$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa File: 7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa (raw, json) Hash identifier: QK5mMJNdZwz7s7lkQM5BgjBhjoc8cU8Aysrg5Kqp6Vg= Subject key identifier: 4A:72:1F:44:AC:7E:D9:95:C9:8B:96:8A:AF:F4:01:08:A4:C5:38:B0 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584A2ABAE884063EA21995AAE9C0 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 9009 IP address blocks: 167.100.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e8:84:06:3e:a2:19:95:aa:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=624fbbc6-4aef-4ec3-b58b-48205178e4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:f2:e7:d1:27:e0:b7:dd:d9:c9:d9:a0:45: 6f:2e:3a:c8:cc:f1:e7:81:ad:b9:da:04:d8:63:d1: 49:5f:98:9a:9f:46:b2:58:2d:35:9d:37:87:e5:6f: f4:12:a8:a9:a1:1b:90:dd:e5:3f:b5:60:36:1b:d3: e4:54:58:78:da:06:71:c4:0f:63:e2:c8:ce:06:77: b4:6a:27:b1:19:f1:67:e0:05:2b:e6:9a:b0:eb:09: ea:7e:10:b9:2f:3a:41:2d:b5:f3:74:7d:07:ec:ef: 43:b6:2b:02:5a:66:7b:8e:b5:79:f9:20:b5:8a:c8: b8:5f:48:37:ef:02:2a:29:8e:6d:fc:6e:41:9e:ad: f0:db:cd:d5:98:79:f4:a7:6b:5e:ff:1a:46:b5:f4: 30:5a:cf:aa:59:5e:e7:10:a5:81:a8:43:51:ec:56: 55:5b:37:5c:e9:14:cb:ee:4e:fb:fd:d9:cc:65:16: 17:b2:d4:00:9a:9a:dc:fd:d9:59:99:ee:75:8f:01: 29:be:e4:1b:a3:80:90:7d:98:4d:59:29:d8:5e:93: dd:3c:e5:0d:81:0b:c7:26:ce:fb:b2:12:12:35:5d: 6d:0d:44:1a:31:b6:57:17:db:02:a1:a6:2c:8a:9b: 90:a9:fb:a8:6c:18:b4:83:de:64:98:2f:ab:cb:51: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:72:1F:44:AC:7E:D9:95:C9:8B:96:8A:AF:F4:01:08:A4:C5:38:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 167.100.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1f:6e:c1:d8:60:cb:51:e4:c5:d0:5a:03:5c:6a:6b:87:a3: 36:a4:de:3a:a8:63:29:39:72:2b:55:5c:c6:b2:ca:45:35:5f: 0d:cf:11:d5:8e:8e:05:13:95:0b:fe:e9:ef:31:23:e8:7a:b9: 8c:13:ab:b7:c9:97:ae:3a:fd:97:4f:3d:4f:b6:cd:d8:bb:9e: 5d:6c:a9:7e:53:3b:04:e7:ce:8e:36:b0:c1:aa:b4:7d:a1:01: 9a:c6:ca:35:c8:f0:39:b7:a8:16:f8:18:6d:64:b9:e0:2a:d6: a5:4d:3f:e2:02:73:d2:21:ee:a9:da:25:1f:f6:c7:fc:2f:22: 51:09:b4:72:41:17:ae:46:78:f0:ca:24:25:d2:aa:8a:84:11: df:3b:fe:1f:ac:26:b4:b8:89:f9:6e:8f:9c:b3:33:a7:98:fe: 06:32:0f:72:91:75:dd:7f:e6:67:91:e6:2e:fc:c5:bb:cf:b3: 02:43:10:8b:d1:c7:21:08:ff:61:d8:89:6b:04:6f:92:81:3c: 6e:22:84:17:5c:c3:e5:57:b3:17:07:0d:e4:ab:32:e9:ab:b8: 09:f9:41:b4:73:80:14:77:c2:a8:1a:72:2b:a1:0e:b4:db:ca: ec:e2:3c:33:5e:46:d1:53:fd:b0:45:77:32:d7:84:5e:1e:44: c2:75:7e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuiEBj6iGZWq6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NjI0ZmJiYzYtNGFlZi00ZWMzLWI1OGItNDgyMDUxNzhlNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwovy59En4Lfd2cnZoEVvLjrIzPHnga252gTY Y9FJX5ian0ayWC01nTeH5W/0EqipoRuQ3eU/tWA2G9PkVFh42gZxxA9j4sjOBne0 aiexGfFn4AUr5pqw6wnqfhC5LzpBLbXzdH0H7O9DtisCWmZ7jrV5+SC1isi4X0g3 7wIqKY5t/G5Bnq3w283VmHn0p2te/xpGtfQwWs+qWV7nEKWBqENR7FZVWzdc6RTL 7k77/dnMZRYXstQAmprc/dlZme51jwEpvuQbo4CQfZhNWSnYXpPdPOUNgQvHJs77 shISNV1tDUQaMbZXF9sCoaYsipuQqfuobBi0g95kmC+ry1GZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpyH0SsftmVyYuWiq/0AQikxTiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvN2FkNTVkYjMtNTljNy0z NWMwLWI1NjQtZTUyZGM0YzBlMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp2RsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQfbsHYYMtR5MXQWgNcamuHozak3jqoYyk5citVXMayykU1Xw3PEdWO jgUTlQv+6e8xI+h6uYwTq7fJl646/ZdPPU+2zdi7nl1sqX5TOwTnzo42sMGqtH2h AZrGyjXI8Dm3qBb4GG1kueAq1qVNP+ICc9Ih7qnaJR/2x/wvIlEJtHJBF65GePDK JCXSqoqEEd87/h+sJrS4ifluj5yzM6eY/gYyD3KRdd1/5meR5i78xbvPswJDEIvR xyEI/2HYiWsEb5KBPG4ihBdcw+VXsxcHDeSrMumruAn5QbRzgBR3wqgaciuhDrTb yuziPDNeRtFT/bBFdzLXhF4eRMJ1fuY= -----END CERTIFICATE-----Generated at Mon Jun 16 03:28:11 2025 by rpki-client