$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa File: 9b9b9c14-7c59-311c-b7c4-f4928230b433.roa (raw, json) Hash identifier: 1R+hWNx6W+KRLA9k8mEE9TyInsZQ+bDIGeE9oiUYAFU= Subject key identifier: 50:B9:61:62:EF:41:ED:3A:77:29:76:C1:E6:B7:1D:D9:84:76:38:7E Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F4328584A8B0B631D13E1E380CD518D80 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 8075 IP address blocks: 167.21.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:63:1d:13:e1:e3:80:cd:51:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=eb0c9349-1646-4316-8170-67e94fed9d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1c:bc:32:57:9e:67:05:06:64:05:5b:3a:75: e9:2c:69:72:b8:98:55:e4:df:66:f8:68:ed:9e:83: 78:a7:6e:52:43:15:0e:2b:52:62:bd:ad:4a:73:4d: ed:49:a1:21:b9:74:41:02:44:0a:c2:e9:14:84:94: 80:52:ab:13:82:b4:1e:11:d0:57:6a:cc:20:9d:5d: 13:b7:d7:ff:2a:b4:dc:80:9c:92:7f:68:cd:c8:87: fa:e8:42:b8:d1:92:44:6f:f2:69:23:b0:44:85:5b: 43:b0:90:b2:ac:fb:1d:c3:9f:16:43:81:0e:6b:b3: ed:7e:61:46:55:6d:2c:87:cf:f2:88:7b:ef:87:59: 75:ed:af:84:2f:e3:d8:6c:30:35:ee:f5:bf:64:40: 83:78:07:f6:cc:4a:9b:41:32:8f:83:5f:18:ea:17: 18:89:c0:2b:04:8a:94:d2:0a:d6:82:6e:5a:fa:16: 8e:75:ee:fa:6e:c4:c7:76:a6:30:2d:b0:72:e7:71: 55:06:4b:09:08:e9:12:f3:4c:c3:d1:11:63:fc:0b: 58:d3:7d:c6:79:40:13:39:5c:4a:f5:68:7e:b7:1c: 49:15:ef:9d:87:23:40:46:76:c5:a9:aa:a7:c0:51: 20:3a:93:b8:bc:88:b5:6c:09:72:a9:76:91:27:6a: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B9:61:62:EF:41:ED:3A:77:29:76:C1:E6:B7:1D:D9:84:76:38:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a4:c4:29:a1:b7:fa:81:03:10:85:82:4d:29:b7:8f:95:67: 24:d0:a9:69:a2:81:41:49:b1:53:5d:27:8c:08:86:fd:0a:0b: 7f:2e:95:c3:8f:bf:08:29:a9:89:25:d5:a7:22:55:52:35:b5: 84:a6:ff:0f:15:80:7b:4c:9c:b6:ca:c6:85:64:aa:cc:81:95: 1a:f8:d5:f4:19:08:e4:e2:f1:7e:96:18:fe:52:31:27:e7:dc: 1b:31:2f:57:72:e2:07:0d:91:96:7f:d0:92:3f:02:4e:6f:68: 09:3a:0c:c8:0d:3f:ad:b1:8f:c9:ee:b1:3f:fa:1b:e5:df:0d: ac:8e:aa:19:58:37:c6:85:c8:06:19:90:6d:30:2f:f3:cd:54: 36:53:45:a9:47:fd:b0:28:03:b5:da:a6:10:23:eb:df:93:e6: e7:af:55:e0:69:91:8a:a9:4f:f2:f7:b5:f3:0e:16:33:82:d2: df:47:a3:ea:b0:2b:a8:49:b0:f6:f4:1f:ed:ca:10:f0:e5:9b: dd:1d:59:98:d0:72:e0:d4:d0:ba:0f:3f:c2:7e:ff:4a:ab:f2: 31:ba:aa:c3:b8:46:66:de:bf:c4:64:87:f9:2e:0d:0a:11:bc: 3f:3d:04:c1:5e:cc:2a:77:7b:e3:5d:29:51:98:75:46:ea:70: f2:11:e1:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2MdE+HjgM1RjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZWIwYzkzNDktMTY0Ni00MzE2LTgxNzAtNjdlOTRmZWQ5ZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghy8MleeZwUGZAVbOnXpLGlyuJhV5N9m+Gjt noN4p25SQxUOK1Jiva1Kc03tSaEhuXRBAkQKwukUhJSAUqsTgrQeEdBXaswgnV0T t9f/KrTcgJySf2jNyIf66EK40ZJEb/JpI7BEhVtDsJCyrPsdw58WQ4EOa7PtfmFG VW0sh8/yiHvvh1l17a+EL+PYbDA17vW/ZECDeAf2zEqbQTKPg18Y6hcYicArBIqU 0grWgm5a+haOde76bsTHdqYwLbBy53FVBksJCOkS80zD0RFj/AtY033GeUATOVxK 9Wh+txxJFe+dhyNARnbFqaqnwFEgOpO4vIi1bAlyqXaRJ2rH3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC5YWLvQe06dyl2wea3HdmEdjh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvOWI5YjljMTQtN2M1OS0z MTFjLWI3YzQtZjQ5MjgyMzBiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEekxCmht/qBAxCFgk0pt4+VZyTQqWmigUFJsVNdJ4wIhv0KC38ulcOP vwgpqYkl1aciVVI1tYSm/w8VgHtMnLbKxoVkqsyBlRr41fQZCOTi8X6WGP5SMSfn 3BsxL1dy4gcNkZZ/0JI/Ak5vaAk6DMgNP62xj8nusT/6G+XfDayOqhlYN8aFyAYZ kG0wL/PNVDZTRalH/bAoA7XaphAj69+T5uevVeBpkYqpT/L3tfMOFjOC0t9Ho+qw K6hJsPb0H+3KEPDlm90dWZjQcuDU0LoPP8J+/0qr8jG6qsO4Rmbev8Rkh/kuDQoR vD89BMFezCp3e+NdKVGYdUbqcPIR4Rg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:04 2025 by rpki-client