$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa File: bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa (raw, json) Hash identifier: fSDdfniLfrRVNnCh6S1A4wmBMb1PmdwHbsXjYNKjiAY= Subject key identifier: C2:3B:B5:E5:97:4C:BB:50:B7:08:95:F9:16:36:5A:7C:83:F1:47:6D Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD49588A993CA124D6510 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 394708 IP address blocks: 216.255.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d4:95:88:a9:93:ca:12:4d:65:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=4b306e01-8f9b-4290-92a8-cf07c402f911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:49:2b:44:29:09:2a:a8:2d:ed:f5:24:f1: e0:6a:c7:bb:85:f5:e3:f5:dd:10:dc:37:2c:07:f8: 31:24:44:dc:84:5a:c4:e1:4d:12:b3:c5:6b:34:ee: 5e:c5:3c:f9:ae:55:e9:f6:80:17:f7:18:c2:e7:0d: 22:bf:a9:8e:8e:09:66:49:d3:3a:13:9d:19:70:ea: ed:c5:2c:85:71:cc:c5:4d:a5:a5:f1:7b:1b:df:51: 94:06:bf:48:c5:2f:bc:12:01:ed:88:69:0f:65:50: ab:67:d8:b0:d1:79:58:92:17:91:65:3c:28:6e:91: 6f:3a:4c:42:da:fc:41:43:63:1b:1f:b6:ab:01:37: 37:9a:c0:20:96:93:29:41:2f:9f:d4:3f:f7:15:8e: a5:c9:1e:b2:ce:87:97:ef:8c:5f:02:4f:2f:c9:2e: d2:7b:ed:6e:a6:2c:7d:38:33:79:70:38:88:9c:2f: 0a:e3:b1:b1:ff:1b:ff:08:8a:5a:7b:b0:3e:07:4c: 89:c7:b9:fb:48:10:23:c8:be:ed:1a:29:e8:73:52: 15:a9:d4:39:65:1e:32:13:63:ef:14:47:e9:c9:81: f5:82:6e:84:06:34:33:58:67:91:14:ff:80:aa:32: 10:3a:45:b8:35:d5:f0:95:19:98:46:c1:58:58:fd: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3B:B5:E5:97:4C:BB:50:B7:08:95:F9:16:36:5A:7C:83:F1:47:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:48:90:46:85:d1:09:e3:17:f1:94:27:e2:c5:ce:f4:09:97: e2:6c:b9:f5:63:f6:55:04:1b:56:bf:ab:95:2a:c3:eb:91:33: b6:33:4d:e2:5b:6e:1a:30:46:76:b8:3b:0f:7d:b9:53:3a:bf: bc:f4:94:6d:6c:55:17:fa:b9:73:97:99:e8:c0:7d:4f:21:76: fc:a1:92:a6:d0:f4:84:d7:be:f5:4e:3b:0a:c1:04:ac:5b:de: 5a:6a:76:34:42:b3:47:0b:cb:de:a2:c8:44:30:1a:c4:a1:bd: 7a:7e:cc:e7:22:33:dd:0e:81:66:dd:1e:ec:fb:82:96:e5:d4: ed:da:54:76:bf:00:09:ed:0d:a4:cc:68:ac:e5:a7:c2:fd:e4: 30:e4:ed:a1:c8:0c:ce:dc:70:c2:1f:25:39:84:77:fd:48:54: ba:6a:91:72:89:19:0e:88:ef:23:fc:1d:c5:dc:1b:18:87:ab: 6f:6b:2f:a8:76:8c:4a:1f:22:02:fe:24:bf:bc:fb:c2:95:94: 42:ce:d5:e7:4d:74:f4:ad:f9:d9:68:82:3b:8e:ca:f5:b0:44: c4:c9:54:fd:f1:c2:1e:8e:1f:9d:3c:bb:40:d7:4f:72:1b:c1: ca:72:07:de:5d:04:00:db:bf:33:bc:af:47:1b:0d:2d:64:57: 11:82:34:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539SViKmTyhJNZRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NGIzMDZlMDEtOGY5Yi00MjkwLTkyYTgtY2YwN2M0MDJmOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0dJK0QpCSqoLe31JPHgase7hfXj9d0Q3Dcs B/gxJETchFrE4U0Ss8VrNO5exTz5rlXp9oAX9xjC5w0iv6mOjglmSdM6E50ZcOrt xSyFcczFTaWl8Xsb31GUBr9IxS+8EgHtiGkPZVCrZ9iw0XlYkheRZTwobpFvOkxC 2vxBQ2MbH7arATc3msAglpMpQS+f1D/3FY6lyR6yzoeX74xfAk8vyS7Se+1upix9 ODN5cDiInC8K47Gx/xv/CIpae7A+B0yJx7n7SBAjyL7tGinoc1IVqdQ5ZR4yE2Pv FEfpyYH1gm6EBjQzWGeRFP+AqjIQOkW4NdXwlRmYRsFYWP2uUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI7teWXTLtQtwiV+RY2WnyD8UdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYmMyY2MwZjUtMzcyOC0z ODQ5LTk2Y2ItYTI3NzFiYjlhNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNIkEaF0QnjF/GUJ+LFzvQJl+JsufVj9lUEG1a/q5Uqw+uRM7YzTeJb bhowRna4Ow99uVM6v7z0lG1sVRf6uXOXmejAfU8hdvyhkqbQ9ITXvvVOOwrBBKxb 3lpqdjRCs0cLy96iyEQwGsShvXp+zOciM90OgWbdHuz7gpbl1O3aVHa/AAntDaTM aKzlp8L95DDk7aHIDM7ccMIfJTmEd/1IVLpqkXKJGQ6I7yP8HcXcGxiHq29rL6h2 jEofIgL+JL+8+8KVlELO1edNdPSt+dlogjuOyvWwRMTJVP3xwh6OH508u0DXT3Ib wcpyB95dBADbvzO8r0cbDS1kVxGCNLM= -----END CERTIFICATE-----Generated at Sun Jun 15 18:07:24 2025 by rpki-client