$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa File: ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json) Hash identifier: x1IL/7eU2gYsLv9MpyO/RqU4m3tcMqrkBtinxBLUXkc= Subject key identifier: 2E:28:C2:CD:DE:F1:13:65:F3:3E:2A:CB:11:46:F9:AC:2E:06:F0:26 Certificate issuer: /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Certificate serial: 010D0C9F43285849E7BA83D6D10E522B24A6B040 Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 21693 IP address blocks: 170.152.0.0/16 maxlen: 24 192.234.136.0/24 maxlen: 24 192.234.137.0/24 maxlen: 24 192.234.138.0/24 maxlen: 24 192.234.139.0/24 maxlen: 24 192.234.140.0/24 maxlen: 24 198.179.151.0/24 maxlen: 24 198.179.152.0/24 maxlen: 24 198.179.153.0/24 maxlen: 24 198.179.154.0/24 maxlen: 24 198.179.155.0/24 maxlen: 24 198.179.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:83:d6:d1:0e:52:2b:24:a6:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=8d74d505-fa8b-4380-8414-bbbb31fcf05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:90:48:ab:71:46:aa:dc:75:12:14:26:77: bc:f6:38:37:42:15:00:ae:31:ca:f1:9d:5b:fa:57: 03:fc:e5:06:72:a1:bd:04:f2:60:02:b3:2c:1e:0d: 20:d1:ef:4d:7f:e9:66:4b:bf:a3:15:89:38:37:d0: 66:14:81:90:f0:34:1a:74:d1:22:46:ac:46:5e:d8: 1a:6c:4f:bf:cc:94:7e:b4:c7:3b:16:7b:3b:72:0a: 70:67:23:0d:fd:95:b9:11:51:fb:44:07:69:6c:e0: f6:79:8b:43:65:10:54:e1:b5:7a:fb:d8:4b:e4:6d: 4c:30:dd:78:e5:40:d4:79:f0:9d:24:73:c8:00:0d: 90:8e:45:a8:e6:59:ce:c5:5c:e8:43:ca:e9:81:22: 65:8b:37:b9:0b:45:93:bd:ce:55:fd:68:46:2b:11: 97:1d:f4:d2:aa:21:fa:16:67:3f:ae:e0:56:25:e3: 4a:9d:3b:d8:5e:90:e0:6d:37:59:44:ff:da:45:25: a6:d0:be:46:3e:55:36:50:1a:7b:dd:56:9a:6c:72: 8f:e9:f5:71:3f:2d:31:53:99:e1:c2:27:2f:d7:cc: 76:72:ce:26:81:55:e2:d1:b2:e2:3f:13:95:66:a9: b6:4a:42:32:8c:bc:e1:8f:39:14:ef:8d:f5:12:3d: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:28:C2:CD:DE:F1:13:65:F3:3E:2A:CB:11:46:F9:AC:2E:06:F0:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl X509v3 Authority Key Identifier: keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer sbgp-ipAddrBlock: critical IPv4: 170.152.0.0/16 192.234.136.0-192.234.140.255 198.179.151.0-198.179.156.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ec:6b:d2:6b:5d:9d:d9:bd:c0:14:bd:2a:8d:33:20:93:d7: 7f:c7:3b:a1:57:3d:c8:5c:7a:50:77:a9:b4:60:93:91:5a:4a: e8:fb:ee:be:23:1e:cb:bc:60:f0:f4:e0:3a:ba:91:f8:35:2c: bf:21:9a:a8:0e:db:27:6f:67:3a:00:db:10:8f:95:6f:30:51: bb:70:ae:4a:02:86:57:52:b2:4c:e1:86:b9:25:23:67:5d:f6: 72:e0:76:25:cb:f5:13:1f:81:ac:c1:e2:7b:b7:cb:0c:6f:4d: 3c:a0:c5:b3:a8:e5:f4:fb:40:3d:db:e3:31:50:19:7f:7e:ca: f5:f1:69:40:67:91:02:b6:08:83:fd:ad:5d:83:fc:13:bd:0d: 72:7d:f6:22:3e:ea:64:01:35:48:38:4a:4e:ab:06:6d:a3:94: d0:2e:05:e7:1c:9e:49:41:c3:0a:54:9e:77:d3:e9:52:8a:b1: 4f:58:59:5c:ef:57:f4:50:8a:75:a0:93:97:45:0d:96:ce:e3: 45:ad:dc:56:64:fd:69:19:e6:f9:7a:d8:38:bc:d2:53:6a:4a: a5:9a:92:14:a0:bb:63:01:bd:7a:c9:65:a1:cf:4d:02:67:dd: ce:98:38:4c:e3:6e:f4:68:20:07:6a:54:c5:14:7d:89:9b:c9: f5:33:3b:8d -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEnnuoPW0Q5SKySmsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MWY2YjgtYzMyMy00MTFkLWI2YjgtMDNiYjQ0ZDJh ZGIxMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OGQ3NGQ1MDUtZmE4Yi00MzgwLTg0MTQtYmJiYjMxZmNmMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshCQSKtxRqrcdRIUJne89jg3QhUArjHK8Z1b +lcD/OUGcqG9BPJgArMsHg0g0e9Nf+lmS7+jFYk4N9BmFIGQ8DQadNEiRqxGXtga bE+/zJR+tMc7Fns7cgpwZyMN/ZW5EVH7RAdpbOD2eYtDZRBU4bV6+9hL5G1MMN14 5UDUefCdJHPIAA2QjkWo5lnOxVzoQ8rpgSJlize5C0WTvc5V/WhGKxGXHfTSqiH6 Fmc/ruBWJeNKnTvYXpDgbTdZRP/aRSWm0L5GPlU2UBp73VaabHKP6fVxPy0xU5nh wicv18x2cs4mgVXi0bLiPxOVZqm2SkIyjLzhjzkU7431Ej2vtQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFC4ows3e8RNl8z4qyxFG+awuBvAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTgx ZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2JiNDRkMmFkYjEvZWM5NjhhNDMtYTNiYy0z NWNkLTljYWUtMjk4ZDA2NDNjMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk4MWY2YjgtYzMyMy00MTFkLWI2 YjgtMDNiYjQ0ZDJhZGIxLzM5ODFmNmI4LWMzMjMtNDExZC1iNmI4LTAzYmI0NGQy YWRiMS5jcmwwHwYDVR0jBBgwFoAUZcFvpzmgevfeykEi3I5W4/e8dL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTgxZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2Ji NDRkMmFkYjEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAqpgwDAME A8DqiAMEAMDqjDAMAwQAxrOXAwQAxrOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACjsa9JrXZ3ZvcAUvSqN MyCT13/HO6FXPchcelB3qbRgk5FaSuj77r4jHsu8YPD04Dq6kfg1LL8hmqgO2ydv ZzoA2xCPlW8wUbtwrkoChldSskzhhrklI2dd9nLgdiXL9RMfgazB4nu3ywxvTTyg xbOo5fT7QD3b4zFQGX9+yvXxaUBnkQK2CIP9rV2D/BO9DXJ99iI+6mQBNUg4Sk6r Bm2jlNAuBeccnklBwwpUnnfT6VKKsU9YWVzvV/RQinWgk5dFDZbO40Wt3FZk/WkZ 5vl62Di80lNqSqWakhSgu2MBvXrJZaHPTQJn3c6YOEzjbvRoIAdqVMUUfYmbyfUz O40= -----END CERTIFICATE-----Generated at Sun Jun 15 17:13:38 2025 by rpki-client