$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa File: f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa (raw, json) Hash identifier: 4FadCwt8HkT8d8zrliG7L2ndiDVFnSOkcgUjojTB1+g= Subject key identifier: CE:A9:13:A7:F5:34:B2:29:0B:8D:BC:41:07:DE:1E:1F:29:3C:65:C4 Certificate issuer: /CN=65a67cfc-305d-4049-900c-33f3b01e742a Certificate serial: 010D0C9F4328584A331AE4665D198906C812E780 Authority key identifier: 9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 394637 IP address blocks: 104.128.177.0/24 maxlen: 24 2620:e5:4000::/48 maxlen: 52 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e4:66:5d:19:89:06:c8:12:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a67cfc-305d-4049-900c-33f3b01e742a Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=3b2c6e8b-ad2f-4523-9420-5af616f549c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:00:f2:d3:f4:2b:8d:6e:ff:57:3a:49:7d:06: 6b:b3:3a:e1:12:a3:1b:22:9d:83:ea:8e:9d:8c:8b: a3:6f:f3:c9:f5:fc:01:d5:8f:c1:59:96:d8:e1:d9: dc:4c:00:dd:53:74:88:e2:e2:de:29:2e:38:c6:32: ab:d1:f0:61:cc:37:c6:0d:d9:ed:19:2c:89:14:52: 5c:af:cb:fe:62:cf:eb:91:1f:64:fc:03:d6:b2:97: 2c:6f:55:27:29:f8:9f:79:d0:1a:44:96:a4:21:5a: 55:0c:5f:e6:d6:7a:ff:cc:4d:55:a4:7b:9d:61:9c: 1e:83:19:9e:0d:b1:20:a5:b8:f2:ff:7d:fe:dc:48: ba:82:b5:5d:17:44:2f:46:7e:32:ea:a5:7f:f1:fe: 83:1a:f5:68:d1:db:c4:9c:94:1e:45:67:ae:d3:90: ef:0e:25:cf:e7:bf:38:9f:d1:af:a9:c5:39:08:8b: b8:b8:6c:98:b7:3f:3d:fa:63:5a:20:c6:35:85:3f: 89:1d:78:a2:19:78:2a:6b:3d:24:77:62:e6:f5:0c: cb:c9:62:de:f9:71:88:8e:67:91:87:ba:c8:f1:3a: 37:85:76:44:a0:7f:52:dd:8b:64:f6:17:06:99:2f: b7:eb:2e:71:d4:f5:8e:b2:2c:52:8f:e9:8e:08:5f: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A9:13:A7:F5:34:B2:29:0B:8D:BC:41:07:DE:1E:1F:29:3C:65:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl X509v3 Authority Key Identifier: keyid:9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer sbgp-ipAddrBlock: critical IPv4: 104.128.177.0/24 IPv6: 2620:e5:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:f3:1d:05:e6:e1:7f:15:29:40:82:30:51:2d:85:3d:d7: c4:95:85:58:47:17:c6:c5:d1:8f:ce:11:9d:49:8a:c2:b8:97: 1f:33:e5:7d:e4:79:22:b8:60:d5:df:a8:8a:e1:a3:d9:9b:cf: 8b:5d:33:94:e4:f3:05:54:ac:8d:18:5e:c3:d6:12:7d:17:c3: 61:ed:06:29:fe:52:62:d1:6e:16:e0:8d:52:48:c0:b7:0f:26: 26:25:47:98:ff:10:74:37:4a:33:ba:1f:35:a3:17:07:3e:5a: 21:f2:55:3d:d1:7f:d4:b0:d1:7f:5c:96:4f:2a:8a:ce:cc:13: f9:e3:1c:a4:3c:26:9d:6d:43:0f:5d:c8:81:7c:90:3b:fe:15: 8c:f3:ba:54:67:d3:2d:15:51:4a:a9:47:8e:87:3d:11:a1:b4: 74:43:54:b4:5e:2a:43:8b:de:48:6a:53:75:6b:f8:58:26:fc: 84:9d:d3:fc:fe:04:a2:22:07:d0:d3:ca:0c:75:50:42:97:15: d5:fd:68:bb:08:ef:d8:06:fa:20:4f:bf:7c:53:bd:85:0a:43: 24:8c:2f:f5:c3:9a:51:cb:b9:6b:65:92:2b:90:6b:ba:9f:cf: 22:e1:a3:7c:5e:de:8b:59:da:af:46:f0:7b:53:d1:83:e5:88: 86:9f:1c:55 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEozGuRmXRmJBsgS54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVhNjdjZmMtMzA1ZC00MDQ5LTkwMGMtMzNmM2IwMWU3 NDJhMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk M2IyYzZlOGItYWQyZi00NTIzLTk0MjAtNWFmNjE2ZjU0OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggDy0/QrjW7/VzpJfQZrszrhEqMbIp2D6o6d jIujb/PJ9fwB1Y/BWZbY4dncTADdU3SI4uLeKS44xjKr0fBhzDfGDdntGSyJFFJc r8v+Ys/rkR9k/APWspcsb1UnKfifedAaRJakIVpVDF/m1nr/zE1VpHudYZwegxme DbEgpbjy/33+3Ei6grVdF0QvRn4y6qV/8f6DGvVo0dvEnJQeRWeu05DvDiXP5784 n9GvqcU5CIu4uGyYtz89+mNaIMY1hT+JHXiiGXgqaz0kd2Lm9QzLyWLe+XGIjmeR h7rI8To3hXZEoH9S3Ytk9hcGmS+36y5x1PWOsixSj+mOCF8i8QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM6pE6f1NLIpC428QQfeHh8pPGXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NWE2 N2NmYy0zMDVkLTQwNDktOTAwYy0zM2YzYjAxZTc0MmEvZjJlMWFhNDgtODZiMS0z ZjU4LWEzZTUtNGFkY2MzNjVmZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjVhNjdjZmMtMzA1ZC00MDQ5LTkw MGMtMzNmM2IwMWU3NDJhLzY1YTY3Y2ZjLTMwNWQtNDA0OS05MDBjLTMzZjNiMDFl NzQyYS5jcmwwHwYDVR0jBBgwFoAUnhnAKyCYsTJMIVyBr/J+ZZqTpXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NWE2N2NmYy0zMDVkLTQwNDktOTAwYy0zM2Yz YjAxZTc0MmEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaICxMA8E AgACMAkDBwAmIADlQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaCPzHQXm4X8VKUCCMFEthT3XxJWFWEcX xsXRj84RnUmKwriXHzPlfeR5Irhg1d+oiuGj2ZvPi10zlOTzBVSsjRhew9YSfRfD Ye0GKf5SYtFuFuCNUkjAtw8mJiVHmP8QdDdKM7ofNaMXBz5aIfJVPdF/1LDRf1yW TyqKzswT+eMcpDwmnW1DD13IgXyQO/4VjPO6VGfTLRVRSqlHjoc9EaG0dENUtF4q Q4veSGpTdWv4WCb8hJ3T/P4EoiIH0NPKDHVQQpcV1f1ouwjv2Ab6IE+/fFO9hQpD JIwv9cOaUcu5a2WSK5Brup/PIuGjfF7ei1nar0bwe1PRg+WIhp8cVQ== -----END CERTIFICATE-----Generated at Mon Jun 16 13:02:58 2025 by rpki-client