$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa File: 3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa (raw, json) Hash identifier: ma72kDbQHYd0aHllCzNkpHEY4nPrQ78DTWDLsD89Ntg= Subject key identifier: 8A:4A:04:E3:DC:FF:47:F3:29:5F:10:48:CC:01:CE:23:89:7F:19:1C Certificate issuer: /CN=bf862f27-363f-42ce-ab7e-31739b3660a0 Certificate serial: 010D0C9F43285849F715277B3B0496FDD6280760 Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 53264 IP address blocks: 216.38.228.0/24 maxlen: 24 216.38.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:27:7b:3b:04:96:fd:d6:28:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=6d6d0461-4bc4-45df-82a7-025c56f76729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:f8:33:33:33:2b:18:b9:85:f4:42:ad:a8: ec:6c:04:91:35:6f:5e:d6:77:eb:9a:0c:10:d3:df: 5f:c1:da:d4:0e:cf:e3:54:df:e6:42:66:84:d1:3e: b7:9e:cb:32:7e:9f:1e:32:2d:5c:2b:45:84:af:16: 83:bb:7a:74:af:7e:c1:a2:25:d3:a4:fd:3b:33:36: df:4d:e6:19:ee:e8:02:ab:26:a4:4d:48:7f:7a:11: 6e:ee:bf:f5:4d:65:e3:8d:b1:1e:76:94:d8:f7:2b: 7f:37:21:9b:68:d8:6b:0a:3f:e4:4d:f8:be:4b:81: a5:46:c7:b4:ea:16:26:4e:dc:ce:80:1f:6a:b3:fa: 93:d1:13:3f:8e:62:15:2e:54:01:76:ff:ab:4f:49: 90:43:59:3a:eb:5d:cd:5d:df:c5:96:c4:db:dd:88: 16:0d:8f:ff:3f:62:e0:71:e1:15:46:0a:07:3e:76: 05:66:a8:e3:3c:0c:d3:8c:82:ad:68:35:19:01:d8: 33:4c:93:a9:9f:e4:a2:2f:68:af:fd:96:bb:3c:70: 61:94:9e:42:8e:ce:bd:0a:aa:65:b0:01:23:9d:4a: 29:8d:3a:8b:af:fb:c2:bf:d0:a6:77:44:b7:d6:c0: a6:ff:11:03:9f:82:68:58:05:0f:55:38:1b:1e:e9: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4A:04:E3:DC:FF:47:F3:29:5F:10:48:CC:01:CE:23:89:7F:19:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl X509v3 Authority Key Identifier: keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer sbgp-ipAddrBlock: critical IPv4: 216.38.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:01:fb:44:c4:ee:39:c9:a7:fd:a9:9b:93:f0:71:d2:29:30: 8b:54:5c:de:80:b2:da:c0:fc:dd:b7:e7:9f:7b:c9:f9:d1:a5: 3c:71:e3:35:16:21:2a:de:fd:6c:46:13:6b:8a:d6:3d:26:1a: 9c:40:f2:41:1a:47:e6:61:8e:99:e6:04:af:81:b6:0f:d8:3c: df:1e:c2:5a:95:06:43:94:28:af:00:e4:d5:9b:fb:27:5b:8d: 20:7f:21:89:a4:f9:09:e3:7f:1b:7d:d5:1f:30:39:8b:04:3d: 17:c5:6a:87:4d:03:49:59:f5:fa:2e:45:a4:cb:df:bb:c1:4b: 02:b8:b8:70:52:31:39:f4:88:3b:ed:d5:76:a7:b4:32:d1:e7: d4:72:49:66:40:08:c0:f7:57:4f:bc:57:6d:25:9d:d8:dc:bc: 35:27:70:de:f0:1b:19:fa:f5:98:d2:a1:40:1b:41:75:c5:b1: 5c:39:bc:e1:c5:16:97:32:a1:0b:a1:16:41:cc:f5:25:2c:01: 07:12:cb:b9:bb:26:a7:0a:41:f6:7d:89:27:ce:99:f8:03:dd: 4e:bc:b2:44:82:47:29:15:bd:92:35:5c:cb:57:91:c6:e4:8a: 9a:d9:bb:e0:f2:27:c2:c7:1f:5e:d6:3b:e5:0f:3a:99:0b:f2: 8e:4e:8f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSd7OwSW/dYoB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4NjJmMjctMzYzZi00MmNlLWFiN2UtMzE3MzliMzY2 MGEwMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NmQ2ZDA0NjEtNGJjNC00NWRmLTgyYTctMDI1YzU2Zjc2NzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCT4MzMzKxi5hfRCrajsbASRNW9e1nfrmgwQ 099fwdrUDs/jVN/mQmaE0T63nssyfp8eMi1cK0WErxaDu3p0r37BoiXTpP07Mzbf TeYZ7ugCqyakTUh/ehFu7r/1TWXjjbEedpTY9yt/NyGbaNhrCj/kTfi+S4GlRse0 6hYmTtzOgB9qs/qT0RM/jmIVLlQBdv+rT0mQQ1k6613NXd/FlsTb3YgWDY//P2Lg ceEVRgoHPnYFZqjjPAzTjIKtaDUZAdgzTJOpn+SiL2iv/Za7PHBhlJ5Cjs69Cqpl sAEjnUopjTqLr/vCv9Cmd0S31sCm/xEDn4JoWAUPVTgbHumJawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpKBOPc/0fzKV8QSMwBziOJfxkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2 MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTczOWIzNjYwYTAvM2NmNGU2YjEtNGVlMC0z MzljLWJiNWUtYmE1NjlhZjAyODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmY4NjJmMjctMzYzZi00MmNlLWFi N2UtMzE3MzliMzY2MGEwL2JmODYyZjI3LTM2M2YtNDJjZS1hYjdlLTMxNzM5YjM2 NjBhMC5jcmwwHwYDVR0jBBgwFoAU/Mn+2ixOINbiezYnXAE0YqRk2m8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTcz OWIzNjYwYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2CbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4B+0TE7jnJp/2pm5PwcdIpMItUXN6AstrA/N235597yfnRpTxx4zUW ISre/WxGE2uK1j0mGpxA8kEaR+ZhjpnmBK+Btg/YPN8ewlqVBkOUKK8A5NWb+ydb jSB/IYmk+Qnjfxt91R8wOYsEPRfFaodNA0lZ9fouRaTL37vBSwK4uHBSMTn0iDvt 1XantDLR59RySWZACMD3V0+8V20lndjcvDUncN7wGxn69ZjSoUAbQXXFsVw5vOHF FpcyoQuhFkHM9SUsAQcSy7m7JqcKQfZ9iSfOmfgD3U68skSCRykVvZI1XMtXkcbk iprZu+DyJ8LHH17WO+UPOpkL8o5Oj1o= -----END CERTIFICATE-----Generated at Mon Jun 16 23:33:48 2025 by rpki-client