$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa File: 42972859-eb24-3402-bd6b-51e9207a7162.roa (raw, json) Hash identifier: P/vGO12rh0LgMto7KJc5Gh53/0xMgWP1JHIiv0SqeDU= Subject key identifier: 48:2B:5B:DF:C6:CE:4B:04:73:96:4E:0B:11:08:DB:CE:7E:F5:91:AF Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584A7D15FB4F77E476FB1B34FE80 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 11067 IP address blocks: 67.219.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:fb:4f:77:e4:76:fb:1b:34:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=acc206be-6370-40f4-a278-92419d762267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:9e:9a:41:10:ad:eb:34:af:5d:2f:fc:25: 3e:f6:75:b3:3b:bf:e6:fb:68:1a:3c:7c:62:ef:2c: 62:b8:b1:d1:80:18:e5:6b:02:82:85:43:52:70:78: 03:f3:9e:d4:3e:c9:29:8e:d3:37:22:0e:c9:49:ea: e3:21:4f:4f:56:3e:1e:39:7e:c4:f5:65:5d:d5:4d: 0d:a6:73:04:2c:79:5c:a9:39:a9:a5:02:0e:51:6e: fc:db:50:68:4e:1e:bc:a2:5a:0e:d1:33:a9:b0:95: 70:36:2b:19:3d:05:7a:c7:35:0b:47:fd:d4:c5:83: ed:8a:6c:e8:93:1d:c0:4c:c3:e3:33:1c:a5:f5:85: e5:25:dd:c4:05:87:4e:22:40:2b:17:ff:62:0a:f6: 5c:8a:23:93:f4:dd:ac:55:27:c8:77:04:b6:e8:0a: 27:82:57:43:29:4a:f6:59:92:1d:83:ce:fd:13:28: 12:30:9d:d8:49:ce:30:5c:52:f2:83:1e:26:41:03: 07:fa:74:cb:b6:05:5b:5a:7e:5f:b4:12:3e:67:1b: 12:97:7a:f4:2c:0a:31:11:84:6a:3d:0a:3f:89:64: 50:94:ad:26:63:24:0a:3e:2f:01:fb:19:07:27:a5: b2:cf:e2:b5:7f:c6:8d:42:6d:07:13:af:15:8c:79: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2B:5B:DF:C6:CE:4B:04:73:96:4E:0B:11:08:DB:CE:7E:F5:91:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: 67.219.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d9:d4:70:1d:7b:2c:83:65:dc:00:38:67:4c:55:f2:f3:56: 47:f0:d9:21:fc:61:c9:6c:99:87:00:f3:9d:a5:a3:44:b6:42: 73:3d:dc:b6:76:1f:7b:d3:f6:72:c9:95:89:1e:27:ad:1d:e0: 9b:e7:94:72:fa:73:43:ca:1a:25:1a:d0:a7:1f:3c:5d:18:29: f4:9e:a3:66:e4:bc:17:07:2b:2d:a4:25:5b:06:6f:3f:c0:1f: 8f:ea:bb:2e:e2:57:ec:c6:dd:3b:4d:3f:eb:32:81:da:36:6c: 6b:52:8a:1e:77:83:2a:dc:5f:4c:56:f9:2a:25:4d:7e:cc:14: 15:89:4e:93:62:82:8e:35:b3:01:be:47:ef:f4:40:69:97:a5: f3:4e:df:d7:21:2b:15:cb:94:11:f8:d4:6a:3c:f5:c1:b2:32: cb:8a:29:2d:70:4c:73:71:01:13:db:17:f9:35:ad:62:fb:29: dd:b9:4a:c7:fe:13:64:86:f1:52:aa:b0:88:0e:eb:ef:f8:5d: 5a:2d:1b:ce:b0:08:a0:98:28:f1:01:98:38:a3:93:8e:63:75: ac:d2:d7:55:84:59:92:29:9a:e3:74:91:6a:e8:4d:5d:bc:66: cc:3d:24:f3:fa:41:81:d9:78:74:e2:43:59:6c:18:8d:c2:a4: bb:b9:ba:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FftPd+R2+xs0/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YWNjMjA2YmUtNjM3MC00MGY0LWEyNzgtOTI0MTlkNzYyMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZGemkEQres0r10v/CU+9nWzO7/m+2gaPHxi 7yxiuLHRgBjlawKChUNScHgD857UPskpjtM3Ig7JSerjIU9PVj4eOX7E9WVd1U0N pnMELHlcqTmppQIOUW7821BoTh68oloO0TOpsJVwNisZPQV6xzULR/3UxYPtimzo kx3ATMPjMxyl9YXlJd3EBYdOIkArF/9iCvZciiOT9N2sVSfIdwS26AongldDKUr2 WZIdg879EygSMJ3YSc4wXFLygx4mQQMH+nTLtgVbWn5ftBI+ZxsSl3r0LAoxEYRq PQo/iWRQlK0mYyQKPi8B+xkHJ6Wyz+K1f8aNQm0HE68VjHnCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgrW9/GzksEc5ZOCxEI285+9ZGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvNDI5NzI4NTktZWIyNC0z NDAyLWJkNmItNTFlOTIwN2E3MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnZ1HAdeyyDZdwAOGdMVfLzVkfw2SH8YclsmYcA852lo0S2QnM93LZ2 H3vT9nLJlYkeJ60d4JvnlHL6c0PKGiUa0KcfPF0YKfSeo2bkvBcHKy2kJVsGbz/A H4/quy7iV+zG3TtNP+sygdo2bGtSih53gyrcX0xW+SolTX7MFBWJTpNigo41swG+ R+/0QGmXpfNO39chKxXLlBH41Go89cGyMsuKKS1wTHNxARPbF/k1rWL7Kd25Ssf+ E2SG8VKqsIgO6+/4XVotG86wCKCYKPEBmDijk45jdazS11WEWZIpmuN0kWroTV28 Zsw9JPP6QYHZeHTiQ1lsGI3CpLu5uiA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:43:05 2025 by rpki-client