$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa File: 967f720f-5e94-318c-bedf-d2b5a2038177.roa (raw, json) Hash identifier: DpujKpO79Vmh+xQlkWFRVcnKuhvCy02mFATkr/ZTRQ4= Subject key identifier: 96:0B:E2:E0:5D:29:C7:5C:D0:C9:38:B4:9D:B3:ED:45:4B:BE:AE:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F87AA0820D1915DBBA016708 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 216.108.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:a0:82:0d:19:15:db:ba:01:67:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=0eab3c9f-33ea-43ac-a2b5-bbf3656c63fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:63:70:e1:fd:17:41:10:a7:4c:91:39:c6: 4e:eb:84:6b:42:b8:94:ed:96:da:78:f7:cc:46:9c: 9f:b1:b8:08:6e:dd:8d:0e:05:f5:86:eb:08:2d:f1: f0:d6:5e:f7:7b:31:42:f7:e0:9d:ef:f2:ad:c9:d6: 8a:2e:b5:be:2f:2d:09:f5:ec:a7:46:2d:57:28:1b: bd:43:64:96:3f:81:88:d8:b0:58:f9:f4:1c:48:bc: 68:2d:65:2f:ca:76:5c:56:3b:bc:d7:92:32:0e:c8: 3c:f5:a6:db:10:4c:6c:0a:85:53:9e:c7:69:5a:82: 58:e5:3f:98:d1:a0:e3:bc:eb:60:84:53:e1:04:5e: f9:63:76:22:22:72:69:26:d1:54:8f:30:66:68:43: 17:e1:ad:d0:76:eb:ff:44:50:a1:02:c1:7a:b7:da: 2a:20:f0:f2:05:61:2c:08:2d:b5:cb:47:b8:60:38: 94:95:8c:c1:6f:80:6d:bb:3c:54:50:d3:84:02:e7: 9d:5f:a5:71:19:fe:b8:8b:88:3f:64:c7:76:47:3a: 5d:a2:12:c7:6e:52:fd:90:a9:d8:51:35:05:c9:37: 55:ab:b2:95:24:31:27:d3:e0:4a:2d:ee:cb:e2:0e: b6:2f:f6:e0:53:cd:b5:4c:0e:7f:4a:28:5a:4a:e5: e1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0B:E2:E0:5D:29:C7:5C:D0:C9:38:B4:9D:B3:ED:45:4B:BE:AE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0c:4d:2d:67:1f:35:7e:a7:d9:eb:0f:9a:bf:a1:ce:7d:3a: 2e:03:b4:89:0c:c0:ce:e7:f1:4a:e6:33:2c:5c:8b:b4:54:fb: 89:a2:21:93:d2:87:56:64:0c:47:ce:60:11:e3:7f:9a:4f:74: 49:55:47:13:7c:e6:d8:0c:cd:bd:cf:07:d2:84:a9:ab:79:90: 6e:11:89:a9:db:b9:1c:1d:d5:97:97:51:27:58:3f:21:80:e7: 22:29:1b:b6:3a:85:62:a3:69:f8:7a:23:1d:28:8f:bc:9d:fb: a0:eb:b2:94:e1:e8:bb:15:3d:19:97:33:45:ec:1b:0e:7f:66: 87:75:d8:9e:20:8c:09:1c:f3:7c:03:1a:8e:f6:c2:d3:e7:e8: d7:a5:00:db:f9:17:ab:91:88:31:0b:56:b1:da:0f:0f:49:b8: e0:d0:99:d7:3d:08:a7:3b:f1:c9:c3:82:75:2b:f6:16:98:57: 4c:0f:48:7b:26:69:2f:df:d3:0d:9e:52:b3:c4:10:b5:2b:39: 20:67:61:4d:2a:51:10:0b:f4:dd:8e:aa:32:26:b8:b3:c2:da: b5:93:5d:a9:b9:07:1a:6f:65:3b:ac:29:f5:08:67:a9:0f:57: f9:31:8c:b3:57:c5:62:f9:53:6f:5a:9a:57:8a:fd:91:95:af: ed:81:d0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eqCCDRkV27oBZwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MGVhYjNjOWYtMzNlYS00M2FjLWEyYjUtYmJmMzY1NmM2M2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR1jcOH9F0EQp0yROcZO64RrQriU7ZbaePfM RpyfsbgIbt2NDgX1husILfHw1l73ezFC9+Cd7/KtydaKLrW+Ly0J9eynRi1XKBu9 Q2SWP4GI2LBY+fQcSLxoLWUvynZcVju815IyDsg89abbEExsCoVTnsdpWoJY5T+Y 0aDjvOtghFPhBF75Y3YiInJpJtFUjzBmaEMX4a3Qduv/RFChAsF6t9oqIPDyBWEs CC21y0e4YDiUlYzBb4BtuzxUUNOEAuedX6VxGf64i4g/ZMd2RzpdohLHblL9kKnY UTUFyTdVq7KVJDEn0+BKLe7L4g62L/bgU821TA5/SihaSuXh5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYL4uBdKcdc0Mk4tJ2z7UVLvq5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY3ZjcyMGYtNWU5NC0z MThjLWJlZGYtZDJiNWEyMDM4MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQMTS1nHzV+p9nrD5q/oc59Oi4DtIkMwM7n8UrmMyxci7RU+4miIZPS h1ZkDEfOYBHjf5pPdElVRxN85tgMzb3PB9KEqat5kG4RianbuRwd1ZeXUSdYPyGA 5yIpG7Y6hWKjafh6Ix0oj7yd+6DrspTh6LsVPRmXM0XsGw5/Zod12J4gjAkc83wD Go72wtPn6NelANv5F6uRiDELVrHaDw9JuODQmdc9CKc78cnDgnUr9haYV0wPSHsm aS/f0w2eUrPEELUrOSBnYU0qURAL9N2OqjImuLPC2rWTXam5BxpvZTusKfUIZ6kP V/kxjLNXxWL5U29amleK/ZGVr+2B0Kc= -----END CERTIFICATE-----Generated at Sun Jun 15 20:17:44 2025 by rpki-client