$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa File: 609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa (raw, json) Hash identifier: L0eAvxwVkeDmE/UfA0EdmoUwHM8nuE+sfyRuYJ3Gh/8= Subject key identifier: F6:B2:7F:14:85:A3:14:BF:A1:C5:AD:13:1E:BD:64:71:6F:70:69:3E Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584A82AB4A1C4D2ABAEAD9DA6740 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 394002 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4a:1c:4d:2a:ba:ea:d9:da:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=52e98d3d-02a2-4ef2-b723-7bac314b5f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:7a:f3:07:7f:d6:c7:77:3b:ff:6e:c1:73: 52:e5:a2:d6:58:30:51:9e:95:ab:d7:13:fa:c1:0c: a5:79:76:37:a2:ba:29:0c:de:72:a5:8d:9f:de:89: 4c:ad:04:b7:a2:22:6b:90:6f:48:93:ab:27:df:36: bc:41:36:fb:9b:33:0f:ad:30:64:3c:fb:36:34:a1: 04:fa:20:9b:66:df:58:a8:e5:16:e4:c3:14:43:4f: 69:38:d1:e5:56:a0:ef:d1:1d:ec:a0:ac:be:e6:e4: 71:03:b1:ae:30:aa:a3:30:c0:8f:22:94:13:64:6e: bd:d5:f4:95:d4:90:04:c3:71:d7:a4:1e:e6:4f:c1: f8:26:ce:ca:6a:44:1b:36:61:1c:bc:bb:83:15:49: 68:6d:49:cd:f7:c3:9f:9e:99:0e:7b:da:b2:98:68: 39:52:8a:45:b7:a6:d6:df:b0:74:61:1b:68:0b:0e: bd:46:3d:e8:61:46:3a:f7:36:70:88:15:71:9a:47: 3f:57:47:c7:dd:d6:e0:7a:e1:93:8a:07:94:fe:0f: 19:1d:75:7e:ea:80:46:07:b1:7f:b6:54:3d:d1:f9: ba:2b:20:d5:b2:e7:9d:31:05:36:43:7e:cd:26:a6: 2b:e5:51:8c:be:67:57:bb:df:68:54:20:59:d6:ba: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B2:7F:14:85:A3:14:BF:A1:C5:AD:13:1E:BD:64:71:6F:70:69:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:72:5e:e5:02:7c:c9:fb:55:5e:1d:0d:55:df:2e:ca:d7:71: 18:5b:7e:3d:57:76:10:65:c5:b6:62:49:3c:7a:90:24:49:2a: 4d:fd:73:9a:4f:b5:28:94:8d:24:3b:02:92:29:db:3a:19:44: 15:d2:88:18:5a:e7:1f:d5:4c:3b:9a:a8:56:ae:03:67:07:98: 2d:a7:fa:fd:37:c1:72:b7:80:ac:cd:70:cc:27:2a:9a:e1:09: f4:bc:be:a0:c8:1b:52:43:ad:bc:b9:7f:f2:5f:e5:cd:bc:d0: 73:ec:1c:1e:49:6b:ca:4f:f0:03:37:a1:e7:9d:37:ef:b2:f0: 18:42:7b:5f:09:99:af:7f:73:17:76:a6:14:5c:a6:81:1c:ee: df:97:ec:00:e1:89:04:6f:13:f3:19:ec:6e:a4:21:44:2b:82: 5f:88:7d:05:b6:8b:7d:a2:aa:f0:77:a8:60:f3:ea:37:25:38: a2:a2:56:b7:22:ea:02:cb:36:5f:08:eb:aa:b2:f2:4c:b3:e9: f2:b3:46:0d:9c:75:2c:8c:13:e2:42:b1:af:e7:75:6a:e1:4c: 58:40:87:d3:bd:fa:cf:a3:f4:9f:64:81:2a:e4:72:49:0f:61: b5:64:e3:9a:68:06:68:ec:62:fb:b7:49:08:e1:e4:ef:4a:a4: 7f:53:4e:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0ocTSq66tnaZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NTJlOThkM2QtMDJhMi00ZWYyLWI3MjMtN2JhYzMxNGI1ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DF68wd/1sd3O/9uwXNS5aLWWDBRnpWr1xP6 wQyleXY3oropDN5ypY2f3olMrQS3oiJrkG9Ik6sn3za8QTb7mzMPrTBkPPs2NKEE +iCbZt9YqOUW5MMUQ09pONHlVqDv0R3soKy+5uRxA7GuMKqjMMCPIpQTZG691fSV 1JAEw3HXpB7mT8H4Js7KakQbNmEcvLuDFUlobUnN98OfnpkOe9qymGg5UopFt6bW 37B0YRtoCw69Rj3oYUY69zZwiBVxmkc/V0fH3dbgeuGTigeU/g8ZHXV+6oBGB7F/ tlQ90fm6KyDVsuedMQU2Q37NJqYr5VGMvmdXu99oVCBZ1rpYXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPayfxSFoxS/ocWtEx69ZHFvcGk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNjA5ZWMxZTAtNDA4Yi0z YmZkLTk3NmItM2QwY2NiZDI5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZyXuUCfMn7VV4dDVXfLsrXcRhbfj1XdhBlxbZiSTx6kCRJKk39c5pP tSiUjSQ7ApIp2zoZRBXSiBha5x/VTDuaqFauA2cHmC2n+v03wXK3gKzNcMwnKprh CfS8vqDIG1JDrby5f/Jf5c280HPsHB5Ja8pP8AM3oeedN++y8BhCe18Jma9/cxd2 phRcpoEc7t+X7ADhiQRvE/MZ7G6kIUQrgl+IfQW2i32iqvB3qGDz6jclOKKiVrci 6gLLNl8I66qy8kyz6fKzRg2cdSyME+JCsa/ndWrhTFhAh9O9+s+j9J9kgSrkckkP YbVk45poBmjsYvu3SQjh5O9KpH9TTqQ= -----END CERTIFICATE-----Generated at Sat Aug 9 05:36:44 2025 by rpki-client