$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa File: cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa (raw, json) Hash identifier: 5tNM96TPi7VMF+yIXbZPZJ6Hp4nC2j6i+yJTCwQZJd0= Subject key identifier: 44:FD:3D:97:79:5C:E5:E8:91:CC:46:98:8E:07:03:CC:68:D0:74:B5 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD4E7FA93CADF29128700 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 394708 IP address blocks: 216.255.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d4:e7:fa:93:ca:df:29:12:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=7638d7ac-2454-4c05-be46-77397ee14dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:8d:19:5c:db:1d:38:6e:e3:e1:f8:4c:bc: ef:d2:15:81:bc:6b:a2:26:6e:99:74:92:9d:a6:09: 19:4d:84:23:9f:17:67:a2:ba:92:51:be:11:2b:38: e2:82:ec:05:c3:50:69:64:6c:1b:5b:ea:ca:fb:55: e2:39:5c:95:8c:0a:2c:da:86:e6:30:be:7e:88:86: 93:fb:c7:ad:11:75:32:ad:d1:6d:c1:07:cb:2d:8c: 8d:54:93:09:19:bf:8e:c8:83:8a:14:46:88:65:b2: f9:83:06:19:20:8b:5f:ce:95:a7:b2:f6:f4:69:83: 0a:6b:e3:35:5d:08:52:3b:c8:35:29:97:3d:7b:af: 57:3d:5a:7b:76:20:37:bd:0c:e7:a1:b9:9c:07:e9: 45:c4:ee:0a:3e:76:31:bf:d8:77:ab:89:be:11:40: 83:6a:1b:55:b1:2e:4a:9f:f0:7f:f6:31:e2:b3:ec: c6:6c:18:50:d3:b0:64:f7:3f:05:c4:c2:c1:2d:2b: 27:26:dd:4c:19:4d:7c:ba:60:fe:9b:45:d2:70:fe: bf:41:34:b2:1c:17:56:e4:48:10:5f:bb:8a:ae:be: df:1e:df:fb:c8:75:c8:7f:c7:b5:21:46:3e:32:dd: 60:21:3a:f4:9b:78:92:58:bc:6a:d8:7e:1d:10:e7: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:3D:97:79:5C:E5:E8:91:CC:46:98:8E:07:03:CC:68:D0:74:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e7:e6:6a:b0:95:6e:3c:f3:d1:a8:e0:ca:a6:79:ad:ec:24: 8e:1f:7e:44:fb:a9:0b:a0:6e:6a:92:30:7a:2a:79:e1:e4:78: e3:d8:52:5c:63:f5:8c:09:5a:52:e5:d7:08:98:f8:2c:a7:ff: cd:2d:10:1e:53:94:10:ca:48:24:12:c0:38:64:ec:d1:db:57: ef:a9:a1:b4:f6:4d:21:81:a6:bb:35:80:02:a2:80:ba:18:23: 81:2e:e4:22:dc:ba:cb:47:03:74:11:c8:0b:09:f5:b1:63:57: 22:bb:b7:22:0f:a5:db:80:cb:3b:4b:e6:c8:60:a1:ae:5e:31: 03:aa:da:4c:63:f6:f8:65:dd:ac:cf:68:fe:72:ab:1c:1d:76: ae:ad:41:90:c0:06:d2:ef:fe:2f:45:3b:eb:ae:8a:9b:68:9f: 63:21:42:da:94:e3:38:81:02:ab:88:cf:e7:ce:ef:16:36:5e: c6:99:b2:83:f0:0d:0f:28:13:9b:48:5c:90:99:c2:bb:ec:0b: ba:fe:9f:d5:8f:ba:8c:e7:86:27:07:a1:25:86:bd:d3:4a:ca: be:95:4e:0e:07:31:de:04:b9:9e:a3:c1:07:69:1a:be:86:05: f6:66:f6:06:be:19:d6:be:ff:5b:f6:cb:df:db:2c:0a:a4:24: af:18:29:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539Tn+pPK3ykShwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NzYzOGQ3YWMtMjQ1NC00YzA1LWJlNDYtNzczOTdlZTE0ZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwiNGVzbHThu4+H4TLzv0hWBvGuiJm6ZdJKd pgkZTYQjnxdnorqSUb4RKzjiguwFw1BpZGwbW+rK+1XiOVyVjAos2obmML5+iIaT +8etEXUyrdFtwQfLLYyNVJMJGb+OyIOKFEaIZbL5gwYZIItfzpWnsvb0aYMKa+M1 XQhSO8g1KZc9e69XPVp7diA3vQznobmcB+lFxO4KPnYxv9h3q4m+EUCDahtVsS5K n/B/9jHis+zGbBhQ07Bk9z8FxMLBLSsnJt1MGU18umD+m0XScP6/QTSyHBdW5EgQ X7uKrr7fHt/7yHXIf8e1IUY+Mt1gITr0m3iSWLxq2H4dEOdv5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET9PZd5XOXokcxGmI4HA8xo0HS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvY2MyMzIyYTctMzFkYS0z ZjYwLWFkNmQtMmM3OTA0ZmZiZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnn5mqwlW4889Go4Mqmea3sJI4ffkT7qQugbmqSMHoqeeHkeOPYUlxj 9YwJWlLl1wiY+Cyn/80tEB5TlBDKSCQSwDhk7NHbV++pobT2TSGBprs1gAKigLoY I4Eu5CLcustHA3QRyAsJ9bFjVyK7tyIPpduAyztL5shgoa5eMQOq2kxj9vhl3azP aP5yqxwddq6tQZDABtLv/i9FO+uuipton2MhQtqU4ziBAquIz+fO7xY2XsaZsoPw DQ8oE5tIXJCZwrvsC7r+n9WPuoznhicHoSWGvdNKyr6VTg4HMd4EuZ6jwQdpGr6G BfZm9ga+Gda+/1v2y9/bLAqkJK8YKZU= -----END CERTIFICATE-----Generated at Sun Jun 15 17:34:46 2025 by rpki-client