCBnUOWckdR3sTNkFN8dfp 8rzHihgORXT9/jtHQeyOtllwA/TOvH5dz49dKtUpKyUvcHJx7YC5Ypbh3MgDlO+4 dcn17VU0dtFLJVv7noVD7+uFC4JCb6NoAOm/7jMo+qn533aLmfq41eUyqdF+AP6p a28+GMZbmF36WMRSxcI3U3kozxUxne++B0i5NsqJp15+g5QQWErM3t8SP51JHHuE E65rCpDkWWNG+QnMSFHhKN1vZmKc/WV01K2NXGU0Fqik5sm36CmddYHZKLK7wOQP 1tawGqL6R9yL3ZwZVgp4yLf93SERGxsyhZ7rhayynoaqn+6MGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxWX+QlQLbSA5pb2faZG6G7Gj11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvYTdiMDc5OTEtMjc2YS0z OTdkLThhMzMtYWRhNGJjNzM1ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjspSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzh60er293jgxMbbJ1OZH0PQqoUBUHJu/m9pNFmxqYzEGegfALzKJtw YevrziemUpMMGg6sijepqTJxs4+KMjWaR+j+OJQjx7pZR2AGexCe9bvMbwYI6Cus e7ATgHLHP6di0UHkoXJgZADNHxdI7o8l7qzOgK7KYpcmM8ZgxxVBHweOKOpMca38 2TLKcGwXunrK0rb6iqrRF5xK2xB+cTsWDPoNFUw2a+uvkhhG2EB4sDRkWFoWzwpm 6zmGnp7ZOdMKwMv6xw6ZANOaoDz2k4L9E7brDBRUA2MbnY5w0p3AnniNSdkvuBay sdoGk0Y3PnoGoMxLJ565vkESsJrXa1Y= -----END CERTIFICATE-----Generated at Mon Jun 30 08:01:34 2025 by rpki-client