$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa File: 529eec86-aabc-3d34-8797-dab3f5a00262.roa (raw, json) Hash identifier: /IRV/+L92boPLBpG+F/1RTh54Gltbh3sAqzUgHnh0nc= Subject key identifier: D8:40:6A:34:D1:EC:22:59:43:EE:35:CF:9B:17:D4:FA:FC:F4:29:79 Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F43285849F17FC0E12ECE9E1D29D21180 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3565 IP address blocks: 208.68.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c0:e1:2e:ce:9e:1d:29:d2:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=58df0472-4f8e-4b8c-b347-3de6639c27f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:e4:7a:64:28:0e:d7:91:3c:8c:51:d6:fa: 14:d6:fe:84:bf:b9:35:82:a4:40:f9:e2:b7:0b:7b: a1:d1:ee:77:be:dd:d0:08:c1:40:73:6f:f3:d6:58: 9c:4c:c9:6f:b8:95:9c:bd:7c:de:46:3d:80:36:bf: b9:d6:ab:69:0f:07:04:09:e6:09:a8:de:06:92:12: 0c:ef:65:8b:50:ec:2c:71:06:5c:39:64:32:49:af: 49:53:77:67:ca:71:0f:62:a2:54:63:01:ba:f5:20: 71:b6:44:b4:f9:00:c4:ad:43:89:22:72:ea:9b:35: 9d:0e:83:3d:6d:3a:ac:84:94:7f:a8:8d:6a:84:62: 2d:f8:18:73:74:28:85:1d:6b:72:28:02:5f:67:16: b2:3d:c0:de:ad:56:f7:cb:54:36:05:6b:53:0d:ff: 4b:31:f8:ce:e7:92:64:34:23:56:7d:96:36:5a:8a: 4a:e9:f4:d5:9d:03:89:c0:6a:8f:b4:88:ec:a3:f1: 48:05:44:3a:e5:e1:d6:3e:9d:7e:2a:a0:fa:e3:5b: 32:35:79:77:26:0a:bd:f5:6a:db:fa:89:5b:6e:53: 20:f8:93:88:52:ae:f9:25:32:31:72:24:8c:0b:f1: 3e:38:04:10:95:64:d2:5d:9c:6b:ee:00:30:2f:25: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:6A:34:D1:EC:22:59:43:EE:35:CF:9B:17:D4:FA:FC:F4:29:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:23:ed:d6:fc:64:1f:8f:69:f1:39:fa:26:72:7b:8f:2b:51: 31:d9:49:ba:83:f3:4b:10:7d:bc:2e:a4:02:a8:4b:dc:42:29: c7:72:6b:17:35:56:23:f3:51:e5:72:8a:e9:76:3b:55:0e:2c: 23:39:fd:96:17:14:fc:c5:ce:7f:e2:b3:52:71:09:d4:ad:50: 56:0c:c0:e4:85:76:99:fa:83:ff:b7:a4:9f:12:3b:96:b9:4e: fe:75:56:01:e2:ad:11:4a:3e:61:ef:d2:75:d5:1e:7d:eb:10: 32:0b:a0:fc:34:aa:0e:0d:87:84:21:16:c8:b3:7b:cf:ab:82: bc:8a:85:12:30:7a:03:eb:73:d2:69:6f:a0:63:0f:cf:b9:a2: 20:e0:c7:61:bf:0e:aa:25:c9:52:7a:2c:a3:1b:41:ff:5b:83: 8e:0b:0d:64:e4:48:47:f4:c6:c9:02:73:e6:aa:1f:ca:ce:c2: e9:3a:92:c8:4a:3b:e1:df:ee:9d:a6:5d:e7:80:19:d9:da:fd: e6:3d:5b:f8:5b:de:36:7d:4d:ba:81:e4:70:d3:d5:ab:ea:1c: c9:22:b3:2c:49:8d:5e:4b:f4:e7:34:aa:90:c6:99:27:97:fe: d4:6b:a7:32:66:ff:6d:2a:ec:43:5d:e0:92:9c:fe:19:85:43: bd:d7:87:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8DhLs6eHSnSEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NThkZjA0NzItNGY4ZS00YjhjLWIzNDctM2RlNjYzOWMyN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU3kemQoDteRPIxR1voU1v6Ev7k1gqRA+eK3 C3uh0e53vt3QCMFAc2/z1licTMlvuJWcvXzeRj2ANr+51qtpDwcECeYJqN4GkhIM 72WLUOwscQZcOWQySa9JU3dnynEPYqJUYwG69SBxtkS0+QDErUOJInLqmzWdDoM9 bTqshJR/qI1qhGIt+BhzdCiFHWtyKAJfZxayPcDerVb3y1Q2BWtTDf9LMfjO55Jk NCNWfZY2WopK6fTVnQOJwGqPtIjso/FIBUQ65eHWPp1+KqD641syNXl3Jgq99Wrb +olbblMg+JOIUq75JTIxciSMC/E+OAQQlWTSXZxr7gAwLyX6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhAajTR7CJZQ+41z5sX1Pr89Cl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvNTI5ZWVjODYtYWFiYy0z ZDM0LTg3OTctZGFiM2Y1YTAwMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYj7db8ZB+PafE5+iZye48rUTHZSbqD80sQfbwupAKoS9xCKcdyaxc1 ViPzUeVyiul2O1UOLCM5/ZYXFPzFzn/is1JxCdStUFYMwOSFdpn6g/+3pJ8SO5a5 Tv51VgHirRFKPmHv0nXVHn3rEDILoPw0qg4Nh4QhFsize8+rgryKhRIwegPrc9Jp b6BjD8+5oiDgx2G/DqolyVJ6LKMbQf9bg44LDWTkSEf0xskCc+aqH8rOwuk6kshK O+Hf7p2mXeeAGdna/eY9W/hb3jZ9TbqB5HDT1avqHMkisyxJjV5L9Oc0qpDGmSeX /tRrpzJm/20q7ENd4JKc/hmFQ73Xh5c= -----END CERTIFICATE-----Generated at Sun Jun 15 22:05:07 2025 by rpki-client