$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa File: 21ed9c33-b646-337e-9363-ff7e1a1cf097.roa (raw, json) Hash identifier: hCwONPp9ihuxO/uIGRq1hFFsLkEUP48Abb3m6AjfbSw= Subject key identifier: FB:79:AA:BF:34:D6:1F:31:8F:DD:DF:1C:74:E1:66:06:54:54:3A:D7 Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985 Certificate serial: 010D0C9F4328584A2ABAE4555BA48130D4E36AB4 Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 15257 IP address blocks: 173.195.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e4:55:5b:a4:81:30:d4:e3:6a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=22230735-6f8d-4b42-9c30-32bcb604b771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:7f:13:2e:ef:3c:5a:16:24:a6:5c:29:5e: 66:30:a0:eb:f1:2c:51:16:ff:3a:9f:a9:42:98:0b: 01:e3:f6:5d:d4:b2:26:40:f6:f2:12:da:7d:66:1e: fb:79:02:fe:7e:f7:b3:ad:ef:0f:17:e4:22:34:e6: 40:a6:6b:63:8a:9c:ec:ed:44:3f:d4:3c:46:fb:d3: a9:21:8d:fd:7d:2d:f2:59:24:d2:63:56:aa:ef:28: 7c:fc:a7:51:4b:24:47:52:c4:46:16:0b:08:44:ad: 7a:15:66:b0:53:dc:f6:8c:e8:65:f8:1b:96:0b:23: 0c:87:19:c4:1b:fc:5c:90:cc:d3:c5:2e:71:c6:68: c2:1f:ec:33:85:75:57:cc:e9:f4:98:27:df:33:51: 70:2f:bb:0a:85:cf:ee:6c:53:e3:8f:c4:14:f5:4c: be:65:01:5e:89:e3:d0:b7:c6:95:0a:35:2f:43:c6: 4c:44:19:4b:c4:46:86:e7:de:30:d6:fe:a0:19:90: f8:f6:8c:0e:96:16:2b:1b:8b:ea:7d:a9:c6:a5:f6: d9:5f:9d:b8:cc:1b:db:f8:87:1c:a6:c8:c5:5e:1c: 7c:9b:b6:32:33:9c:5b:51:3b:7f:9b:58:b6:33:9a: b0:19:6f:08:3e:fd:7f:3f:69:1d:14:4d:86:14:6a: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:79:AA:BF:34:D6:1F:31:8F:DD:DF:1C:74:E1:66:06:54:54:3A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl X509v3 Authority Key Identifier: keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer sbgp-ipAddrBlock: critical IPv4: 173.195.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5d:77:47:61:96:38:dc:24:56:c1:9e:4d:22:c4:aa:0a:70: a1:04:f5:7c:ce:9e:e2:d9:05:bc:a9:3a:d8:ec:af:86:0c:1d: 02:59:4a:5c:8d:38:1d:b2:0c:03:95:3a:87:af:8a:e2:b5:92: 93:40:a6:ec:c5:67:27:5a:ba:b4:d5:36:38:45:04:08:e3:40: 7f:b9:ff:38:35:da:a5:55:e0:d4:98:69:6c:aa:08:72:19:73: dd:16:54:e0:21:c4:be:f7:00:f7:51:ed:bd:ad:7e:25:53:31: 65:2a:99:9e:0f:65:00:44:a7:ce:9a:17:8e:6b:e0:de:93:bb: 02:89:52:33:0c:ce:da:18:02:7d:22:19:db:08:9e:44:67:41: 3f:4f:17:6b:8f:a4:32:5a:01:0d:ee:ed:21:39:8e:d8:8b:59: 36:1c:5c:3f:bc:55:17:d1:e6:13:ba:a4:7a:f2:60:39:a4:c3: 81:bc:53:ab:7d:c4:c8:d2:8e:89:a9:c2:f5:04:6b:49:93:8f: 78:96:e3:6a:9a:50:87:70:52:09:20:4a:7f:68:e9:ad:35:7d: 22:4f:9a:2f:5c:d2:65:c4:2e:3d:2c:c0:5c:f5:0c:a9:a3:0b: 2d:59:36:08:82:2c:f9:cd:4c:0b:93:6a:e1:98:79:f9:20:70: 29:6b:8b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuRVW6SBMNTjarQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy OTg1MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MjIyMzA3MzUtNmY4ZC00YjQyLTljMzAtMzJiY2I2MDRiNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcZ/Ey7vPFoWJKZcKV5mMKDr8SxRFv86n6lC mAsB4/Zd1LImQPbyEtp9Zh77eQL+fvezre8PF+QiNOZApmtjipzs7UQ/1DxG+9Op IY39fS3yWSTSY1aq7yh8/KdRSyRHUsRGFgsIRK16FWawU9z2jOhl+BuWCyMMhxnE G/xckMzTxS5xxmjCH+wzhXVXzOn0mCffM1FwL7sKhc/ubFPjj8QU9Uy+ZQFeiePQ t8aVCjUvQ8ZMRBlLxEaG594w1v6gGZD49owOlhYrG4vqfanGpfbZX524zBvb+Icc psjFXhx8m7YyM5xbUTt/m1i2M5qwGW8IPv1/P2kdFE2GFGrkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt5qr801h8xj93fHHThZgZUVDrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvMjFlZDljMzMtYjY0Ni0z MzdlLTkzNjMtZmY3ZTFhMWNmMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz OGE3MDI5ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFldd0dhljjcJFbBnk0ixKoKcKEE9XzOnuLZBbypOtjsr4YMHQJZSlyN OB2yDAOVOoeviuK1kpNApuzFZydaurTVNjhFBAjjQH+5/zg12qVV4NSYaWyqCHIZ c90WVOAhxL73APdR7b2tfiVTMWUqmZ4PZQBEp86aF45r4N6TuwKJUjMMztoYAn0i GdsInkRnQT9PF2uPpDJaAQ3u7SE5jtiLWTYcXD+8VRfR5hO6pHryYDmkw4G8U6t9 xMjSjompwvUEa0mTj3iW42qaUIdwUgkgSn9o6a01fSJPmi9c0mXELj0swFz1DKmj Cy1ZNgiCLPnNTAuTauGYefkgcClrixw= -----END CERTIFICATE-----Generated at Sun Jun 15 04:47:57 2025 by rpki-client