$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa File: 32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json) Hash identifier: yGm+K/i6cQ9CMeIjFSt/kKtDhFp/Sw1xJFsfVfeFNI0= Subject key identifier: 1F:97:54:9C:21:A9:97:78:C9:DB:AD:1D:06:06:78:D8:39:BC:86:70 Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584A331AF6F0FD3615BACB3BFD00 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 36861 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f6:f0:fd:36:15:ba:cb:3b:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=0c75b928-0784-4a23-b910-b983b098d098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:92:f9:4e:6e:e1:72:9f:4b:45:ac:35:1d: df:37:b8:98:75:dd:e0:a2:4b:11:f4:5f:92:47:d9: ae:67:77:9e:58:12:17:be:9c:44:2e:14:8b:99:6a: 78:34:52:4a:5a:77:55:79:01:7c:3c:d0:85:07:00: 2c:ab:f1:94:de:c6:90:c0:5e:58:65:3e:ba:c6:f7: 7d:5e:06:3f:5a:d4:08:bb:fa:b8:1d:b5:42:d9:f6: 0e:fc:5d:98:e6:98:3e:e7:3c:d2:ac:76:42:54:13: 03:79:bc:7b:78:8e:e0:fb:94:33:0b:b6:db:2d:ea: 62:d1:2f:56:0e:c7:af:c5:c2:c7:70:67:c3:24:2c: 9b:c2:b0:55:8f:48:96:da:0b:7d:d4:17:6d:f3:8b: 1b:58:07:9c:a1:3d:9d:bc:24:2d:b2:c9:9f:c8:f9: 83:91:ee:d5:84:e2:4f:f0:81:7e:91:11:fd:9d:7c: 76:fc:c3:f8:1d:59:e9:13:3e:1f:2f:1c:4f:45:40: 34:91:83:a1:be:cd:ee:bc:61:51:4a:f8:41:e1:03: 13:f7:7d:d8:7e:42:28:6d:cf:9b:8f:3c:dc:9d:04: 22:45:59:23:a0:79:f5:d1:73:ee:68:81:85:eb:f9: 5c:73:02:f8:60:01:ce:9a:a3:d4:fa:eb:f0:84:5b: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:54:9C:21:A9:97:78:C9:DB:AD:1D:06:06:78:D8:39:BC:86:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2d:e9:2f:a3:a2:1b:90:5e:d0:bd:a7:9a:2f:c4:5e:1f:ef: 62:35:ec:b6:c8:bf:83:33:07:13:84:dd:eb:4a:9d:c6:9e:c1: 4a:47:f5:df:4a:d3:c0:4b:95:1a:9e:6b:6c:33:c0:98:55:23: 74:fd:ca:23:5b:2e:23:a3:fd:f7:dc:7c:aa:87:01:fb:e8:6f: 21:44:6d:4e:f7:56:a5:71:70:69:fe:e9:47:b2:50:13:9c:5f: 02:94:2b:23:33:17:54:eb:42:6a:25:a1:45:3c:6b:6f:fd:bc: a3:eb:30:57:fd:32:8b:37:6c:78:c0:e8:a2:7f:e2:d0:b7:d4: 91:93:9d:8d:49:13:2d:78:05:f6:c0:e1:70:73:fc:2d:54:27: ea:9c:26:de:1a:9b:1d:17:a3:0d:e7:33:ca:85:c9:a8:ef:56: 11:f3:83:13:df:e9:00:c7:c2:60:a1:02:60:8b:c3:cb:34:01: b1:af:4e:fe:4d:6a:66:26:db:5f:09:22:b1:b0:bc:50:4d:1e: 70:03:c5:31:9f:7e:5c:07:02:30:dd:95:8c:5d:d3:c9:5e:4c: d8:d6:94:24:32:27:d5:b9:be:c5:46:45:17:eb:ea:c0:21:08: 06:7d:af:4a:34:3b:b2:7b:29:e7:7f:ce:86:2b:12:29:b6:33: 97:cb:45:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvbw/TYVuss7/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MGM3NWI5MjgtMDc4NC00YTIzLWI5MTAtYjk4M2IwOThkMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbCS+U5u4XKfS0WsNR3fN7iYdd3goksR9F+S R9muZ3eeWBIXvpxELhSLmWp4NFJKWndVeQF8PNCFBwAsq/GU3saQwF5YZT66xvd9 XgY/WtQIu/q4HbVC2fYO/F2Y5pg+5zzSrHZCVBMDebx7eI7g+5QzC7bbLepi0S9W DsevxcLHcGfDJCybwrBVj0iW2gt91Bdt84sbWAecoT2dvCQtssmfyPmDke7VhOJP 8IF+kRH9nXx2/MP4HVnpEz4fLxxPRUA0kYOhvs3uvGFRSvhB4QMT933YfkIobc+b jzzcnQQiRVkjoHn10XPuaIGF6/lccwL4YAHOmqPU+uvwhFtQ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+XVJwhqZd4ydutHQYGeNg5vIZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvMzI5ODI5MDEtYmExZS0z NWExLWI2ODMtMmNjYmQwZDRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQt6S+johuQXtC9p5ovxF4f72I17LbIv4MzBxOE3etKncaewUpH9d9K 08BLlRqea2wzwJhVI3T9yiNbLiOj/ffcfKqHAfvobyFEbU73VqVxcGn+6UeyUBOc XwKUKyMzF1TrQmoloUU8a2/9vKPrMFf9Mos3bHjA6KJ/4tC31JGTnY1JEy14BfbA 4XBz/C1UJ+qcJt4amx0Xow3nM8qFyajvVhHzgxPf6QDHwmChAmCLw8s0AbGvTv5N amYm218JIrGwvFBNHnADxTGfflwHAjDdlYxd08leTNjWlCQyJ9W5vsVGRRfr6sAh CAZ9r0o0O7J7Ked/zoYrEim2M5fLRSk= -----END CERTIFICATE-----Generated at Wed Jun 18 11:08:03 2025 by rpki-client