$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa File: a257f246-17a5-3501-b8c6-4b74e9394e23.roa (raw, json) Hash identifier: MX6K5CEGy55EpXULcqrVGa2aeyadeLhDNcqN0wbKios= Subject key identifier: 60:AB:EE:7A:AC:E3:6D:8C:BE:98:DC:FE:71:CD:CF:15:8F:57:30:49 Certificate issuer: /CN=34247a70-c93d-4065-9548-762da5a386ba Certificate serial: 010D0C9F4328584A963697A13FDA348AB99D0280 Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 54665 IP address blocks: 72.162.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:97:a1:3f:da:34:8a:b9:9d:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=75a592fc-59da-48b3-ae75-0c2daa471257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:cd:87:bf:b5:23:2e:e3:ad:a2:d0:0b:ec: c3:8e:18:05:18:78:bb:93:74:43:a3:cc:90:69:93: d1:35:9b:3b:ef:8a:74:b2:30:38:51:53:e1:9a:cf: 51:29:a9:95:78:0f:de:af:84:ef:a5:e6:b4:d5:7b: 52:24:b0:c1:3c:8f:86:1d:1a:48:4e:2d:9e:b9:d9: e0:97:ee:36:44:d8:4a:91:9a:31:1d:99:8a:6d:cf: 39:6d:f1:25:7b:4f:f7:11:7a:84:d7:c1:f4:aa:d1: 2c:db:f0:27:6b:b6:14:fb:17:3a:83:54:94:6f:ac: 47:0a:cf:89:aa:12:1b:e4:64:91:bd:f4:1d:4b:78: 7f:bc:35:13:7f:28:98:e7:b9:4d:21:b3:8d:46:e3: 3a:fd:41:af:88:96:72:31:64:93:31:df:70:c6:84: 23:ae:8f:c8:10:35:c6:89:a4:3c:96:b3:1c:33:75: f4:62:20:2d:88:e3:04:07:d8:ae:35:36:1b:64:ad: 8b:53:76:6f:a3:8b:d1:e2:9e:d9:f1:b5:e6:90:92: d3:03:4f:6d:a8:e7:bb:4e:55:ef:5f:91:96:c3:d4: a9:ba:fa:66:50:b8:69:41:e7:b3:26:da:e9:ac:2e: 50:15:22:47:e4:d0:bd:b8:a9:bd:a1:0c:63:ac:56: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AB:EE:7A:AC:E3:6D:8C:BE:98:DC:FE:71:CD:CF:15:8F:57:30:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl X509v3 Authority Key Identifier: keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer sbgp-ipAddrBlock: critical IPv4: 72.162.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fd:e0:85:0d:d9:07:90:1a:2c:2f:93:80:ab:6d:9a:77:20: 1b:48:75:c6:62:28:fe:06:d8:9b:15:71:9b:32:60:0b:9c:a9: 9b:a6:31:e5:4f:29:78:03:80:d3:07:eb:bd:ac:e1:42:47:42: d1:66:d0:3e:2c:c4:5b:5c:07:b9:8b:1f:8f:e1:98:fc:b3:a7: 55:60:56:f1:9e:75:d9:cc:9f:65:d3:6c:82:c2:e4:c3:b2:5d: f0:bc:70:73:74:c8:c1:f4:b5:30:e6:65:26:bb:cc:6d:37:c4: 07:65:48:3d:74:e8:57:75:c2:04:b2:d8:d9:27:53:21:2b:e3: c3:c3:86:7e:74:35:b7:9e:af:e5:40:fd:bb:4e:bb:d9:3a:8a: 44:c7:c5:84:49:0f:da:ed:c1:af:e0:b3:a3:25:e5:23:e4:94: 4c:1c:15:87:d2:8d:b6:2f:99:72:a3:e3:8f:cb:a2:26:83:71: 34:7d:13:00:8a:53:0f:71:f6:83:53:70:10:f1:a4:2f:38:81: 47:c0:f6:45:9f:ab:69:41:76:de:56:50:11:78:95:28:00:af: 69:4b:6b:b7:ea:44:47:5f:fd:23:b5:aa:8e:7b:38:de:a5:2b: ed:ea:c4:cd:7c:52:31:6f:0f:85:98:00:8c:78:26:40:87:43: 00:ca:e3:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpehP9o0irmdAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyNDdhNzAtYzkzZC00MDY1LTk1NDgtNzYyZGE1YTM4 NmJhMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NzVhNTkyZmMtNTlkYS00OGIzLWFlNzUtMGMyZGFhNDcxMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitLNh7+1Iy7jraLQC+zDjhgFGHi7k3RDo8yQ aZPRNZs774p0sjA4UVPhms9RKamVeA/er4Tvpea01XtSJLDBPI+GHRpITi2eudng l+42RNhKkZoxHZmKbc85bfEle0/3EXqE18H0qtEs2/Ana7YU+xc6g1SUb6xHCs+J qhIb5GSRvfQdS3h/vDUTfyiY57lNIbONRuM6/UGviJZyMWSTMd9wxoQjro/IEDXG iaQ8lrMcM3X0YiAtiOMEB9iuNTYbZK2LU3Zvo4vR4p7Z8bXmkJLTA09tqOe7TlXv X5GWw9SpuvpmULhpQeezJtrprC5QFSJH5NC9uKm9oQxjrFYmpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCr7nqs422Mvpjc/nHNzxWPVzBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0 N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVhMzg2YmEvYTI1N2YyNDYtMTdhNS0z NTAxLWI4YzYtNGI3NGU5Mzk0ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzQyNDdhNzAtYzkzZC00MDY1LTk1 NDgtNzYyZGE1YTM4NmJhLzM0MjQ3YTcwLWM5M2QtNDA2NS05NTQ4LTc2MmRhNWEz ODZiYS5jcmwwHwYDVR0jBBgwFoAUpsEb1rclWtCkwZuf94Ui0ZNhSYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJk YTVhMzg2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSKIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP94IUN2QeQGiwvk4CrbZp3IBtIdcZiKP4G2JsVcZsyYAucqZumMeVP KXgDgNMH672s4UJHQtFm0D4sxFtcB7mLH4/hmPyzp1VgVvGeddnMn2XTbILC5MOy XfC8cHN0yMH0tTDmZSa7zG03xAdlSD106Fd1wgSy2NknUyEr48PDhn50Nbeer+VA /btOu9k6ikTHxYRJD9rtwa/gs6Ml5SPklEwcFYfSjbYvmXKj44/LoiaDcTR9EwCK Uw9x9oNTcBDxpC84gUfA9kWfq2lBdt5WUBF4lSgAr2lLa7fqREdf/SO1qo57ON6l K+3qxM18UjFvD4WYAIx4JkCHQwDK4yk= -----END CERTIFICATE-----Generated at Wed Aug 6 19:30:51 2025 by rpki-client