$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa File: befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa (raw, json) Hash identifier: Dzi33QjLMxXUE4NQpWoaOJKbQRS9QmfykkynfEAUzIM= Subject key identifier: 3B:AE:22:36:48:D2:AE:91:CD:6D:F2:C5:71:16:4A:62:F7:D6:C0:34 Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985 Certificate serial: 010D0C9F4328584A2ABAE44978C8C3151E3FF580 Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 15257 IP address blocks: 173.195.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e4:49:78:c8:c3:15:1e:3f:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=4777c3f1-59cd-4eec-92ac-1f2f00b32c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c1:11:da:bb:ff:d7:ba:0c:40:cd:f0:f5:ce: 37:cb:0e:e9:15:56:eb:6c:69:9b:c1:e3:0b:7e:18: a1:e6:39:f0:20:bd:b9:00:71:98:a0:67:5c:db:43: 5b:35:8b:3e:59:10:4a:10:9a:96:c2:5d:a1:fa:6f: 43:f4:db:37:95:3f:47:6e:90:e7:82:8d:e7:68:63: 38:04:7e:af:ea:1e:65:1c:fc:f5:be:ae:69:56:f5: ba:6e:85:12:cd:c9:ca:85:92:83:15:91:e5:f6:48: 00:c9:d0:f9:93:2a:84:e7:11:b6:74:6a:d4:2c:06: 4d:d8:90:d8:25:01:f0:fd:83:12:34:f9:60:56:34: 1d:ae:54:91:40:d3:0e:5d:54:a8:c8:fa:1d:b0:9a: 25:91:9b:a3:f6:82:a5:a4:ef:44:f7:5a:cc:b2:1c: 2b:88:fc:f0:ea:ab:d4:dd:86:d0:3c:3c:83:dd:0b: b9:0a:33:1f:7c:5f:6e:f5:7e:39:74:53:23:c5:66: fc:24:f2:d7:5a:f5:df:af:2a:62:db:de:fe:a8:3f: 20:a8:bf:d2:42:73:f2:76:47:25:97:96:02:47:bd: c8:84:15:c4:12:bc:29:25:72:76:2c:56:be:34:c0: ac:44:fa:0a:54:bd:6d:0f:89:4c:0b:f8:57:46:4b: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AE:22:36:48:D2:AE:91:CD:6D:F2:C5:71:16:4A:62:F7:D6:C0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl X509v3 Authority Key Identifier: keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer sbgp-ipAddrBlock: critical IPv4: 173.195.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b8:c2:c8:a8:61:e7:a2:b1:fa:8f:a3:d2:64:54:8f:a8:46: c9:61:12:36:48:36:af:39:85:6c:ba:5b:54:49:48:3b:1c:64: c1:c8:d7:30:07:3b:d8:4d:48:78:72:a3:17:3b:1d:fc:4d:b4: 08:48:cf:1a:97:14:8e:08:a2:ae:88:5d:4d:5e:6e:4e:70:ce: 3b:66:a8:4d:5b:fe:95:9e:86:fd:3b:14:9d:b4:92:a5:1b:48: b1:3a:c6:60:d1:d7:cc:50:82:d4:70:c3:25:6d:6e:00:a8:f5: f3:92:a4:7b:ab:d4:9b:5d:de:f9:69:6e:8a:32:fb:f9:29:4f: 49:72:64:67:90:c2:6d:94:aa:1c:bc:45:47:11:96:7d:b6:d3: cf:1a:84:75:6a:c1:56:1d:23:46:10:08:d7:df:1b:ce:54:bb: 02:5a:f8:d7:77:87:0c:82:48:66:cb:ac:74:a5:db:2e:5e:85: 6b:a1:f4:81:b2:08:f5:7d:41:a8:70:de:3c:02:9d:b2:ac:ec: eb:73:0e:69:a8:85:ee:23:9b:d3:ba:19:3d:3d:e9:57:d4:f5: 1d:25:d6:6e:63:8f:0c:ec:4f:51:0a:ef:8d:87:76:03:7a:88: 37:54:37:c0:53:d8:56:47:11:6b:79:c3:63:ce:70:16:c0:69: bd:32:f7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuRJeMjDFR4/9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy OTg1MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NDc3N2MzZjEtNTljZC00ZWVjLTkyYWMtMWYyZjAwYjMyYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMER2rv/17oMQM3w9c43yw7pFVbrbGmbweML fhih5jnwIL25AHGYoGdc20NbNYs+WRBKEJqWwl2h+m9D9Ns3lT9HbpDngo3naGM4 BH6v6h5lHPz1vq5pVvW6boUSzcnKhZKDFZHl9kgAydD5kyqE5xG2dGrULAZN2JDY JQHw/YMSNPlgVjQdrlSRQNMOXVSoyPodsJolkZuj9oKlpO9E91rMshwriPzw6qvU 3YbQPDyD3Qu5CjMffF9u9X45dFMjxWb8JPLXWvXfrypi297+qD8gqL/SQnPydkcl l5YCR73IhBXEErwpJXJ2LFa+NMCsRPoKVL1tD4lMC/hXRku0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuuIjZI0q6RzW3yxXEWSmL31sA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvYmVmYmZkYmMtY2RmMy0z ZWVhLTkwMGEtMmU2YWFlZGQ1ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz OGE3MDI5ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcPnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW4wsioYeeisfqPo9JkVI+oRslhEjZINq85hWy6W1RJSDscZMHI1zAH O9hNSHhyoxc7HfxNtAhIzxqXFI4Ioq6IXU1ebk5wzjtmqE1b/pWehv07FJ20kqUb SLE6xmDR18xQgtRwwyVtbgCo9fOSpHur1Jtd3vlpbooy+/kpT0lyZGeQwm2Uqhy8 RUcRln22088ahHVqwVYdI0YQCNffG85UuwJa+Nd3hwyCSGbLrHSl2y5ehWuh9IGy CPV9Qahw3jwCnbKs7OtzDmmohe4jm9O6GT096VfU9R0l1m5jjwzsT1EK742HdgN6 iDdUN8BT2FZHEWt5w2POcBbAab0y92c= -----END CERTIFICATE-----Generated at Sun Jun 15 04:44:44 2025 by rpki-client