$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/b46460c6-16e8-3a48-8444-3a9c50536a3e.roa File: b46460c6-16e8-3a48-8444-3a9c50536a3e.roa (raw, json) Hash identifier: pX78ecLCRQ6Wyuc5H6F0SEHZ+zwvaPLdJVr4DlMYyJw= Subject key identifier: 63:78:8C:5A:E1:B1:5C:D9:2B:26:02:24:4C:1F:C4:26:19:17:DC:E0 Certificate issuer: /CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Certificate serial: 010D0C9F4328584A146562074150AF96018B2B00 Authority key identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/b46460c6-16e8-3a48-8444-3a9c50536a3e.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 207.167.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:62:07:41:50:af:96:01:8b:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=2dc5efed-caf2-4b1c-b3ef-0233dd9d455c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:a9:f8:97:4c:3d:66:63:5c:a2:f6:a2:29: 07:cf:b8:52:4d:b6:92:e7:32:07:1e:d9:d1:7a:53: 2c:4f:00:97:29:82:cf:e6:b7:ac:94:57:28:30:a0: 97:75:1b:e5:46:3e:d1:fe:64:45:6f:e8:3d:d9:40: f2:d9:b8:ac:06:68:6f:53:44:d2:77:3d:b2:b9:45: 51:63:d3:68:5b:37:0f:44:40:65:70:9b:03:1b:f6: 1a:e3:a8:15:17:cb:33:de:23:75:b6:bf:5a:48:f8: 49:98:c1:3f:47:3c:5c:fe:3a:21:ac:1a:0f:8f:e4: 44:7f:6a:96:a5:cd:5f:ff:d7:c5:64:47:be:29:3a: 9c:71:7b:4c:db:a5:0a:5c:d1:d9:90:36:ba:a2:bc: 5f:f5:2b:24:2d:21:24:b3:0f:6d:3b:2f:c8:08:38: 24:3d:ce:5d:3b:5b:45:79:a3:31:c4:3c:08:a1:9f: f8:19:31:08:b2:ef:7e:7e:60:3c:4e:1d:b1:65:ce: 07:5b:1e:93:a8:0e:7b:0f:ed:4f:fc:c9:81:5c:88: 39:08:b3:d7:75:60:2c:97:fe:06:7e:bc:55:69:02: 49:3f:77:ac:56:ea:83:7f:30:ec:a3:14:62:ef:d8: 81:85:7e:e5:2d:7b:0a:82:9a:e3:4c:28:80:e8:85: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:8C:5A:E1:B1:5C:D9:2B:26:02:24:4C:1F:C4:26:19:17:DC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/b46460c6-16e8-3a48-8444-3a9c50536a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl X509v3 Authority Key Identifier: keyid:EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer sbgp-ipAddrBlock: critical IPv4: 207.167.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:52:fa:3b:1a:31:30:d8:03:0d:50:f6:a2:c6:06:d5:cb:74: 0d:5c:50:1e:4c:c5:9f:17:8c:c0:8c:d5:3f:4c:20:c7:38:55: 3a:56:1a:65:90:fd:f8:25:fd:15:e6:55:4d:51:f2:ec:f9:b8: 18:2e:0a:42:48:e9:f6:c0:2b:81:2b:a1:05:00:fe:01:5a:5e: 4c:6c:00:73:9d:09:1e:f7:d7:e2:a6:86:1b:08:72:87:a6:34: 7c:1c:fa:86:1e:51:ba:2f:a2:3d:bb:e0:af:71:0d:b7:1a:66: d2:f0:ae:c6:e4:06:a5:25:63:da:7a:33:86:57:94:7e:3f:1e: 99:d8:ea:4a:86:bd:fe:d0:74:d5:70:11:f9:8a:87:2d:72:c9: ee:f9:bf:03:8a:c6:d4:c7:43:86:ea:cf:3f:ca:44:8c:75:43: d1:d2:02:58:69:42:cf:69:6a:da:27:32:ee:1a:20:49:d7:57: df:f1:82:75:7a:88:91:fb:33:51:94:15:98:41:52:a5:79:3c: 8f:95:0c:ad:17:2c:d6:e8:06:16:7e:b1:ad:cb:41:5b:67:e9: 73:61:51:c4:7a:57:c7:90:36:ae:24:ee:f1:7a:9a:de:e5:e8: be:20:55:3b:38:a3:ae:22:ca:69:9b:97:5c:f6:66:c8:4c:85: f0:55:06:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWIHQVCvlgGLKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyNjBmMDQtZDg1Ni00ZTlmLTlkY2MtZjE2ZDkzYzNh YjU2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MmRjNWVmZWQtY2FmMi00YjFjLWIzZWYtMDIzM2RkOWQ0NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNSp+JdMPWZjXKL2oikHz7hSTbaS5zIHHtnR elMsTwCXKYLP5reslFcoMKCXdRvlRj7R/mRFb+g92UDy2bisBmhvU0TSdz2yuUVR Y9NoWzcPREBlcJsDG/Ya46gVF8sz3iN1tr9aSPhJmME/Rzxc/johrBoPj+REf2qW pc1f/9fFZEe+KTqccXtM26UKXNHZkDa6orxf9SskLSEksw9tOy/ICDgkPc5dO1tF eaMxxDwIoZ/4GTEIsu9+fmA8Th2xZc4HWx6TqA57D+1P/MmBXIg5CLPXdWAsl/4G frxVaQJJP3esVuqDfzDsoxRi79iBhX7lLXsKgprjTCiA6IXKxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN4jFrhsVzZKyYCJEwfxCYZF9zgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2 MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNjM2FiNTYvYjQ2NDYwYzYtMTZlOC0z YTQ4LTg0NDQtM2E5YzUwNTM2YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWMyNjBmMDQtZDg1Ni00ZTlmLTlk Y2MtZjE2ZDkzYzNhYjU2L2FjMjYwZjA0LWQ4NTYtNGU5Zi05ZGNjLWYxNmQ5M2Mz YWI1Ni5jcmwwHwYDVR0jBBgwFoAU7yEh5J/N86BToYwMH70Ba5lsi5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZk OTNjM2FiNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdS+jsaMTDYAw1Q9qLGBtXLdA1cUB5MxZ8XjMCM1T9MIMc4VTpWGmWQ /fgl/RXmVU1R8uz5uBguCkJI6fbAK4EroQUA/gFaXkxsAHOdCR731+KmhhsIcoem NHwc+oYeUbovoj274K9xDbcaZtLwrsbkBqUlY9p6M4ZXlH4/HpnY6kqGvf7QdNVw EfmKhy1yye75vwOKxtTHQ4bqzz/KRIx1Q9HSAlhpQs9patonMu4aIEnXV9/xgnV6 iJH7M1GUFZhBUqV5PI+VDK0XLNboBhZ+sa3LQVtn6XNhUcR6V8eQNq4k7vF6mt7l 6L4gVTs4o64iymmbl1z2ZshMhfBVBmo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:36:25 2025 by rpki-client