$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa File: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (raw, json) Hash identifier: eqlpNwvnuPBXOgO8EeuR8/xUQQ2gJK/GEzf7DJeA8Gw= Subject key identifier: 5E:04:2A:49:B3:8D:C6:2F:1A:E6:00:BB:47:3B:22:D2:DF:D5:8B:43 Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F43285849F44A5A2CABAB993A3ED4AA00 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 400790 IP address blocks: 207.228.217.0/24 maxlen: 24 2606:f6c0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5a:2c:ab:ab:99:3a:3e:d4:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=a4a633b5-6883-4dca-884f-ffc0c407d9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b9:0f:fc:1c:f4:f6:87:c4:7f:b5:3f:98:3f: d6:f2:db:ac:fb:87:85:6b:2c:63:f6:e5:9d:d2:52: a9:09:33:e0:79:52:f3:15:c5:87:36:50:50:62:cd: 7d:13:d3:bc:30:6b:47:43:02:6e:18:3c:b6:15:a1: 06:d1:60:3e:3e:24:0f:bd:79:a6:f8:09:71:ca:3a: ab:b9:98:41:69:9c:c0:63:6e:30:4c:5b:7f:ed:36: 78:c7:4f:69:ce:51:1b:75:33:ce:6e:50:d7:5e:78: 98:4d:34:ee:43:80:a2:48:44:59:a1:e4:36:4e:2a: 8c:03:b0:e0:d0:68:9a:8c:85:21:09:be:32:bf:b0: cf:97:60:a7:25:f8:0f:6f:52:ae:14:1b:19:61:cc: 46:fb:63:18:62:f4:19:47:a1:ff:36:7d:0c:d6:51: 08:cb:b0:aa:80:3e:4a:4c:ae:44:bf:24:ae:56:e2: 6f:66:f1:14:48:f3:50:65:95:67:83:35:c8:ea:8a: c4:fe:ed:a6:94:23:80:97:98:88:50:8c:a8:b0:4f: e1:31:52:94:f0:73:df:65:f4:ef:57:57:39:ee:53: 26:31:d1:3f:89:66:3c:2d:62:12:c7:4f:5c:5c:0c: 9c:96:fc:10:75:d1:c8:4b:4c:7f:61:ad:30:c5:d8: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:04:2A:49:B3:8D:C6:2F:1A:E6:00:BB:47:3B:22:D2:DF:D5:8B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.217.0/24 IPv6: 2606:f6c0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:27:6f:a2:b0:d8:19:ae:54:35:5a:e0:a0:31:0e:45:ed:33: f5:a7:34:bf:05:9c:af:33:cb:9a:2c:fc:0c:a1:bb:ae:1b:61: 1f:94:53:3c:41:d3:a7:b7:e5:e6:38:dd:41:0d:57:0d:f0:79: af:99:61:ed:a6:28:f5:84:7d:72:3a:ce:97:aa:ae:40:79:c5: b4:af:6c:c1:33:6b:0f:d1:17:a2:90:c9:fe:ce:09:9d:5b:b8: 13:50:29:9e:24:e5:8f:14:0f:ed:6c:03:2e:28:45:4d:6a:47: a0:17:ba:9c:b0:c5:db:dc:e4:84:0e:38:3e:7e:ca:99:38:9e: 59:c7:c9:27:f7:27:bc:3b:cb:57:9c:4f:ac:e9:b9:c5:02:14: ce:44:20:3d:7d:58:f4:67:06:a8:78:ab:92:64:94:c7:a7:97: 3a:61:a6:b2:12:1e:fe:a5:ea:db:c1:80:86:77:1d:73:26:15: 0e:53:9e:61:c7:f3:1d:a9:f3:15:ac:e8:85:85:f4:9c:26:19: f6:b7:01:12:13:16:53:f9:b4:d5:36:f4:da:ac:f0:a6:86:51: 7b:d5:1b:24:13:75:68:e3:01:6d:24:9e:44:b6:f2:5b:92:f3: fa:2e:43:61:a8:b3:05:18:ab:b2:a3:6f:b8:09:95:91:ad:7e: de:ea:3b:fc -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEn0Slosq6uZOj7UqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk YTRhNjMzYjUtNjg4My00ZGNhLTg4NGYtZmZjMGM0MDdkOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirkP/Bz09ofEf7U/mD/W8tus+4eFayxj9uWd 0lKpCTPgeVLzFcWHNlBQYs19E9O8MGtHQwJuGDy2FaEG0WA+PiQPvXmm+Alxyjqr uZhBaZzAY24wTFt/7TZ4x09pzlEbdTPOblDXXniYTTTuQ4CiSERZoeQ2TiqMA7Dg 0GiajIUhCb4yv7DPl2CnJfgPb1KuFBsZYcxG+2MYYvQZR6H/Nn0M1lEIy7CqgD5K TK5EvySuVuJvZvEUSPNQZZVngzXI6orE/u2mlCOAl5iIUIyosE/hMVKU8HPfZfTv V1c57lMmMdE/iWY8LWISx09cXAyclvwQddHIS0x/Ya0wxdg7fQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFF4EKkmzjcYvGuYAu0c7ItLf1YtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMmExNjU5ZGQtZDU5Yy0z OTkwLTljYTQtMjhmMWM5MGNjZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TZMA8E AgACMAkDBwAmBvbAAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOidvorDYGa5UNVrgoDEORe0z9ac0vwWc rzPLmiz8DKG7rhthH5RTPEHTp7fl5jjdQQ1XDfB5r5lh7aYo9YR9cjrOl6quQHnF tK9swTNrD9EXopDJ/s4JnVu4E1ApniTljxQP7WwDLihFTWpHoBe6nLDF29zkhA44 Pn7KmTieWcfJJ/cnvDvLV5xPrOm5xQIUzkQgPX1Y9GcGqHirkmSUx6eXOmGmshIe /qXq28GAhncdcyYVDlOeYcfzHanzFazohYX0nCYZ9rcBEhMWU/m01Tb02qzwpoZR e9UbJBN1aOMBbSSeRLbyW5Lz+i5DYaizBRirsqNvuAmVka1+3uo7/A== -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:12 2025 by rpki-client