$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/cf55352d-0396-321a-a7aa-13ef996b8602.roa File: cf55352d-0396-321a-a7aa-13ef996b8602.roa (raw, json) Hash identifier: KQ28YgjLgghq2GkwK3Ro1I0ncc/QFBNnXTwl3smFf74= Subject key identifier: E4:23:41:CA:58:2B:92:0E:74:1C:00:3D:D0:65:A9:B8:27:C1:10:4C Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Certificate serial: 010D0C9F4328584A3A1586E77B974E6E240CF496 Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/cf55352d-0396-321a-a7aa-13ef996b8602.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 23465 IP address blocks: 216.38.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:86:e7:7b:97:4e:6e:24:0c:f4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=35b34b9b-4561-4796-bd8b-b480137086df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:74:10:80:3e:bf:46:22:1e:42:d8:9d:52: 4b:31:79:7d:70:06:43:8c:c6:14:50:be:e0:60:03: 3f:1a:fc:99:a6:4b:3d:84:d1:df:33:b2:48:e6:ea: de:3e:24:47:18:ee:4f:9f:e8:1c:3a:4b:c3:f9:eb: 71:f1:2c:c4:dd:c9:d9:4e:8a:e0:6e:52:80:06:fe: 75:aa:98:1b:b4:1b:75:a2:9f:91:22:e5:89:3e:1c: 7d:a2:27:ec:e1:b4:18:cc:c4:39:fa:07:4d:74:c8: cd:e9:c4:d5:dd:c8:00:7c:e3:e1:f7:db:23:36:c8: f8:a4:b0:25:bf:44:f2:b6:5b:d4:6f:fe:f6:36:2a: 94:6b:08:62:98:c2:1a:18:5a:8c:98:68:75:a6:5f: 32:4f:77:e2:5f:49:54:b6:83:2e:cb:29:bf:93:93: 77:c9:93:bd:8b:94:9d:31:e8:a2:91:eb:14:a4:18: be:4d:9a:fa:7a:0b:1c:fc:85:06:b4:7e:9f:67:bf: 2e:17:28:86:23:ae:ef:d0:f9:e8:5c:35:49:9c:05: 12:81:84:51:a5:e2:97:65:e7:a5:3a:5e:a2:47:99: 7b:25:1c:1f:1f:95:83:db:c1:22:a4:25:01:ae:fb: d7:68:77:3e:fb:a9:c1:23:d0:5c:c7:f1:df:4c:2b: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:23:41:CA:58:2B:92:0E:74:1C:00:3D:D0:65:A9:B8:27:C1:10:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/cf55352d-0396-321a-a7aa-13ef996b8602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl X509v3 Authority Key Identifier: keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer sbgp-ipAddrBlock: critical IPv4: 216.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0f:18:bc:12:cb:d8:d5:e9:e3:7c:44:ba:1a:b4:57:0b:bf: cc:ca:87:ce:b4:c5:5d:87:46:c3:b6:0b:32:fc:eb:c7:06:23: a2:15:87:cd:94:b4:81:e3:34:33:7f:6c:11:50:39:9c:64:c2: e5:e0:a7:0d:69:01:f5:ba:18:24:f5:00:61:d0:8c:e1:ca:d1: 51:bd:8a:bd:91:4b:80:32:a2:01:e9:e5:4a:14:15:38:0e:26: 78:90:bd:4e:02:8f:f4:d6:98:14:8d:73:14:f8:40:4f:cd:ee: 7c:61:b5:d8:bb:0c:f2:0d:e9:e0:cb:51:2f:16:78:68:df:ea: 10:7c:a6:e0:d5:e0:71:30:d8:d9:7c:e4:1d:99:66:36:d7:5b: ea:cf:b7:41:c1:10:86:dc:08:c6:a6:f5:4b:33:0e:26:dc:8f: bd:a9:b5:22:05:6e:68:62:08:3c:79:15:52:77:59:52:53:2f: 8b:57:65:4d:5a:46:8d:f4:24:cc:33:52:2e:36:1a:7e:2c:d4: df:87:3d:fd:52:bb:cc:d7:8f:44:f4:53:88:84:15:bf:dc:4c: 75:62:42:e2:d2:2a:eb:3b:dd:f2:c4:6f:70:00:3d:3e:6f:27: 7f:5d:2c:a7:b3:1d:c0:be:46:96:40:6f:48:4b:1c:f0:d1:b3: c3:23:57:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYbne5dObiQM9JYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz YTdhMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MzViMzRiOWItNDU2MS00Nzk2LWJkOGItYjQ4MDEzNzA4NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaV0EIA+v0YiHkLYnVJLMXl9cAZDjMYUUL7g YAM/GvyZpks9hNHfM7JI5urePiRHGO5Pn+gcOkvD+etx8SzE3cnZTorgblKABv51 qpgbtBt1op+RIuWJPhx9oifs4bQYzMQ5+gdNdMjN6cTV3cgAfOPh99sjNsj4pLAl v0TytlvUb/72NiqUawhimMIaGFqMmGh1pl8yT3fiX0lUtoMuyym/k5N3yZO9i5Sd MeiikesUpBi+TZr6egsc/IUGtH6fZ78uFyiGI67v0PnoXDVJnAUSgYRRpeKXZeel Ol6iR5l7JRwfH5WD28EipCUBrvvXaHc++6nBI9Bcx/HfTCvuHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQjQcpYK5IOdBwAPdBlqbgnwRBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvY2Y1NTM1MmQtMDM5Ni0z MjFhLWE3YWEtMTNlZjk5NmI4NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1 YmIxMjNhN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2CYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsPGLwSy9jV6eN8RLoatFcLv8zKh860xV2HRsO2CzL868cGI6IVh82U tIHjNDN/bBFQOZxkwuXgpw1pAfW6GCT1AGHQjOHK0VG9ir2RS4AyogHp5UoUFTgO JniQvU4Cj/TWmBSNcxT4QE/N7nxhtdi7DPIN6eDLUS8WeGjf6hB8puDV4HEw2Nl8 5B2ZZjbXW+rPt0HBEIbcCMam9UszDibcj72ptSIFbmhiCDx5FVJ3WVJTL4tXZU1a Ro30JMwzUi42Gn4s1N+HPf1Su8zXj0T0U4iEFb/cTHViQuLSKus73fLEb3AAPT5v J39dLKezHcC+RpZAb0hLHPDRs8MjV5s= -----END CERTIFICATE-----Generated at Wed Jun 18 06:01:28 2025 by rpki-client