$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa File: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (raw, json) Hash identifier: 1v41hIMzPkySLF1MgE+15TGkfmqOIfitn+X2+Ylp45g= Subject key identifier: 7A:A1:CC:BE:E4:03:85:82:17:1A:1B:E0:14:19:26:D3:4C:95:89:F3 Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F43285849CE9A60CBB2410C97110B9B80 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 400790 IP address blocks: 207.228.219.0/24 maxlen: 24 2606:f6c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:60:cb:b2:41:0c:97:11:0b:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=f71ef0c3-468d-42af-a5ca-6f70d3def6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:df:4d:ec:1a:48:e0:78:77:6a:ea:f7:1f:e4: a1:4d:67:78:db:7d:9d:65:77:e2:76:63:4e:bf:1b: a5:fc:b2:5d:79:33:20:49:be:39:7a:45:48:ac:2a: aa:58:f7:a5:08:4e:8f:6d:e7:ee:12:9c:45:ad:d6: 21:ca:90:4a:6c:6b:50:74:45:5a:32:78:f0:5c:55: b4:19:bb:bb:34:72:82:42:10:57:e8:00:96:e7:09: 8e:dc:32:ca:5f:ab:d4:9a:f6:9d:07:2e:84:d6:c3: 43:68:da:0b:56:9b:61:ed:56:ac:0b:82:11:22:67: a6:4a:e7:c4:ec:ab:29:5a:58:7b:4a:75:17:99:3e: b9:99:9c:96:b8:75:d3:8a:f8:e1:cd:9c:00:5c:41: 64:2e:87:6b:87:81:0c:54:03:6c:f3:6b:aa:2f:74: fd:4c:1a:55:7f:37:4e:0e:50:18:a8:c8:fa:46:09: dd:d7:8b:90:61:9f:74:0c:d1:76:36:fd:db:72:19: 44:3d:53:7c:b8:cc:1b:12:eb:76:91:8c:72:3a:d9: ca:08:c8:83:e1:7b:b9:23:42:9a:38:eb:2d:5d:d3: 9b:2b:0a:de:f0:fc:38:f1:24:b2:33:81:9a:8f:cc: 54:db:81:43:7a:09:78:f6:9f:fa:d8:29:91:89:0b: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:CC:BE:E4:03:85:82:17:1A:1B:E0:14:19:26:D3:4C:95:89:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.219.0/24 IPv6: 2606:f6c0:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:41:8f:69:16:d2:e2:83:95:88:b4:1a:c0:c5:16:57:eb:7c: df:b7:43:78:9a:64:6e:49:47:0c:55:1f:53:b5:62:09:d0:ed: 33:54:19:ce:fa:70:74:39:15:b7:0d:0f:4f:21:31:dc:3c:6b: f1:8b:33:77:2d:88:d7:30:08:df:71:e0:83:71:72:c3:60:ba: 21:e4:df:f0:7b:4b:5a:46:b2:11:32:f8:3d:7a:17:90:f4:d6: 8c:62:43:09:33:19:e9:c8:03:89:f2:c0:6a:65:36:b2:70:63: 52:7d:12:f3:7a:c6:dd:b0:1d:c4:12:9f:1d:f5:91:e8:1c:20: f2:14:ce:d0:bb:33:4b:3e:a9:fc:c1:8c:50:e3:ae:b6:a6:dd: 9e:fb:2e:ee:11:c9:1c:d2:66:98:a8:fa:ae:65:d8:6d:bb:54: df:d3:3c:91:dc:7d:b4:bd:73:20:76:c3:88:d8:16:00:d2:dc: d1:78:83:da:07:a1:ca:a3:71:67:95:27:d1:ff:ec:3a:ff:66: 3a:33:d0:ec:8c:c3:d3:08:3e:58:d4:2a:d8:a3:be:10:d8:3e: 20:89:32:5c:35:4e:1b:06:44:78:ac:ad:9a:d8:d8:00:0b:6b: 0b:55:a4:da:97:02:73:15:0a:96:fa:b6:a2:50:00:40:a6:6e: 34:61:5d:27 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnOmmDLskEMlxELm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZjcxZWYwYzMtNDY4ZC00MmFmLWE1Y2EtNmY3MGQzZGVmNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg99N7BpI4Hh3aur3H+ShTWd4232dZXfidmNO vxul/LJdeTMgSb45ekVIrCqqWPelCE6PbefuEpxFrdYhypBKbGtQdEVaMnjwXFW0 Gbu7NHKCQhBX6ACW5wmO3DLKX6vUmvadBy6E1sNDaNoLVpth7VasC4IRImemSufE 7KspWlh7SnUXmT65mZyWuHXTivjhzZwAXEFkLodrh4EMVANs82uqL3T9TBpVfzdO DlAYqMj6Rgnd14uQYZ90DNF2Nv3bchlEPVN8uMwbEut2kYxyOtnKCMiD4Xu5I0Ka OOstXdObKwre8Pw48SSyM4Gaj8xU24FDegl49p/62CmRiQuqIwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHqhzL7kA4WCFxob4BQZJtNMlYnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvNWZhNmUzZDktZDYxOC0z ZDk1LTlhMTEtYWY2NzYwMTY0Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TbMA8E AgACMAkDBwAmBvbAAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAp0GPaRbS4oOViLQawMUWV+t837dDeJpk bklHDFUfU7ViCdDtM1QZzvpwdDkVtw0PTyEx3Dxr8Yszdy2I1zAI33Hgg3Fyw2C6 IeTf8HtLWkayETL4PXoXkPTWjGJDCTMZ6cgDifLAamU2snBjUn0S83rG3bAdxBKf HfWR6Bwg8hTO0LszSz6p/MGMUOOutqbdnvsu7hHJHNJmmKj6rmXYbbtU39M8kdx9 tL1zIHbDiNgWANLc0XiD2gehyqNxZ5Un0f/sOv9mOjPQ7IzD0wg+WNQq2KO+ENg+ IIkyXDVOGwZEeKytmtjYAAtrC1Wk2pcCcxUKlvq2olAAQKZuNGFdJw== -----END CERTIFICATE-----Generated at Sun Jun 15 23:34:02 2025 by rpki-client