$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa File: 18393493-e621-3412-b61f-128e8405bd3e.roa (raw, json) Hash identifier: QRLvbnkXq2H1Ag707ech3Wj/jnHZB2YimfG4QXBYIQ4= Subject key identifier: 9C:52:F7:8D:6B:10:F7:1E:D1:D6:F4:65:A1:66:B5:2E:C2:D1:62:F6 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584A07D52ABB1CF32BAC8C8A97C0 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 6597 IP address blocks: 208.88.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2a:bb:1c:f3:2b:ac:8c:8a:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=9b23e6ad-ce99-4b42-af99-f551d9cfb2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:c6:dd:da:30:8b:78:36:f5:fd:e7:fb:1e: f9:7c:93:7a:d8:1f:21:3b:22:f5:46:cd:f2:95:29: 5e:87:d5:b8:0f:aa:47:0a:ec:da:44:65:2a:1a:e0: 07:73:96:6a:41:1c:12:58:e1:50:0c:5d:74:9e:70: f8:6f:94:f9:3d:ed:06:65:7c:2d:6c:38:ad:34:14: aa:96:ad:ff:40:33:e6:d7:47:cd:83:52:9a:ad:ae: 39:4d:ed:26:e6:5c:12:a2:5e:5a:06:f8:50:79:1b: 26:c8:98:b0:6a:eb:46:76:93:1c:e2:3d:0d:b1:40: 25:2b:3a:cc:d6:99:2f:e4:d7:df:68:b6:d0:83:b5: 0a:cd:17:60:ea:3d:67:bc:95:8f:57:c5:03:2c:98: bd:66:e6:1b:d2:c6:31:8b:b6:b7:46:28:a2:c5:14: 28:1d:12:78:91:ae:0e:6e:9d:13:17:f1:b9:3c:c0: 83:e4:0b:fb:94:e5:76:76:1f:01:14:12:19:8b:8e: 34:0d:68:69:9d:41:dd:e4:42:c2:75:e1:23:b2:c0: db:35:74:2d:5c:e1:6d:86:72:c1:9a:d5:ec:8d:e7: 08:c1:26:93:cd:bf:8d:90:c5:f1:d2:a5:d0:05:5d: 68:e1:74:e2:e1:20:63:5f:d0:f1:81:d2:d3:8c:c0: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:52:F7:8D:6B:10:F7:1E:D1:D6:F4:65:A1:66:B5:2E:C2:D1:62:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:58:61:b0:9a:8e:ff:d1:48:3e:55:3c:b3:be:f4:6f:52:16: 83:e3:10:be:7e:80:18:c3:0a:fc:ee:30:20:7b:bb:1a:4e:17: fe:6b:59:35:e4:df:75:36:93:d4:bd:3c:67:c0:31:3e:59:2a: 22:cd:c0:82:5b:58:eb:f8:b9:2d:83:ed:c6:e9:4e:6a:86:08: ca:14:fa:85:49:19:b0:6f:5f:55:91:8e:2b:7d:66:e7:df:81: 25:90:2d:ca:1d:5b:c1:8b:03:52:7a:e5:f7:a9:4c:00:c4:d2: 34:ef:66:e4:e6:ed:b9:79:7e:38:bc:ad:04:90:34:5f:6d:44: 1f:8b:a5:e4:39:e3:e3:46:e5:2c:cb:16:d4:a1:00:b1:78:57: ac:ce:18:d2:fb:62:a0:bf:b9:2d:d7:53:94:36:9d:a1:2c:56: bc:e7:41:b7:0a:df:e0:46:88:5b:14:f7:dc:2b:db:cf:fa:12: e2:6f:be:18:01:61:32:28:14:d8:b8:fa:39:17:ba:7b:6b:fb: 7c:30:d5:c9:4d:5f:93:49:3d:55:30:45:a1:d2:98:20:23:66: 53:4d:30:a8:cf:2c:c2:26:ac:b8:74:b0:50:a2:a5:3b:0a:e2: 59:01:ea:ba:76:9d:48:9f:93:02:c3:b1:49:bd:6b:f3:82:42: 99:e2:c1:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1Sq7HPMrrIyKl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OWIyM2U2YWQtY2U5OS00YjQyLWFmOTktZjU1MWQ5Y2ZiMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfDG3dowi3g29f3n+x75fJN62B8hOyL1Rs3y lSleh9W4D6pHCuzaRGUqGuAHc5ZqQRwSWOFQDF10nnD4b5T5Pe0GZXwtbDitNBSq lq3/QDPm10fNg1Kara45Te0m5lwSol5aBvhQeRsmyJiwautGdpMc4j0NsUAlKzrM 1pkv5NffaLbQg7UKzRdg6j1nvJWPV8UDLJi9ZuYb0sYxi7a3RiiixRQoHRJ4ka4O bp0TF/G5PMCD5Av7lOV2dh8BFBIZi440DWhpnUHd5ELCdeEjssDbNXQtXOFthnLB mtXsjecIwSaTzb+NkMXx0qXQBV1o4XTi4SBjX9DxgdLTjMDIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxS941rEPce0db0ZaFmtS7C0WL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMTgzOTM0OTMtZTYyMS0z NDEyLWI2MWYtMTI4ZTg0MDViZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFYYbCajv/RSD5VPLO+9G9SFoPjEL5+gBjDCvzuMCB7uxpOF/5rWTXk 33U2k9S9PGfAMT5ZKiLNwIJbWOv4uS2D7cbpTmqGCMoU+oVJGbBvX1WRjit9Zuff gSWQLcodW8GLA1J65fepTADE0jTvZuTm7bl5fji8rQSQNF9tRB+LpeQ54+NG5SzL FtShALF4V6zOGNL7YqC/uS3XU5Q2naEsVrznQbcK3+BGiFsU99wr28/6EuJvvhgB YTIoFNi4+jkXuntr+3ww1clNX5NJPVUwRaHSmCAjZlNNMKjPLMImrLh0sFCipTsK 4lkB6rp2nUifkwLDsUm9a/OCQpniwdA= -----END CERTIFICATE-----Generated at Tue Jun 17 04:36:04 2025 by rpki-client