$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa File: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (raw, json) Hash identifier: Vp7+KF2SMGaXs5fmNw4O6wxd6BSyuS9kGTbYWGWarj4= Subject key identifier: A4:36:AE:37:C8:E7:99:D6:9D:C8:DA:43:8B:AB:C1:65:3A:13:85:2E Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584A0C05557E6A10672E6D703200 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 40091 IP address blocks: 76.9.224.0/20 maxlen: 24 216.115.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:55:7e:6a:10:67:2e:6d:70:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d43645d1-b733-4f91-9bbc-970e3d2075ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:98:d2:9e:15:33:1d:fe:2c:8a:f5:c7:53: c0:ea:2d:de:e1:f7:e4:9c:22:21:58:ea:ba:1a:35: fd:9f:cb:a2:cf:a9:f0:05:4f:6d:ae:1e:01:5f:04: dd:64:7b:5b:27:12:91:ee:e2:c3:19:95:81:79:9f: 48:ba:c2:8d:18:5a:59:4b:0a:4e:e2:8e:71:5c:9b: d3:ad:e3:81:a1:df:61:54:43:82:e3:5c:ce:2c:a0: c5:e4:8b:5c:da:40:1f:c6:bb:0c:14:82:a1:84:19: 59:5b:f3:04:6c:78:5f:bf:d3:b1:9b:b4:2b:2c:d5: 69:96:a6:5c:75:54:5c:df:47:19:5f:76:24:9f:5a: a7:ec:30:ab:3c:57:3c:15:97:56:6e:8f:9b:46:6b: 5a:7a:ce:00:4f:1d:ca:ff:ba:05:c9:e4:07:b7:83: 91:15:fc:9b:28:0c:7d:de:7d:96:0d:75:f8:c5:3f: 52:89:61:dd:94:59:83:d5:f3:b2:c1:9c:ea:d0:70: c5:30:3a:4b:0a:73:bf:b5:7c:8d:fa:59:f2:6b:49: 2f:be:2a:88:f0:5b:d8:66:20:8d:2a:f5:4c:63:df: 2b:41:79:48:a8:b3:d7:3b:f8:a4:0e:85:32:7f:2e: 39:b1:c6:56:8c:6e:a1:41:d4:17:cc:92:50:16:d0: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:36:AE:37:C8:E7:99:D6:9D:C8:DA:43:8B:AB:C1:65:3A:13:85:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:23:eb:22:6c:df:22:51:c8:fe:47:97:5b:98:5f:f3:3c:7e: 27:20:43:ba:ae:12:73:7c:68:04:df:fa:7c:ad:be:8d:6f:6f: f6:bf:12:ac:b4:4c:a5:6d:74:2c:8b:6b:c4:8b:a7:67:f2:3f: 8f:9b:fd:5a:c0:22:b8:8b:15:34:60:8e:98:76:d1:d1:3a:4d: 69:1c:4e:00:ea:0c:86:bc:9d:c8:cb:a5:3e:95:7d:7e:bb:ef: 5a:47:fb:27:fe:54:89:f8:8b:28:c9:0f:ae:81:34:96:ef:5c: 69:b5:0b:2b:30:93:d0:5d:33:84:34:0a:d1:30:31:d1:ec:93: 74:ec:ad:f1:2e:10:a2:2b:01:39:34:0d:83:4b:e8:87:66:21: 17:19:4c:d9:67:2a:54:fa:58:a4:ff:09:38:37:aa:4e:32:e7: 17:1c:04:1b:04:04:a6:7b:f8:d9:fa:30:a7:2a:54:23:8c:96: f4:f6:5f:fd:1c:f6:fc:4d:9d:f9:9f:43:76:78:d5:6e:85:8c: 8c:71:ff:5a:46:b2:30:cf:76:59:f0:26:c9:c5:1e:77:6a:44: 71:29:3f:7c:43:f7:7c:0d:ea:2d:e1:2e:8c:38:39:fc:99:81: 4c:bc:6a:5f:ee:72:e5:b4:63:a4:5a:07:21:79:bf:05:18:77: 9e:17:c1:23 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoMBVV+ahBnLm1wMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDQzNjQ1ZDEtYjczMy00ZjkxLTliYmMtOTcwZTNkMjA3NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNCY0p4VMx3+LIr1x1PA6i3e4ffknCIhWOq6 GjX9n8uiz6nwBU9trh4BXwTdZHtbJxKR7uLDGZWBeZ9IusKNGFpZSwpO4o5xXJvT reOBod9hVEOC41zOLKDF5Itc2kAfxrsMFIKhhBlZW/MEbHhfv9Oxm7QrLNVplqZc dVRc30cZX3Ykn1qn7DCrPFc8FZdWbo+bRmtaes4ATx3K/7oFyeQHt4ORFfybKAx9 3n2WDXX4xT9SiWHdlFmD1fOywZzq0HDFMDpLCnO/tXyN+lnya0kvviqI8FvYZiCN KvVMY98rQXlIqLPXO/ikDoUyfy45scZWjG6hQdQXzJJQFtABAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKQ2rjfI55nWncjaQ4urwWU6E4UuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvM2M1ZjRlMWEtNGJlNy0z N2Y3LWI4NjEtOTkxZGE1MGY1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETAngAwQE 2HPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB0j6yJs3yJRyP5Hl1uYX/M8ficgQ7quEnN8aATf+nytvo1v b/a/Eqy0TKVtdCyLa8SLp2fyP4+b/VrAIriLFTRgjph20dE6TWkcTgDqDIa8ncjL pT6VfX6771pH+yf+VIn4iyjJD66BNJbvXGm1Cyswk9BdM4Q0CtEwMdHsk3TsrfEu EKIrATk0DYNL6IdmIRcZTNlnKlT6WKT/CTg3qk4y5xccBBsEBKZ7+Nn6MKcqVCOM lvT2X/0c9vxNnfmfQ3Z41W6FjIxx/1pGsjDPdlnwJsnFHndqRHEpP3xD93wN6i3h Low4OfyZgUy8al/ucuW0Y6RaByF5vwUYd54XwSM= -----END CERTIFICATE-----Generated at Tue Jun 17 10:00:12 2025 by rpki-client