$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa File: 0fa138cc-579e-337f-844b-d4a832c956c9.roa (raw, json) Hash identifier: lSC6XKMvoUyeXA/1Wo9PbYN3InxOQdlhwCPyGZQOpCQ= Subject key identifier: C7:12:A2:DB:48:0D:B8:15:0A:69:DA:58:EC:E2:4E:24:A3:5B:BE:D8 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584A1B5FF3A525B58F7CCBC1C480 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 55039 IP address blocks: 208.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f3:a5:25:b5:8f:7c:cb:c1:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=285baf6e-e501-4cd6-ba94-a5821d1521bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:37:c0:93:3a:d6:bf:fa:af:0e:37:f0:1c: 51:f5:1f:31:4d:c1:2a:5f:8a:53:07:d2:40:e4:6c: ab:30:74:e0:58:66:3b:dc:0e:96:45:b8:6f:60:73: 60:b3:3e:4d:1f:17:46:a4:2d:d8:ef:aa:58:d8:80: 12:f3:e3:46:5e:68:3f:0f:f8:6f:ef:88:f8:47:b4: e6:ac:10:b5:04:5d:00:5b:63:8c:1a:8d:32:d5:d9: 09:cb:69:c0:65:d4:f1:b2:32:8f:90:50:8f:40:bc: 10:ad:6d:18:95:b3:9d:7c:d8:26:43:1f:12:ee:ae: 69:4a:7d:ed:97:cb:2f:ee:7b:18:68:84:d7:75:28: 6a:b8:04:9d:ad:f5:be:16:03:fe:07:57:42:65:e3: 42:ab:62:2b:38:32:15:40:0d:2b:3c:64:c0:60:00: 89:a0:7b:ec:a0:88:1b:74:17:a1:45:89:1f:bc:ba: d2:76:49:94:23:c2:34:9a:31:9a:65:c8:7f:83:65: cd:28:b2:7d:3b:a8:0c:88:94:23:4b:da:0e:a2:47: 0e:fa:28:44:fa:0d:10:92:75:50:a0:68:f5:1f:f0: 28:90:98:59:63:be:8c:fc:f3:b5:83:da:9f:0b:f1: 71:8b:0b:7b:ad:3e:83:6d:25:65:46:fd:7e:ca:f2: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:12:A2:DB:48:0D:B8:15:0A:69:DA:58:EC:E2:4E:24:A3:5B:BE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 208.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0a:f3:fc:08:c3:43:94:df:43:5b:8b:0e:1d:cc:a6:89:29: bf:7f:d4:61:fb:10:39:43:68:54:57:fe:9a:ed:9b:5f:56:8c: d7:10:b2:e8:f9:df:f8:3f:c0:d1:62:a8:58:a2:c1:ed:6f:09: 61:de:0d:6d:22:f4:79:5d:33:3a:2b:99:bc:18:1a:73:6f:ba: e3:bb:e1:6d:be:a1:ef:d6:6b:ab:84:72:6d:e1:e7:56:f8:01: b4:77:ea:d4:e9:8a:b5:01:a6:c9:77:43:2c:63:ce:14:35:53: 0d:25:f6:fd:31:be:2b:f3:a3:a1:d3:7d:34:69:38:b1:3b:8c: d9:32:31:3c:dd:86:b4:51:12:82:cd:c2:d9:88:b9:63:ff:be: a0:1b:a4:c2:e7:4c:af:c9:22:3a:4b:95:59:66:1c:0c:aa:28: 79:ec:60:58:59:4f:94:83:a4:c1:1e:93:ea:d2:81:63:6d:e0: e2:4e:30:1e:4d:3c:e6:1c:21:c2:20:05:4c:62:80:51:df:0e: 41:f7:0a:2d:9c:b6:c3:be:4a:92:53:cf:e8:74:f9:aa:91:37: 26:d2:b5:af:d1:74:cc:80:28:68:08:9f:06:95:c5:82:e7:7d: a5:dc:a7:3a:7d:91:9f:4a:53:8a:bc:07:e5:32:11:c4:91:1a: f5:af:79:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/OlJbWPfMvBxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk Mjg1YmFmNmUtZTUwMS00Y2Q2LWJhOTQtYTU4MjFkMTUyMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqE3wJM61r/6rw438BxR9R8xTcEqX4pTB9JA 5GyrMHTgWGY73A6WRbhvYHNgsz5NHxdGpC3Y76pY2IAS8+NGXmg/D/hv74j4R7Tm rBC1BF0AW2OMGo0y1dkJy2nAZdTxsjKPkFCPQLwQrW0YlbOdfNgmQx8S7q5pSn3t l8sv7nsYaITXdShquASdrfW+FgP+B1dCZeNCq2IrODIVQA0rPGTAYACJoHvsoIgb dBehRYkfvLrSdkmUI8I0mjGaZch/g2XNKLJ9O6gMiJQjS9oOokcO+ihE+g0QknVQ oGj1H/AokJhZY76M/PO1g9qfC/Fxiwt7rT6DbSVlRv1+yvK4rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcSottIDbgVCmnaWOziTiSjW77YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMGZhMTM4Y2MtNTc5ZS0z MzdmLTg0NGItZDRhODMyYzk1NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoK8/wIw0OU30Nbiw4dzKaJKb9/1GH7EDlDaFRX/prtm19WjNcQsuj5 3/g/wNFiqFiiwe1vCWHeDW0i9HldMzormbwYGnNvuuO74W2+oe/Wa6uEcm3h51b4 AbR36tTpirUBpsl3QyxjzhQ1Uw0l9v0xvivzo6HTfTRpOLE7jNkyMTzdhrRREoLN wtmIuWP/vqAbpMLnTK/JIjpLlVlmHAyqKHnsYFhZT5SDpMEek+rSgWNt4OJOMB5N POYcIcIgBUxigFHfDkH3Ci2ctsO+SpJTz+h0+aqRNybSta/RdMyAKGgInwaVxYLn faXcpzp9kZ9KU4q8B+UyEcSRGvWveTg= -----END CERTIFICATE-----Generated at Tue Jun 17 16:21:36 2025 by rpki-client