$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa File: bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa (raw, json) Hash identifier: SIbzLQDrqcUWVHVNSzYXn5di+8DKzWOSqKjxNxqJkyQ= Subject key identifier: 58:8B:37:E2:16:01:7B:45:A8:70:92:86:03:FE:AF:67:A1:F2:B5:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AADF12D49482C296A07EF2280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7342 IP address blocks: 216.87.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:2d:49:48:2c:29:6a:07:ef:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=a2343d15-5773-4a31-9c34-54c45a06b221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:8a:0a:d7:3a:3e:a3:7f:87:f0:76:77:c3: e1:98:94:8f:c8:04:1c:f4:25:86:2e:ee:da:65:48: 6e:68:f2:a1:0b:fd:dc:6e:93:d1:bc:c8:b3:15:3d: b6:e1:e6:7f:5c:55:70:be:a6:6f:ee:77:e2:3c:6f: 3a:c7:0d:dd:a5:97:e0:4f:ed:bd:d6:7e:8b:77:a9: 35:a7:a0:e7:d3:e0:55:b3:f0:f9:d0:60:a1:bc:2d: 06:3c:02:75:c1:ff:d8:18:43:53:a1:1e:4b:d9:d8: f6:3b:fd:df:c3:87:14:b1:65:b7:eb:13:2a:6b:15: f3:53:f8:6d:0b:7d:4c:35:9a:1a:f2:7a:68:2e:6f: 2f:13:b9:54:05:64:ed:39:70:57:7f:b1:6f:36:bf: d0:ad:ed:59:9b:ab:f1:5e:0f:ee:a0:14:08:52:d2: 9a:88:7c:91:f8:4a:58:b8:1f:21:23:bd:6e:87:93: 78:6f:6c:0b:19:26:a2:ef:b3:f2:04:be:1c:19:24: 7f:6b:6d:0c:e3:a3:e6:be:d7:d3:74:9a:92:fc:b7: c9:c8:1d:eb:fc:f8:c7:b5:46:52:6a:1b:78:94:51: 05:42:70:1d:5a:99:16:f1:c3:db:7c:0f:33:b6:fb: 3e:61:12:a6:31:6e:a5:00:91:86:c2:c7:a3:24:dc: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:37:E2:16:01:7B:45:A8:70:92:86:03:FE:AF:67:A1:F2:B5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:89:0c:d3:ab:35:ac:ea:82:14:a9:6e:f8:01:c3:7b:f6:68: b3:7d:72:65:59:0c:9a:46:31:01:a9:b3:ea:3a:f6:7a:7a:60: 7a:f4:cf:7a:64:95:04:c4:20:83:b7:63:3f:84:9b:86:9f:fd: f5:fa:b1:6f:a6:71:1c:f1:b3:32:e8:2e:9d:cb:81:2c:1c:9d: d5:92:b5:34:3a:33:11:49:02:81:bd:1f:23:bd:ab:7b:29:81: 0b:d3:54:e2:d7:51:0c:95:10:86:6b:7a:c0:2d:39:2a:eb:b5: 54:9a:8d:52:4a:70:36:fc:7f:fc:52:d7:f1:17:fb:8f:94:1c: e5:ae:67:dc:f4:21:af:53:96:21:04:7f:72:ed:0b:2a:96:d8: 76:df:d6:d3:dd:35:d1:b1:da:0a:b9:55:51:d0:f5:82:2a:d3: ee:36:a7:78:7b:7e:39:37:ff:17:27:84:b4:cc:5d:86:f2:d8: 28:f6:8f:ba:e8:1a:c8:2a:dc:9a:f7:f1:84:5c:6d:81:bb:ab: 72:f9:ee:97:b5:f3:4e:a4:b9:5c:d8:3b:2f:0b:b8:a4:42:48: 3f:b7:fa:7d:f4:df:d3:1b:cd:83:da:e9:d4:cb:2e:5a:07:58: 90:0a:f2:49:44:0b:66:5c:bc:64:5b:86:35:f3:91:09:4c:6c: b9:18:af:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8S1JSCwpagfvIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YTIzNDNkMTUtNTc3My00YTMxLTljMzQtNTRjNDVhMDZiMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx6KCtc6PqN/h/B2d8PhmJSPyAQc9CWGLu7a ZUhuaPKhC/3cbpPRvMizFT224eZ/XFVwvqZv7nfiPG86xw3dpZfgT+291n6Ld6k1 p6Dn0+BVs/D50GChvC0GPAJ1wf/YGENToR5L2dj2O/3fw4cUsWW36xMqaxXzU/ht C31MNZoa8npoLm8vE7lUBWTtOXBXf7FvNr/Qre1Zm6vxXg/uoBQIUtKaiHyR+EpY uB8hI71uh5N4b2wLGSai77PyBL4cGSR/a20M46PmvtfTdJqS/LfJyB3r/PjHtUZS aht4lFEFQnAdWpkW8cPbfA8ztvs+YRKmMW6lAJGGwsejJNwHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiLN+IWAXtFqHCShgP+r2eh8rW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI1YzJlZmMtZTAyMS0z MjE3LTgwZTgtMjZmZTZiMjk3NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGJDNOrNazqghSpbvgBw3v2aLN9cmVZDJpGMQGps+o69np6YHr0z3pk lQTEIIO3Yz+Em4af/fX6sW+mcRzxszLoLp3LgSwcndWStTQ6MxFJAoG9HyO9q3sp gQvTVOLXUQyVEIZresAtOSrrtVSajVJKcDb8f/xS1/EX+4+UHOWuZ9z0Ia9TliEE f3LtCyqW2Hbf1tPdNdGx2gq5VVHQ9YIq0+42p3h7fjk3/xcnhLTMXYby2Cj2j7ro Gsgq3Jr38YRcbYG7q3L57pe1806kuVzYOy8LuKRCSD+3+n3039MbzYPa6dTLLloH WJAK8klEC2ZcvGRbhjXzkQlMbLkYr3I= -----END CERTIFICATE-----Generated at Mon Aug 4 19:10:44 2025 by rpki-client