$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: +tVPEridEm00A1Oo2yVAqXWozh2lYw8Hf84UEeMxYW0= Subject key identifier: 5E:16:1D:B7:2D:F3:45:BF:68:23:7F:F3:EE:0A:86:A6:DC:E5:EA:3E Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584A23C0041B0BA11C2B159CF100 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 923 IP address blocks: 207.167.121.0/24 maxlen: 24 2602:fbf5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:04:1b:0b:a1:1c:2b:15:9c:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=7b5c7de6-22ad-46f6-b54d-8bdac61691f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:2e:24:4d:a7:47:75:57:41:5c:65:83:60: f1:90:d1:95:ab:7e:8d:0d:42:42:dc:5c:30:56:00: 28:07:86:36:7d:b2:6a:d6:e7:41:9c:04:75:1d:88: b8:46:f4:6c:bf:0d:21:2a:e7:03:92:f0:ed:c9:04: bb:a1:e4:c2:38:ce:ef:b2:33:d1:b2:98:22:84:df: 25:6f:08:f9:01:03:2e:82:2b:98:8c:6e:5e:ae:a3: f1:fd:49:95:97:fa:07:8e:21:d7:74:a0:55:e5:32: 69:db:24:5f:ab:d6:a9:02:3d:30:fb:8f:2a:91:ea: 61:76:c9:19:a4:f8:95:16:10:04:a7:c4:9a:64:4f: 06:f2:96:e3:7b:1f:9d:8a:08:27:3b:9e:e9:ed:8c: 0b:38:ce:18:2c:0f:6d:33:e9:0f:57:b5:bf:ac:98: bf:58:ed:45:0d:75:96:ca:7b:69:15:5e:b0:9e:6a: 07:b9:78:d5:66:1a:3b:39:ae:04:03:f9:ed:d9:73: 3c:23:be:1a:50:8f:83:8a:c3:c7:ed:33:f7:70:34: dc:15:3a:28:06:21:16:5e:b9:fd:77:1d:11:00:ae: 5c:98:74:14:11:49:a6:cc:9b:5c:f8:2b:ea:68:00: 68:d3:7b:ee:33:24:fb:28:b3:71:db:13:16:cc:1a: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:16:1D:B7:2D:F3:45:BF:68:23:7F:F3:EE:0A:86:A6:DC:E5:EA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 IPv6: 2602:fbf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5c:b8:1f:5d:1e:b5:54:7b:c3:13:2c:17:19:9d:f5:d3:64: a9:c8:12:7a:28:c9:58:52:ca:7e:2d:92:65:bd:ac:ab:86:9f: 09:e9:02:95:0e:d9:5b:17:c6:8b:e5:5f:65:02:f0:88:25:0e: 4e:b6:f9:44:b7:16:a7:67:3d:32:3f:74:8a:4a:af:e5:63:9b: b6:60:76:91:52:d1:6c:0d:1e:a5:b4:0f:2e:1d:f3:01:65:47: da:b1:52:07:70:d3:a4:7b:c2:a6:cd:ad:22:71:5e:ae:94:f6: 22:df:21:b7:61:97:65:f6:15:4c:31:f4:6a:a4:10:3c:78:1c: 11:8f:72:ad:9c:2f:9c:9c:4d:79:57:3f:e0:d5:56:61:d7:a4: f5:99:8c:3b:99:fd:00:8a:71:c1:be:48:f3:8b:47:e2:b2:a0: 31:26:88:e0:80:95:12:f5:0c:33:88:ec:55:46:88:67:41:83: 18:d0:52:5e:ac:b5:99:b0:e3:96:07:f8:32:7b:d2:5e:c8:f0: eb:a3:ff:28:a1:f2:fe:cb:a0:5c:ee:86:eb:6f:f0:63:33:58: 7c:b6:6b:d7:7b:f4:a8:ca:de:20:ba:d8:fd:9b:2f:5c:b4:69: 96:e5:1f:a2:d0:e1:d9:0a:9d:c8:3a:ef:05:be:32:fc:1d:dd: a2:53:6d:af -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEojwAQbC6EcKxWc8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk N2I1YzdkZTYtMjJhZC00NmY2LWI1NGQtOGJkYWM2MTY5MWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksMuJE2nR3VXQVxlg2DxkNGVq36NDUJC3Fww VgAoB4Y2fbJq1udBnAR1HYi4RvRsvw0hKucDkvDtyQS7oeTCOM7vsjPRspgihN8l bwj5AQMugiuYjG5erqPx/UmVl/oHjiHXdKBV5TJp2yRfq9apAj0w+48qkephdskZ pPiVFhAEp8SaZE8G8pbjex+diggnO57p7YwLOM4YLA9tM+kPV7W/rJi/WO1FDXWW yntpFV6wnmoHuXjVZho7Oa4EA/nt2XM8I74aUI+DisPH7TP3cDTcFTooBiEWXrn9 dx0RAK5cmHQUEUmmzJtc+CvqaABo03vuMyT7KLNx2xMWzBqUEQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFF4WHbct80W/aCN/8+4Khqbc5eo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAz6d5MA4E AgACMAgDBgAmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoXLgfXR61VHvDEywXGZ3102SpyBJ6KMlY Usp+LZJlvayrhp8J6QKVDtlbF8aL5V9lAvCIJQ5OtvlEtxanZz0yP3SKSq/lY5u2 YHaRUtFsDR6ltA8uHfMBZUfasVIHcNOke8Kmza0icV6ulPYi3yG3YZdl9hVMMfRq pBA8eBwRj3KtnC+cnE15Vz/g1VZh16T1mYw7mf0AinHBvkjzi0fisqAxJojggJUS 9QwziOxVRohnQYMY0FJerLWZsOOWB/gye9JeyPDro/8oofL+y6Bc7obrb/BjM1h8 tmvXe/Soyt4gutj9my9ctGmW5R+i0OHZCp3IOu8FvjL8Hd2iU22v -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:41 2025 by rpki-client