$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/5958f24f-b30c-381d-8c60-7364e5db6c9b.roa File: 5958f24f-b30c-381d-8c60-7364e5db6c9b.roa (raw, json) Hash identifier: oij5w59cpfSJdX1NJreypfODRWLxfpR3etCCbu0GVEg= Subject key identifier: BA:0D:FA:BA:D7:10:2D:BE:24:A2:C6:FE:3C:3C:41:B2:02:8C:7E:6E Certificate issuer: /CN=7d31536a-f667-4473-abbf-040b249fa39f Certificate serial: 010D0C9F4328584A2823EAC176854C7C00655B22 Authority key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/5958f24f-b30c-381d-8c60-7364e5db6c9b.roa Signing time: Wed 11 Jun 2025 14:45:28 +0000 ROA not before: Wed 11 Jun 2025 14:45:28 +0000 ROA not after: Tue 09 Sep 2025 14:45:28 +0000 asID: 393336 IP address blocks: 216.73.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:28:23:ea:c1:76:85:4c:7c:00:65:5b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d31536a-f667-4473-abbf-040b249fa39f Validity Not Before: Jun 11 14:45:28 2025 GMT Not After : Sep 9 14:45:28 2025 GMT Subject: CN=a2a21619-b754-4931-8566-137c5ab17cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:26:4c:b2:08:a1:b9:17:2e:d6:69:5a:12: ce:9f:51:e0:c5:33:32:c0:74:2c:b9:b0:43:81:11: 60:8f:39:6b:b1:59:ae:e7:86:0b:99:6c:39:dc:40: 50:38:d8:46:da:7f:9d:cb:65:41:3d:02:7e:39:24: f2:48:c3:4a:d5:6c:dc:27:4b:5c:ea:90:5c:fe:34: d7:da:77:21:65:a9:20:a7:1a:93:73:d7:00:7f:cd: 6d:32:88:d1:54:55:aa:10:39:08:7e:7d:d5:7e:82: 04:bc:31:74:8a:07:67:66:90:ca:2a:39:13:50:26: 72:fc:e1:95:c2:db:0f:85:a2:fa:44:71:e5:2c:32: 28:07:f3:f9:61:39:69:aa:34:27:32:ea:bf:22:a1: 73:f9:18:ce:cf:7d:f0:6a:8a:2a:ca:c0:f2:92:f5: 4f:c1:66:f7:74:58:ad:05:6c:92:aa:e8:73:84:61: 4c:1e:68:b0:48:a1:c2:4c:40:79:bf:25:e9:2a:a4: d3:d6:2e:a6:ff:2f:60:da:29:1e:8c:dd:7e:f3:bb: 14:fa:10:04:54:ff:fd:59:f2:6d:04:62:66:da:74: 91:c6:5d:3d:9f:1c:60:70:f2:7d:e9:f1:cc:bb:7a: 35:40:59:30:83:4b:9c:c0:16:00:b9:f5:61:61:af: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:FA:BA:D7:10:2D:BE:24:A2:C6:FE:3C:3C:41:B2:02:8C:7E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/5958f24f-b30c-381d-8c60-7364e5db6c9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl X509v3 Authority Key Identifier: keyid:D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer sbgp-ipAddrBlock: critical IPv4: 216.73.