$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/dc103ac2-331e-31c8-a327-a57dcb3f6433.roa File: dc103ac2-331e-31c8-a327-a57dcb3f6433.roa (raw, json) Hash identifier: N9HPfTfDR8lsBK4GYpH+p6iE1sXxNLjwZNCWHBuaC8U= Subject key identifier: 45:13:E6:53:15:23:90:83:3F:31:C8:20:37:2A:9F:DA:31:7B:77:63 Certificate issuer: /CN=cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0 Certificate serial: 010D0C9F43285849D85FA4704A213D8938EEA5C0 Authority key identifier: AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/dc103ac2-331e-31c8-a327-a57dcb3f6433.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14220 IP address blocks: 208.94.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a4:70:4a:21:3d:89:38:ee:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=4698ae77-898e-43cb-83a9-fd8a4c6a3969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:8e:75:d7:c6:d0:e2:ce:26:c9:8d:dc:15: 20:05:83:b7:ac:3c:13:d8:a4:76:59:81:64:f3:78: 0a:6c:50:9b:70:9b:6e:1e:53:9d:c9:7e:af:83:55: 65:0d:72:5b:a0:c8:1d:1d:98:52:e6:2e:da:e4:0b: 0d:b1:36:44:8c:05:f8:37:85:3c:bd:de:f0:27:b9: 64:a2:fc:71:75:a6:0c:70:f5:ed:1f:3d:e9:1f:b2: fb:18:70:b2:8d:f5:15:7a:50:ab:91:71:2a:0d:eb: 1a:0d:a8:2f:e5:d3:9e:74:bb:e3:14:e4:14:9c:a1: 8f:99:ba:c8:34:21:ac:4a:1b:18:8d:d4:a1:6a:ee: 88:ed:0d:d2:d7:ed:a3:5e:a7:41:11:bd:3d:09:31: b8:ab:a6:48:fa:6c:08:1a:a2:94:0e:39:5b:7a:69: b0:af:f8:2a:fb:57:91:2b:46:55:b6:6e:29:6c:fe: eb:4d:b3:2d:77:cb:aa:3b:74:bc:ba:26:66:66:bf: 48:1a:b5:e0:1a:23:24:be:e5:60:dd:d2:08:d1:d9: ab:70:94:8d:ba:4f:fc:69:51:34:16:2d:99:f1:18: 3b:8e:33:7d:30:bb:a3:19:08:2f:b2:ad:59:99:fb: fe:7b:92:d4:a9:1f:3b:0e:83:0a:f1:cb:a4:8e:1e: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:13:E6:53:15:23:90:83:3F:31:C8:20:37:2A:9F:DA:31:7B:77:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/dc103ac2-331e-31c8-a327-a57dcb3f6433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.crl X509v3 Authority Key Identifier: keyid:AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer sbgp-ipAddrBlock: critical IPv4: 208.94.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8f:07:2b:28:47:7f:b3:cd:5b:89:c5:bc:fe:6b:4d:3f:85: f0:9c:26:81:04:a1:b9:06:77:f5:16:4f:4d:c6:10:47:8b:ea: a9:12:17:64:4f:63:e4:fd:e0:c5:67:d1:27:dd:eb:f1:1a:c8: 33:de:32:98:14:80:e5:de:57:f9:c3:68:07:9d:d1:4f:51:ed: f4:a6:ae:83:79:09:c9:b9:65:14:5f:49:f3:9f:ad:cd:35:61: cd:fe:46:24:7c:ea:e4:c9:ed:51:44:63:9d:98:e5:ba:c0:b9: 10:a7:b4:19:04:2e:45:78:f0:92:75:ef:ee:b1:f0:29:c9:00: 50:3e:58:23:57:59:74:bf:4e:1a:ea:7e:96:7c:52:ed:b9:de: 2a:a2:c5:9f:b8:07:cd:c0:42:e3:33:27:20:92:13:91:42:69: f2:2f:f5:b9:f4:9c:ff:07:39:b4:74:d7:89:7e:dd:ed:03:77: 67:54:e0:f8:1f:07:0f:06:91:ad:fd:21:b0:f6:d8:d5:dc:ec: 63:5e:83:1a:14:96:a3:1f:b0:fc:9a:6f:bd:21:1a:0e:d2:d4: 6c:1f:7e:fd:7e:45:f7:08:9a:3f:9c:70:1f:72:47:c3:43:4f: e8:b9:93:37:38:c3:bc:01:12:2d:8c:b4:14:57:b6:e3:62:70: 8d:48:44:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6RwSiE9iTjupcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MGQzM2QtYWRiMC00YjZhLWExMmMtM2Q0YjIyZWE4 NGMwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NDY5OGFlNzctODk4ZS00M2NiLTgzYTktZmQ4YTRjNmEzOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmSOddfG0OLOJsmN3BUgBYO3rDwT2KR2WYFk 83gKbFCbcJtuHlOdyX6vg1VlDXJboMgdHZhS5i7a5AsNsTZEjAX4N4U8vd7wJ7lk ovxxdaYMcPXtHz3pH7L7GHCyjfUVelCrkXEqDesaDagv5dOedLvjFOQUnKGPmbrI NCGsShsYjdShau6I7Q3S1+2jXqdBEb09CTG4q6ZI+mwIGqKUDjlbemmwr/gq+1eR K0ZVtm4pbP7rTbMtd8uqO3S8uiZmZr9IGrXgGiMkvuVg3dII0dmrcJSNuk/8aVE0 Fi2Z8Rg7jjN9MLujGQgvsq1Zmfv+e5LUqR87DoMK8cukjh7fjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUT5lMVI5CDPzHIIDcqn9oxe3djMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjYw ZDMzZC1hZGIwLTRiNmEtYTEyYy0zZDRiMjJlYTg0YzAvZGMxMDNhYzItMzMxZS0z MWM4LWEzMjctYTU3ZGNiM2Y2NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Y2MGQzM2QtYWRiMC00YjZhLWEx MmMtM2Q0YjIyZWE4NGMwL2NmNjBkMzNkLWFkYjAtNGI2YS1hMTJjLTNkNGIyMmVh ODRjMC5jcmwwHwYDVR0jBBgwFoAUrv4/H5PqOVhuRVAQ5wB3bnrWKfIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjYwZDMzZC1hZGIwLTRiNmEtYTEyYy0zZDRi MjJlYTg0YzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKPBysoR3+zzVuJxbz+a00/hfCcJoEEobkGd/UWT03GEEeL6qkSF2RP Y+T94MVn0Sfd6/EayDPeMpgUgOXeV/nDaAed0U9R7fSmroN5Ccm5ZRRfSfOfrc01 Yc3+RiR86uTJ7VFEY52Y5brAuRCntBkELkV48JJ17+6x8CnJAFA+WCNXWXS/Thrq fpZ8Uu253iqixZ+4B83AQuMzJyCSE5FCafIv9bn0nP8HObR014l+3e0Dd2dU4Pgf Bw8Gka39IbD22NXc7GNegxoUlqMfsPyab70hGg7S1Gwffv1+RfcImj+ccB9yR8ND T+i5kzc4w7wBEi2MtBRXtuNicI1IRDU= -----END CERTIFICATE-----Generated at Mon Jun 16 01:29:12 2025 by rpki-client