$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/888e4fb3-bec4-3fa4-b57c-7fe8dce8035c.roa File: 888e4fb3-bec4-3fa4-b57c-7fe8dce8035c.roa (raw, json) Hash identifier: S1uSjieBHpFAa4FNyHRB74E2UFx6zFwUibmgHLfYE5Q= Subject key identifier: 5A:66:FB:A0:81:83:97:CF:B1:C6:2A:33:17:86:8C:C9:CE:3A:60:FC Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985 Certificate serial: 010D0C9F4328584A31FF033C8FFF699CA7F1F180 Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/888e4fb3-bec4-3fa4-b57c-7fe8dce8035c.roa Signing time: Sun 15 Jun 2025 03:29:11 +0000 ROA not before: Sun 15 Jun 2025 03:29:11 +0000 ROA not after: Sat 13 Sep 2025 03:29:11 +0000 asID: 21700 IP address blocks: 173.195.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:ff:03:3c:8f:ff:69:9c:a7:f1:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985 Validity Not Before: Jun 15 03:29:11 2025 GMT Not After : Sep 13 03:29:11 2025 GMT Subject: CN=21358c45-b4fd-4327-aa94-6111505a08aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:ec:d2:c2:8f:12:67:c9:73:de:c4:90:8d: 14:aa:c1:6b:9a:a8:75:46:66:2c:14:d6:fe:9b:44: 2d:86:04:4b:3c:81:33:03:97:ed:b0:9f:f6:72:b6: a0:f7:ea:d5:39:5b:75:9e:7a:89:5d:e8:cb:40:30: 97:97:30:bf:cd:0c:3b:35:7d:16:0c:83:35:3e:a4: c4:5c:6c:7d:75:cf:d4:e6:8c:db:d8:e7:cf:20:2f: 68:ff:57:06:80:e1:18:fb:e4:1d:82:d6:45:1b:38: 5d:7f:4c:b4:e9:59:82:ed:c7:fb:6e:ed:5e:99:a8: f9:77:83:99:76:33:31:91:ac:a8:30:3d:78:5b:c8: 39:31:9f:b0:8d:87:0f:dd:f6:3b:6c:1d:be:98:97: bf:4e:0a:e9:a0:13:a0:9e:0f:23:a7:7b:14:10:cd: d6:28:61:b3:99:90:ec:ad:55:c7:56:4a:08:07:4b: b2:fb:ea:4e:17:2a:ad:6c:1f:2c:1b:fe:f3:bb:0d: ab:67:d0:41:27:5c:e6:5f:ce:4b:1e:bc:74:33:10: 24:15:97:9a:67:6b:d7:2d:5f:5b:6d:9d:e5:3b:69: 34:f7:49:03:42:f5:05:4b:fb:9e:fb:ba:f3:df:ee: 7d:61:b5:4c:da:69:67:10:5a:1a:58:63:d8:f7:82: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:66:FB:A0:81:83:97:CF:B1:C6:2A:33:17:86:8C:C9:CE:3A:60:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/888e4fb3-bec4-3fa4-b57c-7fe8dce8035c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl X509v3 Authority Key Identifier: keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer sbgp-ipAddrBlock: critical IPv4: 173.195.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ec:c3:7b:e0:8c:85:15:b0:dc:34:f0:56:08:9e:7b:9e:0d: 18:e5:4c:0b:ed:ca:54:ce:fa:9e:4d:f9:5a:3b:b7:24:85:b8: c0:59:2d:02:53:3a:23:17:7e:0c:83:4b:a7:e5:8d:52:c5:ee: 7d:10:df:ab:d1:60:a7:d4:cf:a5:ba:dd:21:9d:f2:6b:06:d3: b3:81:9b:b7:83:2b:41:76:3c:9a:54:de:70:2a:07:aa:87:94: 3d:4d:e4:29:53:60:66:d9:34:c9:3f:cd:cc:52:22:c1:af:e2: 13:b4:1e:5c:8f:d6:9e:c2:98:44:bf:91:c8:fe:ed:4b:84:c8: b8:e7:79:cb:68:4d:91:b1:43:62:db:1e:ac:91:c0:fb:01:67: 85:fa:72:a7:bb:c6:8c:73:8c:2f:46:1a:7d:33:6c:e3:b9:44: 03:2c:64:16:f7:59:e2:c5:60:e5:68:33:d3:28:9c:f8:49:9b: 78:c2:bc:97:56:ea:4f:da:5d:52:fb:e5:ae:e1:fe:d5:c4:c7: 0f:0c:ab:44:79:d0:1c:64:b8:27:8d:e2:8f:57:b8:6c:12:46: 3d:20:f7:2f:ed:30:6d:e0:a9:7f:0c:46:ae:17:a5:5d:96:1b: 22:e0:33:08:c1:fe:cf:6e:4d:06:1b:fe:b4:bf:be:c7:89:31: 2b:22:23:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEox/wM8j/9pnKfx8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy OTg1MB4XDTI1MDYxNTAzMjkxMVoXDTI1MDkxMzAzMjkxMVowLzEtMCsGA1UEAxMk MjEzNThjNDUtYjRmZC00MzI3LWFhOTQtNjExMTUwNWEwOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8js0sKPEmfJc97EkI0UqsFrmqh1RmYsFNb+ m0QthgRLPIEzA5ftsJ/2crag9+rVOVt1nnqJXejLQDCXlzC/zQw7NX0WDIM1PqTE XGx9dc/U5ozb2OfPIC9o/1cGgOEY++QdgtZFGzhdf0y06VmC7cf7bu1emaj5d4OZ djMxkayoMD14W8g5MZ+wjYcP3fY7bB2+mJe/TgrpoBOgng8jp3sUEM3WKGGzmZDs rVXHVkoIB0uy++pOFyqtbB8sG/7zuw2rZ9BBJ1zmX85LHrx0MxAkFZeaZ2vXLV9b bZ3lO2k090kDQvUFS/ue+7rz3+59YbVM2mlnEFoaWGPY94Ie3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpm+6CBg5fPscYqMxeGjMnOOmD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvODg4ZTRmYjMtYmVjNC0z ZmE0LWI1N2MtN2ZlOGRjZTgwMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz OGE3MDI5ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfsw3vgjIUVsNw08FYInnueDRjlTAvtylTO+p5N+Vo7tySFuMBZLQJT OiMXfgyDS6fljVLF7n0Q36vRYKfUz6W63SGd8msG07OBm7eDK0F2PJpU3nAqB6qH lD1N5ClTYGbZNMk/zcxSIsGv4hO0HlyP1p7CmES/kcj+7UuEyLjnectoTZGxQ2Lb HqyRwPsBZ4X6cqe7xoxzjC9GGn0zbOO5RAMsZBb3WeLFYOVoM9MonPhJm3jCvJdW 6k/aXVL75a7h/tXExw8Mq0R50BxkuCeN4o9XuGwSRj0g9y/tMG3gqX8MRq4XpV2W GyLgMwjB/s9uTQYb/rS/vseJMSsiI8w= -----END CERTIFICATE-----Generated at Sun Jun 15 16:56:55 2025 by rpki-client