$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa File: 352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa (raw, json) Hash identifier: tU/cfzag4oiAjxG5OlxdroOKcAvz0DX3quYDA1Q8u7s= Subject key identifier: BD:C2:57:49:B4:3B:00:3D:E2:85:04:FC:BD:09:2C:DA:A6:2A:76:51 Certificate issuer: /CN=f509b96c-10eb-4731-ae65-8d698aade657 Certificate serial: 010D0C9F4328584A2ABADA19F35FC483232BA2C0 Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 8075 IP address blocks: 208.66.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:da:19:f3:5f:c4:83:23:2b:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=b8e47c8a-0216-4b50-a8bb-ce131d024a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:22:3c:65:08:be:67:e7:61:ec:f2:db:f8: 3c:b9:ab:a9:e7:2b:65:83:a1:5e:a1:f7:0d:63:cd: 83:9c:c3:23:99:24:b6:df:92:7a:78:32:28:98:ff: 29:7c:09:57:34:bc:90:d7:bc:0f:81:69:ff:9d:16: a2:73:54:42:d8:96:9c:9d:13:f1:59:5e:07:cc:96: bb:6f:93:b6:b8:57:3d:d6:07:55:1a:f3:49:f3:32: bf:ab:68:95:08:af:d1:44:42:8c:f9:15:4b:6e:ee: 8e:d7:54:cb:2e:e1:16:2d:bc:d8:71:61:fd:e4:dc: 26:39:54:a9:17:3b:ca:c1:33:5b:f9:5f:29:72:7b: 95:06:98:ff:74:13:ba:08:5b:93:64:47:bc:bb:ad: 3b:4d:52:b7:09:67:c7:70:05:d2:48:30:9f:ce:b1: 42:85:0a:a4:e8:88:fc:93:9c:23:c2:92:a0:29:75: 19:76:e7:7f:ba:82:bb:17:54:34:d7:e5:4d:16:08: 40:a8:26:49:b7:69:e0:82:c1:bc:46:ff:6f:0e:c7: ec:e5:de:28:76:e6:7e:e1:f1:48:a7:c6:f3:58:b4: 0a:86:57:fd:8b:32:64:0d:8c:d0:b2:8e:3e:c4:4e: 6d:4a:4e:5b:4d:67:1f:24:43:64:98:f9:a3:4e:83: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:57:49:B4:3B:00:3D:E2:85:04:FC:BD:09:2C:DA:A6:2A:76:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl X509v3 Authority Key Identifier: keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer sbgp-ipAddrBlock: critical IPv4: 208.66.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8a:c4:48:ec:90:73:0c:86:84:60:c4:82:76:c5:fc:59:17: d6:7b:06:74:6a:07:31:0c:bb:db:b7:4f:0b:dc:19:b5:66:60: 8e:22:19:ae:b6:19:7e:ec:45:f8:4e:ea:59:3b:fb:f0:a7:a7: bb:82:3f:a4:cb:89:32:06:13:bc:ab:82:44:50:d8:cf:b0:6d: b3:e6:aa:2c:04:52:99:1e:11:60:f1:05:af:f8:05:6e:7a:e7: 6d:0b:09:b1:e7:09:10:dc:ce:e3:aa:6b:d9:ee:24:a9:81:95: ed:f1:be:07:05:71:31:da:d3:c3:cd:25:14:9c:87:ff:01:11: 3b:c3:d9:ce:e6:79:0c:01:71:12:f5:d3:50:5b:21:d1:59:b1: 7c:47:1a:3b:22:56:28:7b:a1:08:33:4d:5a:69:18:73:b6:c9: 6b:a2:a7:15:1a:1b:cb:a0:85:0e:dc:bf:13:45:69:be:6a:43: a2:c8:36:f2:f6:a8:43:19:f8:fb:f3:a3:f3:43:48:08:fa:b2: ad:16:f0:55:c0:61:95:e9:b8:c9:cf:a4:53:d5:ed:a0:9d:be: ba:aa:c5:81:d2:43:4d:e1:c4:3c:29:6d:96:9a:2e:a4:f5:e8: c6:ac:0e:8e:bb:0a:a4:2c:7b:49:cd:54:7b:28:81:c6:1a:89: 0f:84:5e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutoZ81/EgyMrosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUwOWI5NmMtMTBlYi00NzMxLWFlNjUtOGQ2OThhYWRl NjU3MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YjhlNDdjOGEtMDIxNi00YjUwLWE4YmItY2UxMzFkMDI0YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMsiPGUIvmfnYezy2/g8uaup5ytlg6FeofcN Y82DnMMjmSS235J6eDIomP8pfAlXNLyQ17wPgWn/nRaic1RC2JacnRPxWV4HzJa7 b5O2uFc91gdVGvNJ8zK/q2iVCK/RREKM+RVLbu6O11TLLuEWLbzYcWH95NwmOVSp FzvKwTNb+V8pcnuVBpj/dBO6CFuTZEe8u607TVK3CWfHcAXSSDCfzrFChQqk6Ij8 k5wjwpKgKXUZdud/uoK7F1Q01+VNFghAqCZJt2nggsG8Rv9vDsfs5d4oduZ+4fFI p8bzWLQKhlf9izJkDYzQso4+xE5tSk5bTWcfJENkmPmjToNa1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3CV0m0OwA94oUE/L0JLNqmKnZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5 Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5OGFhZGU2NTcvMzUyZmVjMWQtYTFlOS0z NGYyLWExOWEtMjdmY2E5ZmQ3ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjUwOWI5NmMtMTBlYi00NzMxLWFl NjUtOGQ2OThhYWRlNjU3L2Y1MDliOTZjLTEwZWItNDczMS1hZTY1LThkNjk4YWFk ZTY1Ny5jcmwwHwYDVR0jBBgwFoAUiPEsKTw08jE1u7qyI9SATNUFYowwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5 OGFhZGU2NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ELkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmKxEjskHMMhoRgxIJ2xfxZF9Z7BnRqBzEMu9u3TwvcGbVmYI4iGa62 GX7sRfhO6lk7+/Cnp7uCP6TLiTIGE7yrgkRQ2M+wbbPmqiwEUpkeEWDxBa/4BW56 520LCbHnCRDczuOqa9nuJKmBle3xvgcFcTHa08PNJRSch/8BETvD2c7meQwBcRL1 01BbIdFZsXxHGjsiVih7oQgzTVppGHO2yWuipxUaG8ughQ7cvxNFab5qQ6LINvL2 qEMZ+Pvzo/NDSAj6sq0W8FXAYZXpuMnPpFPV7aCdvrqqxYHSQ03hxDwpbZaaLqT1 6MasDo67CqQse0nNVHsogcYaiQ+EXig= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:42 2025 by rpki-client