$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/bfb0b92d-551e-34a0-8522-b63228f85eec.roa File: bfb0b92d-551e-34a0-8522-b63228f85eec.roa (raw, json) Hash identifier: CqO82zdI9WBap516aTsbUpLA0szltVvn0bZqXuDgoX0= Subject key identifier: B1:26:6B:EE:9E:64:45:1B:2B:49:84:A1:83:31:54:87:45:9D:4E:C1 Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Certificate serial: 010D0C9F4328584A9BCB6DB7A2F9C04AC2E4D0A0 Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/bfb0b92d-551e-34a0-8522-b63228f85eec.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 174 IP address blocks: 142.214.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6d:b7:a2:f9:c0:4a:c2:e4:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=2fd1f037-5c17-4aa6-85fa-ae7954faf86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:a0:8f:b3:79:99:68:74:06:d6:ea:62:1f: 60:bb:ac:6a:28:68:f1:99:12:29:ca:9a:aa:af:ed: cd:f4:02:08:a2:02:0a:16:8e:d5:a8:55:a6:83:cd: 5f:e5:49:80:26:73:81:8f:cb:54:34:1f:c3:d4:a0: 34:80:b7:bb:e4:b6:a2:5c:9a:9c:8f:88:61:12:47: 9d:6b:bd:3b:bd:ed:dc:29:be:b9:4c:ba:6e:bc:72: 74:4d:3e:3e:53:ae:a2:53:28:55:03:f0:87:b9:16: aa:bb:53:ae:25:d8:5b:6d:6c:7e:0c:b2:2c:56:95: e1:de:f6:46:53:70:81:a0:ba:48:19:61:37:64:59: 23:38:f9:4c:ac:cb:db:a7:1d:10:33:91:09:bf:aa: ba:3f:15:0a:e6:0d:69:fc:81:08:85:6e:1e:f9:02: b6:c4:38:6e:f1:97:61:c2:4e:01:6a:8d:7f:d3:e6: 2f:af:d7:1d:66:c9:f5:68:34:e2:33:11:d7:57:14: 17:4c:1c:7f:f5:6d:f3:7c:88:e3:ad:f3:cd:09:14: 2a:5e:37:84:64:11:57:97:fb:02:31:d4:ce:cc:72: e7:69:e9:58:9a:7b:db:b7:2d:a6:3d:12:35:6e:10: c4:1d:99:48:ba:36:63:49:d5:a6:cd:5d:08:91:ae: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:26:6B:EE:9E:64:45:1B:2B:49:84:A1:83:31:54:87:45:9D:4E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/bfb0b92d-551e-34a0-8522-b63228f85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl X509v3 Authority Key Identifier: keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer sbgp-ipAddrBlock: critical IPv4: 142.214.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:33:39:36:2a:79:33:11:08:9a:39:10:d8:32:00:be:5c:68: 39:7b:88:ad:f8:bd:9f:09:0b:76:11:40:86:2e:08:fc:f7:91: 2f:1f:d3:cc:46:2e:d5:34:a1:6c:8f:e1:5a:46:2c:1e:19:5d: 6b:6f:e0:39:ad:a5:22:21:da:0b:70:15:7b:fc:e5:c0:07:e8: 0e:a4:10:59:0f:90:8b:e7:c2:19:0a:e9:75:e9:97:c3:c3:79: a9:67:47:ca:f7:42:45:97:1c:22:be:c9:7a:9e:18:d8:a4:c3: 1f:ff:9c:d3:c9:d7:8d:c9:4f:ce:3b:5e:ae:3f:57:59:83:c9: 8b:3d:36:af:9b:2b:8f:39:f7:12:f3:3c:7d:a3:30:f8:71:c1: dc:e0:60:95:37:21:26:bb:9b:0b:04:fa:ab:09:0e:58:59:37: e9:f6:01:8d:15:b7:95:8e:6b:2e:6a:3f:92:c8:fb:dc:46:1d: 2b:a6:c2:fd:82:1b:47:e0:dc:54:da:36:92:2c:e8:1c:36:88: ce:f0:34:db:fc:6d:c0:46:82:f1:43:f7:fc:8c:6a:70:a7:9d: 84:33:94:62:26:6c:49:69:ee:8b:74:4d:85:75:3a:0f:c4:2f: c1:e8:de:4f:17:4b:44:37:a9:f2:16:64:ac:99:2e:2d:34:06: 2f:22:92:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby223ovnASsLk0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3 ODYxMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk MmZkMWYwMzctNWMxNy00YWE2LTg1ZmEtYWU3OTU0ZmFmODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly2gj7N5mWh0BtbqYh9gu6xqKGjxmRIpypqq r+3N9AIIogIKFo7VqFWmg81f5UmAJnOBj8tUNB/D1KA0gLe75LaiXJqcj4hhEked a707ve3cKb65TLpuvHJ0TT4+U66iUyhVA/CHuRaqu1OuJdhbbWx+DLIsVpXh3vZG U3CBoLpIGWE3ZFkjOPlMrMvbpx0QM5EJv6q6PxUK5g1p/IEIhW4e+QK2xDhu8Zdh wk4Bao1/0+Yvr9cdZsn1aDTiMxHXVxQXTBx/9W3zfIjjrfPNCRQqXjeEZBFXl/sC MdTOzHLnaelYmnvbty2mPRI1bhDEHZlIujZjSdWmzV0Ika7ntQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEma+6eZEUbK0mEoYMxVIdFnU7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvYmZiMGI5MmQtNTUxZS0z NGEwLTg1MjItYjYzMjI4Zjg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3 Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4 ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABczOTYqeTMRCJo5ENgyAL5caDl7iK34vZ8JC3YRQIYuCPz3kS8f08xG LtU0oWyP4VpGLB4ZXWtv4DmtpSIh2gtwFXv85cAH6A6kEFkPkIvnwhkK6XXpl8PD ealnR8r3QkWXHCK+yXqeGNikwx//nNPJ143JT847Xq4/V1mDyYs9Nq+bK4859xLz PH2jMPhxwdzgYJU3ISa7mwsE+qsJDlhZN+n2AY0Vt5WOay5qP5LI+9xGHSumwv2C G0fg3FTaNpIs6Bw2iM7wNNv8bcBGgvFD9/yManCnnYQzlGImbElp7ot0TYV1Og/E L8Ho3k8XS0Q3qfIWZKyZLi00Bi8ikhY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:55 2025 by rpki-client