$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa File: 2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa (raw, json) Hash identifier: vHou2B2wlCAj98DJ36jvTv7MtZaFWsY1uBslsQ3SeFQ= Subject key identifier: 6E:0A:BA:92:D4:24:A7:93:C3:F2:45:54:29:DE:CF:48:7B:0F:78:F7 Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F43285849F87A932A49EB6FB9CB8BD180 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 22135 IP address blocks: 173.242.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:93:2a:49:eb:6f:b9:cb:8b:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=8d769137-cf7c-49fc-ac8b-bcd2b77c9ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:a5:80:97:6b:6d:5f:a3:f3:6b:e6:ed:08: 12:1c:47:c8:c6:e3:c2:4b:07:b9:69:81:a7:66:f7: b9:20:60:71:ad:77:bf:b5:7b:06:01:1e:c4:a2:62: dc:e1:6b:5c:9e:0d:21:6d:e4:4b:fd:c7:3c:66:8c: c5:cf:78:14:31:0b:fd:24:1e:70:b5:73:f2:ba:08: 1e:18:1a:24:70:3a:da:e4:ce:15:a7:0b:32:3c:67: 08:bc:2d:52:7f:74:53:2f:a2:4c:08:0a:6e:21:47: 39:d4:a0:4d:8e:78:a8:14:40:fb:c9:49:8a:97:58: 3d:14:e7:da:0b:d2:56:7f:04:8e:59:af:83:4a:8d: 76:0a:39:b0:9d:fb:4e:35:5c:e6:f1:a9:bb:3e:06: c7:41:1e:85:32:b9:f4:93:31:ae:b9:ac:c0:5b:c9: 18:d7:b8:c9:8d:5e:34:2d:06:19:d4:56:93:88:8e: 58:82:fd:f7:48:3c:f5:a5:bd:24:23:af:2e:dd:28: 7a:33:be:02:6f:90:86:4b:fc:ec:65:f1:78:c4:fa: 87:0c:90:62:32:1d:c0:2b:be:15:4b:83:b5:df:b6: 0f:c5:87:55:73:65:f1:e5:89:98:ca:d4:e9:da:05: fe:05:9e:ae:f0:9f:01:e0:ad:7a:3a:c8:bd:27:3c: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0A:BA:92:D4:24:A7:93:C3:F2:45:54:29:DE:CF:48:7B:0F:78:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:35:b4:c2:3d:13:5d:b2:1e:f3:62:67:b2:0d:67:41:01:43: c9:90:e9:57:8f:03:b5:31:fd:31:28:ba:67:26:c9:91:97:c9: 4d:63:bc:f3:56:91:0a:a1:5e:2f:4b:34:b9:45:15:c4:de:9e: dc:3b:09:c2:24:a9:e1:9e:66:87:f8:60:0f:0d:bc:d0:cb:96: f1:cd:ab:55:b1:d4:dd:10:df:00:dc:4c:55:14:41:14:94:cb: 3b:04:a2:b8:ed:45:fa:d2:6e:38:59:e2:0f:88:c2:eb:40:a1: e8:8a:30:98:1b:4b:c6:20:b8:0a:0b:66:73:18:0c:19:8b:d9: e1:af:91:57:32:50:55:a2:e2:6b:7f:2b:d5:dc:8f:c5:e8:8d: 54:af:c1:74:66:c9:85:76:18:15:58:74:25:62:b5:66:32:55: 29:30:ec:15:a0:64:6f:be:5e:33:67:b7:d7:9f:c7:86:d0:15: 30:1f:19:0f:3a:3b:6b:2a:e3:62:af:0b:1c:37:ca:d8:06:4f: ea:f7:c2:c2:28:87:cf:16:ae:2f:1e:85:4f:e4:d5:e3:aa:98: 4d:9d:40:1d:ee:14:98:b4:46:7c:ae:1c:1b:63:1a:ac:e5:7f: b2:22:9b:b8:9b:f7:7c:6e:a9:9e:20:c8:e7:2d:60:1e:03:5d: eb:ec:bd:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4epMqSetvucuL0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk OGQ3NjkxMzctY2Y3Yy00OWZjLWFjOGItYmNkMmI3N2M5ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4qlgJdrbV+j82vm7QgSHEfIxuPCSwe5aYGn Zve5IGBxrXe/tXsGAR7EomLc4Wtcng0hbeRL/cc8ZozFz3gUMQv9JB5wtXPyugge GBokcDra5M4VpwsyPGcIvC1Sf3RTL6JMCApuIUc51KBNjnioFED7yUmKl1g9FOfa C9JWfwSOWa+DSo12CjmwnftONVzm8am7PgbHQR6FMrn0kzGuuazAW8kY17jJjV40 LQYZ1FaTiI5Ygv33SDz1pb0kI68u3Sh6M74Cb5CGS/zsZfF4xPqHDJBiMh3AK74V S4O137YPxYdVc2Xx5YmYytTp2gX+BZ6u8J8B4K16Osi9JzwqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4KupLUJKeTw/JFVCnez0h7D3j3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvMmZmM2IyMjctYjQwMC0z Y2I4LWFmMTAtYTM1ZjRhMDgwMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE41tMI9E12yHvNiZ7INZ0EBQ8mQ6VePA7Ux/TEoumcmyZGXyU1jvPNW kQqhXi9LNLlFFcTentw7CcIkqeGeZof4YA8NvNDLlvHNq1Wx1N0Q3wDcTFUUQRSU yzsEorjtRfrSbjhZ4g+IwutAoeiKMJgbS8YguAoLZnMYDBmL2eGvkVcyUFWi4mt/ K9Xcj8XojVSvwXRmyYV2GBVYdCVitWYyVSkw7BWgZG++XjNnt9efx4bQFTAfGQ86 O2sq42KvCxw3ytgGT+r3wsIoh88Wri8ehU/k1eOqmE2dQB3uFJi0RnyuHBtjGqzl f7Iim7ib93xuqZ4gyOctYB4DXevsvcM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:41:37 2025 by rpki-client