$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa File: 0545dbf9-118c-39b7-9f00-b538a6304e31.roa (raw, json) Hash identifier: uPf+j7iUSd5CX8SVhgVn3QB+NxnWl4vLLc5jC5zpxsI= Subject key identifier: 39:40:CC:8F:A3:16:99:09:76:32:B8:AE:F1:E3:03:54:BF:AA:F6:04 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AADF125C77C7F26305B8BC32A Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16696 IP address blocks: 67.221.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:25:c7:7c:7f:26:30:5b:8b:c3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=f8905da0-37a1-4b99-8fc6-e9eda40bc318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:0b:c8:7c:00:c1:15:7f:c5:78:f1:f7:3d: 22:73:19:c1:20:33:87:93:df:69:38:ea:cc:06:f0: f2:78:a6:4f:0d:2b:62:a1:ee:2d:d3:4b:95:64:a0: b1:40:4e:11:b6:a5:cc:98:0a:a2:b7:2a:a8:fc:94: af:ca:64:ed:58:52:7c:06:d8:47:24:1c:b7:9a:ef: 86:a4:a2:af:b2:5c:63:2b:e7:c1:95:f1:d1:6f:ab: 58:d0:af:5f:07:de:8d:bb:7d:09:ac:67:bf:aa:da: 7f:bb:f2:78:36:1e:a6:b5:54:2c:ad:db:68:8b:5d: c9:42:29:69:b7:84:21:d5:af:39:da:ab:e9:a2:9d: 5a:ce:a7:9b:2e:3f:81:6e:b6:11:7c:17:73:fb:43: bd:4e:0e:aa:e3:e6:9b:b3:7a:09:5f:fa:88:60:be: 53:f4:54:1b:bd:f1:4f:8b:4f:cf:0d:91:95:46:23: cd:42:88:6a:76:67:ee:94:09:8f:5f:c6:61:88:9c: b4:01:fc:46:9b:00:30:da:32:8d:88:22:c2:fc:44: 00:b5:29:03:c7:0b:9d:52:43:64:38:c0:e1:6f:d1: bf:11:e0:72:5c:c7:b7:ee:98:86:a4:57:8c:54:c1: 78:01:9c:2e:f6:18:9c:d5:54:77:49:a5:09:68:65: c0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:40:CC:8F:A3:16:99:09:76:32:B8:AE:F1:E3:03:54:BF:AA:F6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0c:c1:0d:2c:ec:a5:df:a8:0c:8e:e0:2f:50:1b:ac:ff:8a: 91:e1:59:14:da:dc:5b:4b:51:05:2e:02:a2:4b:45:9d:6b:b2: 9f:c6:19:f2:e6:f0:cc:d0:58:60:d4:ab:78:4d:50:30:2e:09: 95:20:9e:74:19:9a:9d:e6:2e:37:59:92:7b:00:d6:9b:ff:b1: 6a:50:89:7e:89:27:d7:b9:a3:70:1d:0c:14:b7:73:12:12:e5: 4f:a8:59:37:ce:e2:4a:91:13:5f:cc:2a:23:4b:ea:58:f4:0d: 61:d5:44:49:e4:4c:f3:aa:a3:76:b8:e9:2c:be:a5:8b:ee:e5: 3e:d1:07:63:9c:57:c4:c2:3b:97:1d:8c:56:ed:40:08:35:d1: 52:00:f5:8b:36:84:6a:d0:48:aa:e8:77:fb:20:94:8c:46:57: 51:ef:33:d5:fa:6e:f5:05:a8:49:8b:a9:8f:cc:c1:12:78:b4: 82:e1:8f:cb:09:80:e5:78:b0:f0:0b:e8:9d:2f:e2:e7:1a:bb: 62:43:ad:6a:00:d9:93:f5:cf:d1:1b:4a:4b:14:91:26:60:ef: 05:b5:69:5e:0e:cd:52:cc:36:42:e6:24:ec:69:fc:74:64:e6: d8:db:2b:3e:4e:76:ec:56:fc:9b:38:1f:98:5f:ab:b9:f0:fd: b1:a5:2e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SXHfH8mMFuLwyowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Zjg5MDVkYTAtMzdhMS00Yjk5LThmYzYtZTllZGE0MGJjMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAoLyHwAwRV/xXjx9z0icxnBIDOHk99pOOrM BvDyeKZPDStioe4t00uVZKCxQE4RtqXMmAqityqo/JSvymTtWFJ8BthHJBy3mu+G pKKvslxjK+fBlfHRb6tY0K9fB96Nu30JrGe/qtp/u/J4Nh6mtVQsrdtoi13JQilp t4Qh1a852qvpop1azqebLj+BbrYRfBdz+0O9Tg6q4+abs3oJX/qIYL5T9FQbvfFP i0/PDZGVRiPNQohqdmfulAmPX8ZhiJy0AfxGmwAw2jKNiCLC/EQAtSkDxwudUkNk OMDhb9G/EeByXMe37piGpFeMVMF4AZwu9hic1VR3SaUJaGXAoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlAzI+jFpkJdjK4rvHjA1S/qvYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDU0NWRiZjktMTE4Yy0z OWI3LTlmMDAtYjUzOGE2MzA0ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwMwQ0s7KXfqAyO4C9QG6z/ipHhWRTa3FtLUQUuAqJLRZ1rsp/GGfLm 8MzQWGDUq3hNUDAuCZUgnnQZmp3mLjdZknsA1pv/sWpQiX6JJ9e5o3AdDBS3cxIS 5U+oWTfO4kqRE1/MKiNL6lj0DWHVREnkTPOqo3a46Sy+pYvu5T7RB2OcV8TCO5cd jFbtQAg10VIA9Ys2hGrQSKrod/sglIxGV1HvM9X6bvUFqEmLqY/MwRJ4tILhj8sJ gOV4sPAL6J0v4ucau2JDrWoA2ZP1z9EbSksUkSZg7wW1aV4OzVLMNkLmJOxp/HRk 5tjbKz5OduxW/Js4H5hfq7nw/bGlLrs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:30 2025 by rpki-client