$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa File: 87e248c3-d420-3fbb-ad5d-a3530f238550.roa (raw, json) Hash identifier: 5AxkbqXEvX1sJiYVjv9sSzMYNOPdNVK9+VDRfsOOTak= Subject key identifier: 9D:62:F6:76:30:06:29:83:BD:FE:01:21:73:12:18:37:41:05:FB:47 Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Certificate serial: 010D0C9F4328584AB220CBA7C87C16B3CE04CF80 Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 17216 IP address blocks: 162.254.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:cb:a7:c8:7c:16:b3:ce:04:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=c517f6cb-a3c6-404d-a44f-b48e3470881c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:e7:c6:ad:d3:ec:2f:26:06:be:2a:c2:86: 01:85:3e:7f:61:13:c4:ed:ef:74:85:10:42:8f:c4: 1a:ba:c4:c6:5d:23:32:b6:31:b7:26:d1:76:36:59: 5e:a1:47:e3:0b:78:5b:91:ce:fd:75:bf:0d:e3:a7: 36:7c:a7:cf:e5:e7:1d:c9:3d:67:09:80:2c:42:ca: 4e:81:a5:4f:b6:9b:5c:06:05:57:2d:68:e3:0c:3e: 50:c2:00:19:fc:7e:5d:f8:9b:57:9e:ef:71:1f:d1: 14:d1:4b:b3:1d:fc:b5:44:75:65:9c:8c:46:2b:c6: ff:f1:9a:09:62:6a:47:49:01:8c:15:52:79:d4:58: f4:5e:c5:bc:1a:1d:50:41:59:ff:9b:e9:08:e8:de: d2:ee:3c:f2:2f:69:9d:77:ae:a8:71:b9:2c:bd:05: 7d:35:a9:b5:74:f4:cb:f0:17:2b:d2:00:b9:e8:94: 35:f5:72:2a:34:dd:8a:d7:5f:1b:77:7c:75:09:2f: 37:72:97:c3:65:dd:c7:43:37:1d:95:94:aa:e0:9e: 62:e9:d9:82:3b:48:3b:33:28:62:4e:4e:84:c5:dd: 76:d6:7a:77:6e:76:52:44:c7:50:f5:6e:95:ae:4d: 0d:8c:7d:61:b4:b7:0b:c9:96:e2:3a:be:f9:15:76: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:62:F6:76:30:06:29:83:BD:FE:01:21:73:12:18:37:41:05:FB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl X509v3 Authority Key Identifier: keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer sbgp-ipAddrBlock: critical IPv4: 162.254.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4f:9c:30:a4:29:32:93:a9:ec:be:01:47:d2:23:7d:50:59: 63:63:6d:c3:de:fc:3c:9f:f2:16:ae:2c:b0:79:e8:42:a1:c9: 92:27:5d:13:2d:b4:49:cc:c8:f0:26:32:27:cb:f8:96:e6:a1: 65:ba:22:1f:46:e9:10:f1:cd:4b:54:84:32:94:4f:9c:76:4d: 67:32:79:62:e9:f7:8d:5b:68:aa:0f:43:58:09:51:97:5f:f1: 2c:66:ef:d9:32:6c:28:bd:e6:46:2a:98:7e:e1:56:ae:8e:23: f6:f7:f8:60:0e:59:fe:8d:c1:89:50:62:ee:4e:64:10:8c:b3: 6d:37:74:5f:37:20:15:05:47:50:23:5f:71:8e:32:cf:79:06: 70:2b:b1:a5:f9:42:0b:15:60:a8:ae:f6:6d:30:cc:39:7b:32: 57:2d:13:89:70:a7:62:3c:5a:bf:d3:a7:8c:c0:83:7c:e6:f2: cc:5b:96:e2:94:0c:3d:9d:5b:b6:80:5b:ed:b6:87:7b:9c:50: 89:4b:ab:bf:e3:a9:40:11:c9:58:d5:d8:05:28:33:e2:89:3e: d0:3d:9c:6a:0f:b7:4e:50:18:aa:ed:5d:aa:d5:6b:b2:47:30: 11:ea:ea:28:93:cb:0d:2b:a5:9d:fa:72:2f:74:85:36:32:76: be:3b:03:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMunyHwWs84Ez4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2 MjQ3MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzUxN2Y2Y2ItYTNjNi00MDRkLWE0NGYtYjQ4ZTM0NzA4ODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dXnxq3T7C8mBr4qwoYBhT5/YRPE7e90hRBC j8QausTGXSMytjG3JtF2NlleoUfjC3hbkc79db8N46c2fKfP5ecdyT1nCYAsQspO gaVPtptcBgVXLWjjDD5QwgAZ/H5d+JtXnu9xH9EU0UuzHfy1RHVlnIxGK8b/8ZoJ YmpHSQGMFVJ51Fj0XsW8Gh1QQVn/m+kI6N7S7jzyL2mdd66ocbksvQV9Nam1dPTL 8Bcr0gC56JQ19XIqNN2K118bd3x1CS83cpfDZd3HQzcdlZSq4J5i6dmCO0g7Myhi Tk6Exd121np3bnZSRMdQ9W6Vrk0NjH1htLcLyZbiOr75FXb8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1i9nYwBimDvf4BIXMSGDdBBftHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvODdlMjQ4YzMtZDQyMC0z ZmJiLWFkNWQtYTM1MzBmMjM4NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5 YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4 ZGRmZTYyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdPnDCkKTKTqey+AUfSI31QWWNjbcPe/Dyf8hauLLB56EKhyZInXRMt tEnMyPAmMifL+JbmoWW6Ih9G6RDxzUtUhDKUT5x2TWcyeWLp941baKoPQ1gJUZdf 8Sxm79kybCi95kYqmH7hVq6OI/b3+GAOWf6NwYlQYu5OZBCMs203dF83IBUFR1Aj X3GOMs95BnArsaX5QgsVYKiu9m0wzDl7MlctE4lwp2I8Wr/Tp4zAg3zm8sxbluKU DD2dW7aAW+22h3ucUIlLq7/jqUARyVjV2AUoM+KJPtA9nGoPt05QGKrtXarVa7JH MBHq6iiTyw0rpZ36ci90hTYydr47A8E= -----END CERTIFICATE-----Generated at Sat Aug 9 22:40:04 2025 by rpki-client