$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa File: def9b23b-c280-3ecf-944f-d95c26db0ef0.roa (raw, json) Hash identifier: CJhHvtL9a4DClwWS8VbKWNDrdlRI+JDAEpOBsmmWKTE= Subject key identifier: 2A:15:B5:BC:38:9C:2F:51:61:85:38:78:A2:7E:4A:CD:A3:0A:96:C5 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F43285849FE0FEC8AF9B38E7090A0D000 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 62707 IP address blocks: 208.80.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ec:8a:f9:b3:8e:70:90:a0:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=b9dec5c1-e997-4643-932f-328720de3c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:11:7f:0f:7a:0f:f2:c2:9b:ec:81:10:c3: 07:17:f4:14:b4:36:16:d0:d0:d4:06:a4:b6:0d:26: d5:3f:fd:74:b3:14:2b:41:1c:85:d8:2e:e6:a7:82: 6b:7a:6b:41:34:02:14:d3:93:59:ff:95:e1:0a:57: 32:19:02:19:27:e8:ab:7e:31:b3:ae:a0:e6:cb:9d: 84:e5:4e:6c:0c:5e:a4:e8:0f:4d:50:10:5d:f3:6a: 5e:0f:f5:a9:e1:3a:08:83:fa:7a:fc:fe:07:7b:f2: b2:e9:30:b5:14:79:2d:35:71:96:8c:f1:1d:04:31: 3f:02:30:08:21:6b:82:be:89:5b:79:50:6b:12:bc: f2:5d:c1:9d:28:23:11:27:51:95:c4:71:16:cf:64: 7a:0e:82:b3:ae:8f:e3:37:1d:cf:57:61:ee:bf:b5: 09:ba:1d:64:cf:b6:8c:9a:bf:fa:4b:cf:45:29:08: e9:58:0f:3f:4d:8e:75:7d:fe:70:fe:15:d3:8b:da: 3b:40:ab:d9:af:8e:90:57:66:cf:01:23:45:bb:bf: 5e:bd:46:8c:02:b6:e3:6c:1b:47:91:38:e0:44:4b: d1:c6:79:ef:a2:c5:ce:58:f0:58:4b:76:bf:c0:b6: 48:7e:04:9b:b7:f7:40:2c:97:6e:ad:58:e4:bc:80: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:15:B5:BC:38:9C:2F:51:61:85:38:78:A2:7E:4A:CD:A3:0A:96:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 208.80.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:cc:a1:c6:b8:c4:4d:3c:37:f3:03:c3:5a:0c:62:dc:4e:c7: 72:11:52:d1:5b:46:67:d4:79:b3:c0:ed:40:59:4c:82:3e:c7: 70:0b:2a:95:dc:55:ee:ee:d9:c9:40:ad:58:ee:f2:02:28:11: 20:51:b6:a2:2b:83:59:84:30:59:89:e5:2c:a6:6e:53:98:d8: 85:03:a6:dd:9b:e9:d3:76:ef:07:49:75:c1:47:15:5a:e8:df: de:3e:6a:73:66:b9:15:0a:1a:74:09:83:fd:7b:5f:95:e8:9a: 3a:20:b6:3d:e4:8a:00:70:61:f6:bf:71:b0:66:83:92:1d:7e: e4:77:14:4d:29:f2:4b:1e:89:50:37:a6:78:e0:1c:b5:e7:42: e3:3c:5d:d6:41:3a:c0:54:9a:53:db:9f:85:0c:8b:a7:fb:26: c3:42:92:96:9e:e3:0c:f7:b9:22:98:7d:c8:cc:2b:29:17:b2: 64:78:52:a8:6e:4d:35:88:37:a1:0b:46:34:8b:03:80:f0:71: d2:b1:f1:86:9a:9d:f3:4a:80:79:86:f9:0a:36:f8:73:8d:b6: f1:9a:21:02:33:d5:85:d6:4d:77:a0:17:47:d3:85:75:d3:64: d3:1c:c3:18:9a:9e:4e:43:13:52:a8:08:b1:33:28:a3:d6:00: 18:a8:61:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+yK+bOOcJCg0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YjlkZWM1YzEtZTk5Ny00NjQzLTkzMmYtMzI4NzIwZGUzYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FURfw96D/LCm+yBEMMHF/QUtDYW0NDUBqS2 DSbVP/10sxQrQRyF2C7mp4JremtBNAIU05NZ/5XhClcyGQIZJ+irfjGzrqDmy52E 5U5sDF6k6A9NUBBd82peD/Wp4ToIg/p6/P4He/Ky6TC1FHktNXGWjPEdBDE/AjAI IWuCvolbeVBrErzyXcGdKCMRJ1GVxHEWz2R6DoKzro/jNx3PV2Huv7UJuh1kz7aM mr/6S89FKQjpWA8/TY51ff5w/hXTi9o7QKvZr46QV2bPASNFu79evUaMArbjbBtH kTjgREvRxnnvosXOWPBYS3a/wLZIfgSbt/dALJdurVjkvIBsdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoVtbw4nC9RYYU4eKJ+Ss2jCpbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvZGVmOWIyM2ItYzI4MC0z ZWNmLTk0NGYtZDk1YzI2ZGIwZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7Moca4xE08N/MDw1oMYtxOx3IRUtFbRmfUebPA7UBZTII+x3ALKpXc Ve7u2clArVju8gIoESBRtqIrg1mEMFmJ5SymblOY2IUDpt2b6dN27wdJdcFHFVro 394+anNmuRUKGnQJg/17X5Xomjogtj3kigBwYfa/cbBmg5IdfuR3FE0p8kseiVA3 pnjgHLXnQuM8XdZBOsBUmlPbn4UMi6f7JsNCkpae4wz3uSKYfcjMKykXsmR4Uqhu TTWIN6ELRjSLA4DwcdKx8YaanfNKgHmG+Qo2+HONtvGaIQIz1YXWTXegF0fThXXT ZNMcwxiank5DE1KoCLEzKKPWABioYbw= -----END CERTIFICATE-----Generated at Sun Jun 15 21:30:07 2025 by rpki-client