$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa File: 2db2e59a-1695-343f-b14c-f4f1be9a9556.roa (raw, json) Hash identifier: Fa0oViyILA8lGRINksG8gTA7OAoCU7JS81XL3A94cD8= Subject key identifier: 71:FC:53:72:7B:4E:7C:80:C2:47:E0:98:40:11:1F:3C:18:7F:4E:7C Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285849E22545F66DE1A5205176F000 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 13781 IP address blocks: 216.206.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:45:f6:6d:e1:a5:20:51:76:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=43386485-e721-442c-a88c-ab73ce2be27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cf:62:4d:85:89:41:8a:8d:ad:5a:ff:27:82: a8:cb:66:15:c0:f9:55:24:24:5a:30:b2:b7:d7:3d: 95:fd:9d:b3:35:17:cb:22:7a:15:22:da:05:c9:ad: 16:e6:d4:c9:9d:4f:7b:ed:8f:f6:dc:2d:80:9e:cc: cc:1f:7c:d1:7a:e5:03:47:0b:57:06:19:8a:19:0d: e3:38:64:f8:fd:53:d6:11:94:f7:0f:a3:a6:7d:3e: 55:d4:b9:b7:eb:fd:8d:bf:25:0a:7c:bf:64:1e:36: 6e:14:c8:4a:60:c1:c0:ec:52:bc:04:4f:75:cd:f5: 3b:52:b4:80:59:f2:0c:47:c2:c4:ff:94:d4:bf:0b: 26:18:e8:50:1b:dd:b4:fd:93:92:98:d0:f6:3b:29: 9b:bd:af:b4:32:36:2f:fa:e8:c6:e4:53:a9:00:c1: 8e:57:c3:31:bc:9d:bd:5d:b3:42:99:0a:f1:89:ba: 6d:f1:67:6f:7e:66:9e:87:98:c3:f4:15:0a:80:32: 90:73:a4:33:4d:ab:48:64:1c:f8:f6:9a:7e:5b:04: 92:33:15:80:be:14:92:65:9b:1d:8e:b2:cf:17:03: 52:1e:65:fa:ce:1e:56:16:5a:f9:f1:97:47:f7:fc: 17:5b:76:ce:ac:64:24:91:f3:b3:cd:ee:5a:ba:5a: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FC:53:72:7B:4E:7C:80:C2:47:E0:98:40:11:1F:3C:18:7F:4E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 216.206.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:3b:58:13:15:c2:8e:f1:40:65:3e:49:c8:4b:5c:a1:fb:9d: ef:32:61:4a:b4:f0:98:62:aa:56:21:c9:ff:21:1b:73:91:6b: 0a:9b:90:df:40:b1:98:76:3c:cc:9d:cb:46:d0:3f:eb:03:8f: d7:d9:f3:47:0f:d1:fd:03:bf:23:e5:43:f1:56:10:c8:4a:91: 56:26:df:e5:de:d0:43:48:7f:9b:c1:b1:6f:a5:18:89:76:4a: 5a:b6:32:94:47:d6:e9:d8:32:34:4a:03:b9:dd:26:90:f5:10: 0b:5b:0d:4d:90:8a:dc:eb:c7:47:20:4a:ea:2a:1f:32:8e:0e: 05:1d:5a:b3:cc:42:b8:fc:24:96:d4:80:70:80:06:d0:43:50: 54:8b:a9:89:ec:37:12:51:fd:8d:2b:77:67:38:5c:ce:76:dd: cd:31:d7:2d:84:33:b1:82:09:83:1d:19:b0:62:60:58:45:25: 21:5a:ac:b9:53:3c:15:3a:a4:03:ca:61:a0:b0:36:32:4a:9f: 83:5f:00:ff:35:fc:d3:a1:5c:97:c4:49:02:68:95:6f:5a:66: dd:77:1f:b7:e6:01:b6:b1:e4:dd:bf:23:f7:62:7d:44:bb:34: dd:4b:53:78:8d:e6:f1:b0:0d:2b:1d:c9:52:43:92:b2:43:bf: d9:57:9f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUX2beGlIFF28AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NDMzODY0ODUtZTcyMS00NDJjLWE4OGMtYWI3M2NlMmJlMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs9iTYWJQYqNrVr/J4Koy2YVwPlVJCRaMLK3 1z2V/Z2zNRfLInoVItoFya0W5tTJnU977Y/23C2AnszMH3zReuUDRwtXBhmKGQ3j OGT4/VPWEZT3D6OmfT5V1Lm36/2NvyUKfL9kHjZuFMhKYMHA7FK8BE91zfU7UrSA WfIMR8LE/5TUvwsmGOhQG920/ZOSmND2Oymbva+0MjYv+ujG5FOpAMGOV8MxvJ29 XbNCmQrxibpt8Wdvfmaeh5jD9BUKgDKQc6QzTatIZBz49pp+WwSSMxWAvhSSZZsd jrLPFwNSHmX6zh5WFlr58ZdH9/wXW3bOrGQkkfOzze5aulrTYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH8U3J7TnyAwkfgmEARHzwYf058MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMmRiMmU1OWEtMTY5NS0z NDNmLWIxNGMtZjRmMWJlOWE5NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2M6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM7WBMVwo7xQGU+SchLXKH7ne8yYUq08JhiqlYhyf8hG3ORawqbkN9A sZh2PMydy0bQP+sDj9fZ80cP0f0DvyPlQ/FWEMhKkVYm3+Xe0ENIf5vBsW+lGIl2 Slq2MpRH1unYMjRKA7ndJpD1EAtbDU2Qitzrx0cgSuoqHzKODgUdWrPMQrj8JJbU gHCABtBDUFSLqYnsNxJR/Y0rd2c4XM523c0x1y2EM7GCCYMdGbBiYFhFJSFarLlT PBU6pAPKYaCwNjJKn4NfAP81/NOhXJfESQJolW9aZt13H7fmAbax5N2/I/difUS7 NN1LU3iN5vGwDSsdyVJDkrJDv9lXn/M= -----END CERTIFICATE-----Generated at Wed Jun 18 03:44:09 2025 by rpki-client