$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa File: 3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa (raw, json) Hash identifier: 9F0pRAPQxpHhWZw5CJ2g98gcbX9UWCCJdx/7sBxTza8= Subject key identifier: 04:4F:76:5A:88:82:58:88:74:6C:60:1A:EC:73:51:20:80:EC:41:69 Certificate issuer: /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Certificate serial: 010D0C9F4328584A23C016A0D2F71075599B1C00 Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 173.213.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:16:a0:d2:f7:10:75:59:9b:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=629966f8-801a-4eea-b3e2-1801b4fd980d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:a9:51:15:10:33:9b:33:a0:9b:5b:45:07: 90:84:e0:be:dc:71:bf:86:e4:96:78:d2:8e:c7:25: 88:30:32:84:bc:49:e5:83:b6:9e:a4:68:d9:a9:41: f8:b3:ea:c0:f2:5a:32:0b:53:f0:c9:7f:dd:c8:0d: 84:a9:77:ad:07:5a:b8:20:c0:a2:77:ef:ea:28:0a: 98:51:a8:a0:83:35:c8:79:6e:89:53:0a:ed:aa:16: 65:53:6f:91:b3:5b:c3:f9:68:94:ae:11:7b:ae:92: 73:50:e0:31:57:2e:d7:0f:7b:4a:a4:20:3c:0c:d7: 9e:87:f5:d9:eb:ac:91:57:0e:1c:ec:ff:5c:5f:f5: 7a:d6:78:86:ea:8a:58:13:6d:18:87:53:18:e2:6d: bb:48:2c:9c:a2:bb:cd:e4:c2:f2:4f:9f:9f:b2:82: 1b:49:bc:c9:ba:20:f2:95:48:08:62:f8:cb:26:69: 80:8f:fd:8e:ff:58:b7:da:ee:e0:69:77:d1:03:85: 9b:f1:ba:02:f7:5e:61:23:2d:5f:97:39:76:f9:70: 42:70:81:0e:2b:de:1d:90:94:bb:7d:9e:ce:ef:0b: 96:66:55:da:ec:38:31:22:20:a2:7f:1b:eb:cf:08: fc:01:5f:86:43:91:1e:7a:0e:07:d6:54:78:67:25: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4F:76:5A:88:82:58:88:74:6C:60:1A:EC:73:51:20:80:EC:41:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl X509v3 Authority Key Identifier: keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer sbgp-ipAddrBlock: critical IPv4: 173.213.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d8:07:c1:b8:b7:f7:1e:f0:4a:a2:79:ba:b3:7d:2e:8e:9a: 59:b8:72:70:5c:9f:26:a4:96:65:bf:f9:f8:91:19:ae:ee:f0: 5c:bd:f0:a6:dc:ee:3d:a0:8c:39:d5:59:56:c9:59:65:95:a1: 81:84:cd:05:d6:0f:61:d1:3c:ba:83:e4:d9:aa:ff:c3:c9:34: f9:0b:81:fe:c0:81:b0:7d:84:c0:70:3b:a0:b1:31:51:46:fc: a3:7b:bf:f4:10:8f:4c:ff:40:d0:80:b5:97:1c:07:bf:23:71: 25:5a:c0:1e:0d:5d:28:5e:90:66:c1:9c:b9:5e:fd:22:ca:6d: f0:25:7d:b0:fe:05:2c:f2:b3:d2:66:94:da:44:a9:63:ec:73: f6:b5:80:51:0d:fb:be:f3:08:4b:03:cb:39:7a:69:26:1b:d5: a0:73:fa:f6:92:a3:31:e1:e0:91:37:52:81:c9:fe:4a:2c:4f: 76:72:3d:34:46:7c:89:5c:0e:f0:85:34:6f:10:32:71:42:eb: 10:00:3f:a7:d8:65:77:cc:a2:6b:89:6a:77:6d:28:13:c9:c6: f5:66:91:15:ad:82:f5:ea:1c:23:31:23:1e:46:22:c7:2b:f3: 6f:33:e8:ed:6d:e0:61:2c:62:66:26:0c:5f:12:64:b1:44:df: 97:d1:a9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBag0vcQdVmbHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy ZTQxMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NjI5OTY2ZjgtODAxYS00ZWVhLWIzZTItMTgwMWI0ZmQ5ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/WpURUQM5szoJtbRQeQhOC+3HG/huSWeNKO xyWIMDKEvEnlg7aepGjZqUH4s+rA8loyC1PwyX/dyA2EqXetB1q4IMCid+/qKAqY UaiggzXIeW6JUwrtqhZlU2+Rs1vD+WiUrhF7rpJzUOAxVy7XD3tKpCA8DNeeh/XZ 66yRVw4c7P9cX/V61niG6opYE20Yh1MY4m27SCycorvN5MLyT5+fsoIbSbzJuiDy lUgIYvjLJmmAj/2O/1i32u7gaXfRA4Wb8boC915hIy1flzl2+XBCcIEOK94dkJS7 fZ7O7wuWZlXa7DgxIiCifxvrzwj8AV+GQ5Eeeg4H1lR4ZyW+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARPdlqIgliIdGxgGuxzUSCA7EFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvM2UyNDllZDgtYThiMS0z YWQwLTgwMTEtNjdlMTQ2MTRhYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2 MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrdUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbYB8G4t/ce8EqiebqzfS6Omlm4cnBcnyaklmW/+fiRGa7u8Fy98Kbc 7j2gjDnVWVbJWWWVoYGEzQXWD2HRPLqD5Nmq/8PJNPkLgf7AgbB9hMBwO6CxMVFG /KN7v/QQj0z/QNCAtZccB78jcSVawB4NXShekGbBnLle/SLKbfAlfbD+BSzys9Jm lNpEqWPsc/a1gFEN+77zCEsDyzl6aSYb1aBz+vaSozHh4JE3UoHJ/kosT3ZyPTRG fIlcDvCFNG8QMnFC6xAAP6fYZXfMomuJandtKBPJxvVmkRWtgvXqHCMxIx5GIscr 828z6O1t4GEsYmYmDF8SZLFE35fRqQY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:34:11 2025 by rpki-client