$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa File: cf72ba59-053f-3de2-833b-4c405ca166b0.roa (raw, json) Hash identifier: NrDWh4AJB6tNVqEmfTyeT6NTWvTB1TgGGFteoCfuzsY= Subject key identifier: C7:F9:0F:CD:23:20:CB:63:FD:77:06:F0:BA:FD:17:83:4B:CE:78:39 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A0D6A842E31E36A789C73D548 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 14061 IP address blocks: 209.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:84:2e:31:e3:6a:78:9c:73:d5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=49351d5a-a760-4ab1-b964-211c24ec8b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:73:21:a2:c2:49:50:03:c5:8c:68:28:e3: cc:da:d4:50:4e:1c:bd:61:3c:71:fb:44:fb:de:de: 8a:c8:ed:9d:9a:31:1e:c7:56:d4:19:20:bb:49:0a: 59:e2:97:45:8e:73:4f:50:33:2d:22:e9:c2:9f:ba: cd:07:a3:f2:d8:c2:21:76:fe:78:e1:a7:9e:46:cf: 8a:49:ff:85:2a:20:d0:25:43:e2:a8:fb:c8:51:8c: 72:a5:9d:4c:c1:0f:63:61:fb:31:51:04:26:7c:b3: 21:57:c3:09:60:b7:80:27:74:a9:8b:b3:fe:f1:18: 90:4d:ac:c9:b7:a3:77:de:79:47:44:37:3a:ef:a7: 5e:ee:4c:b8:bb:04:d0:29:3e:88:39:a0:ce:75:81: 4f:01:89:93:fc:fe:7a:fd:e6:7e:0b:0b:67:98:22: e0:9a:8b:03:db:46:33:c7:75:0b:c5:97:72:7b:d9: 7b:02:66:27:27:3e:a2:07:90:00:a5:6d:4d:34:c4: af:64:41:5e:e9:3e:51:27:c9:b7:fb:6e:1d:93:30: d3:21:ae:e9:0a:ef:d9:92:5e:69:ab:70:ad:ac:6e: 44:8b:60:f9:8f:c0:44:23:62:a3:33:32:fa:bd:21: 42:48:fa:09:76:5e:e9:63:cc:ac:88:5b:6b:59:15: f1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F9:0F:CD:23:20:CB:63:FD:77:06:F0:BA:FD:17:83:4B:CE:78:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:62:4c:59:e1:ad:83:23:88:33:0e:45:4c:2e:3d:3d:9e:e0: 28:c7:af:fe:49:89:8e:40:e6:e4:03:a9:bf:48:43:3d:43:d7: 28:be:76:57:49:4a:99:0c:08:7a:31:95:c0:82:3d:47:bc:da: a9:2f:d3:5b:cb:b7:16:1e:7e:06:f5:21:f5:79:d4:0a:00:3b: 91:b7:43:40:79:18:06:94:f5:13:11:a9:5a:b4:2c:97:00:5a: 67:7d:03:15:c3:8f:5d:24:08:dd:82:78:76:51:be:61:11:df: 3c:cc:cb:ca:b5:36:3d:55:42:c5:1d:41:2e:7d:1a:6f:a5:86: 43:36:99:d8:6a:9f:5f:a5:a0:49:4f:1a:c0:47:09:0c:28:3d: 73:4a:a3:e8:81:0c:23:eb:2f:d4:95:4f:d2:af:7f:ea:6e:a6: 1e:0e:9a:03:a7:be:bf:b5:7d:1f:c4:6b:54:12:8b:eb:10:9c: af:69:23:3c:47:9e:32:f8:32:8f:f9:96:49:c0:4e:02:a8:03: 31:d8:e4:61:f4:59:0b:f2:a2:64:d7:64:5e:dc:4c:3e:97:47: 6c:59:35:6e:a3:ca:ab:04:90:7b:79:e7:c5:50:c3:61:1a:f0: fb:72:c7:98:e6:f2:ee:06:7c:92:2a:f3:94:79:a5:7c:93:9d: fd:5b:10:86 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoNaoQuMeNqeJxz1UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk NDkzNTFkNWEtYTc2MC00YWIxLWI5NjQtMjExYzI0ZWM4YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/1zIaLCSVADxYxoKOPM2tRQThy9YTxx+0T7 3t6KyO2dmjEex1bUGSC7SQpZ4pdFjnNPUDMtIunCn7rNB6Py2MIhdv544aeeRs+K Sf+FKiDQJUPiqPvIUYxypZ1MwQ9jYfsxUQQmfLMhV8MJYLeAJ3Spi7P+8RiQTazJ t6N33nlHRDc676de7ky4uwTQKT6IOaDOdYFPAYmT/P56/eZ+CwtnmCLgmosD20Yz x3ULxZdye9l7AmYnJz6iB5AApW1NNMSvZEFe6T5RJ8m3+24dkzDTIa7pCu/Zkl5p q3CtrG5Ei2D5j8BEI2KjMzL6vSFCSPoJdl7pY8ysiFtrWRXxiwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMf5D80jIMtj/XcG8Lr9F4NLzng5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2Y3MmJhNTktMDUzZi0z ZGUyLTgzM2ItNGM0MDVjYTE2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0SYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaGJMWeGtgyOIMw5FTC49PZ7gKMev/kmJjkDm5AOpv0hDPUPXKL52V0lK mQwIejGVwII9R7zaqS/TW8u3Fh5+BvUh9XnUCgA7kbdDQHkYBpT1ExGpWrQslwBa Z30DFcOPXSQI3YJ4dlG+YRHfPMzLyrU2PVVCxR1BLn0ab6WGQzaZ2GqfX6WgSU8a wEcJDCg9c0qj6IEMI+sv1JVP0q9/6m6mHg6aA6e+v7V9H8RrVBKL6xCcr2kjPEee Mvgyj/mWScBOAqgDMdjkYfRZC/KiZNdkXtxMPpdHbFk1bqPKqwSQe3nnxVDDYRrw +3LHmOby7gZ8kirzlHmlfJOd/VsQhg== -----END CERTIFICATE-----Generated at Sun Jun 15 17:33:51 2025 by rpki-client