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f2:da:c2:45:bc:63:74:c3:64:45:49:6b:0b:58:8f:ef:59: a8:f3:9d:1d:7c:68:14:0c:84:2d:c6:e5:60:5d:5b:f4:92:64: 6f:db:18:ab:d5:6c:4e:2e:6e:ca:69:a6:f9:a5:20:3f:0b:f6: 83:a9:59:d4:54:12:83:45:62:bd:f3:d9:8a:79:bb:0b:4d:14: e7:b4:52:f8:04:36:0d:93:13:5f:9d:58:b2:97:6f:f1:a3:d3: 95:e4:fb:1e:3d:f2:5b:7f:b2:46:b0:fe:ef:75:5b:72:06:03: 6e:e3:48:ad:ff:9e:1c:54:c7:46:fe:01:f7:24:81:2a:53:2e: 73:71:d4:ff:93:9d:24:0e:00:85:88:e9:88:be:54:43:99:6f: 2c:fe:62:ab:bd:02:70:9f:b2:c9:ce:1a:1b:d5:89:4b:ad:48: 62:f5:5f:83:a3:a9:dd:94:c5:c1:a0:11:3c:6d:8e:c3:b5:5e: 29:b6:e6:7d:85:4f:38:49:00:5d:b4:5f:67:03:bf:74:94:90: 5b:26:f4:58:6c:47:9d:b6:ba:c2:42:2a:a3:85:79:9f:52:bb: d4:bd:e0:6f:03:ef:d0:f5:c8:de:0d:e8:fb:fa:e8:08:c0:c4: 85:fe:d1:cd:d3:df:d1:35:94:06:3f:17:ea:7a:26:28:bf:9e: c4:36:69:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEooI+rBdoVMfABlWyIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QzMTUzNmEtZjY2Ny00NDczLWFiYmYtMDQwYjI0OWZh MzlmMB4XDTI1MDYxMTE0NDUyOFoXDTI1MDkwOTE0NDUyOFowLzEtMCsGA1UEAxMk YTJhMjE2MTktYjc1NC00OTMxLTg1NjYtMTM3YzVhYjE3Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnYmTLIIobkXLtZpWhLOn1HgxTMywHQsubBD gRFgjzlrsVmu54YLmWw53EBQONhG2n+dy2VBPQJ+OSTySMNK1WzcJ0tc6pBc/jTX 2nchZakgpxqTc9cAf81tMojRVFWqEDkIfn3VfoIEvDF0igdnZpDKKjkTUCZy/OGV wtsPhaL6RHHlLDIoB/P5YTlpqjQnMuq/IqFz+RjOz33waooqysDykvVPwWb3dFit BWySquhzhGFMHmiwSKHCTEB5vyXpKqTT1i6m/y9g2ikejN1+87sU+hAEVP/9WfJt BGJm2nSRxl09nxxgcPJ96fHMu3o1QFkwg0ucwBYAufVhYa/zSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoN+rrXEC2+JKLG/jw8QbICjH5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZDMx NTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBiMjQ5ZmEzOWYvNTk1OGYyNGYtYjMwYy0z ODFkLThjNjAtNzM2NGU1ZGI2YzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2QzMTUzNmEtZjY2Ny00NDczLWFi YmYtMDQwYjI0OWZhMzlmLzdkMzE1MzZhLWY2NjctNDQ3My1hYmJmLTA0MGIyNDlm YTM5Zi5jcmwwHwYDVR0jBBgwFoAU0tIApymGnDfXKvUTWR9UiOfoZbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZDMxNTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBi MjQ5ZmEzOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2EmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjy2sJFvGN0w2RFSWsLWI/vWajznR18aBQMhC3G5WBdW/SSZG/bGKvV bE4ubspppvmlID8L9oOpWdRUEoNFYr3z2Yp5uwtNFOe0UvgENg2TE1+dWLKXb/Gj 05Xk+x498lt/skaw/u91W3IGA27jSK3/nhxUx0b+AfckgSpTLnNx1P+TnSQOAIWI 6Yi+VEOZbyz+Yqu9AnCfssnOGhvViUutSGL1X4Ojqd2UxcGgETxtjsO1Xim25n2F TzhJAF20X2cDv3SUkFsm9FhsR522usJCKqOFeZ9Su9S94G8D79D1yN4N6Pv66AjA xIX+0c3T39E1lAY/F+p6Jii/nsQ2aVw= -----END CERTIFICATE-----Generated at Sun Jun 15 21:57:17 2025 by rpki-client