$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa File: 2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa (raw, json) Hash identifier: gUbP2RtyXNGPQPkzREBzKir+re0iFRvRgVHv/TQDcm8= Subject key identifier: 53:59:79:82:8F:BC:98:17:1C:BD:19:7E:4E:4C:79:95:A7:58:67:42 Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F43285849F2E52C83BEAC3D4CEACC7500 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 400071 IP address blocks: 216.73.182.0/23 maxlen: 32 2602:fc31::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2c:83:be:ac:3d:4c:ea:cc:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=6fa76b4b-9979-4749-936a-96c63e3fce29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:b6:fa:bd:65:f4:44:29:6f:1f:69:cd:2b: a4:9c:53:aa:d3:d4:c2:40:5b:10:d2:d3:50:d8:f5: 33:9e:3a:7d:ac:cc:f3:97:20:63:aa:60:6d:56:c9: 57:87:c9:70:b9:e1:3f:09:df:2f:75:85:5c:58:74: fe:cf:1c:90:12:90:15:f5:55:c4:ec:b1:91:40:9f: fd:48:0f:d0:bb:ee:8c:ab:78:90:22:dd:bf:51:9b: a8:c4:a0:09:f4:0c:f7:66:c9:60:84:23:b9:5a:1a: b9:e6:b9:be:8a:f8:a8:33:ec:38:60:4b:0e:81:56: 67:ad:73:ee:d2:94:5a:e7:35:79:22:eb:25:a4:4f: bc:3a:7c:2f:8b:76:fa:0b:c4:e4:3f:3a:a8:c1:f7: 32:46:62:f8:52:4c:cf:b0:3a:c1:f6:1b:12:9d:1d: e6:44:b3:fa:be:51:d1:0b:8b:4c:c8:04:4b:03:80: 5b:de:2b:ad:95:f0:5d:a8:33:08:0f:62:80:48:af: 89:c4:c8:a2:9c:c8:69:16:e2:ab:15:cf:e2:46:2e: 2b:25:60:20:36:5a:2a:be:51:2f:0d:86:c9:56:01: a5:47:a6:19:6f:a9:bb:10:77:fa:6a:15:ce:cc:93: 0d:00:04:2b:64:f7:47:56:a9:95:c6:fc:79:e4:6d: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:59:79:82:8F:BC:98:17:1C:BD:19:7E:4E:4C:79:95:A7:58:67:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv4: 216.73.182.0/23 IPv6: 2602:fc31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:8f:e3:4a:c3:a8:d6:ee:75:63:12:44:e3:d6:ec:7f:5e:47: bb:6d:b1:4d:80:a4:43:d1:48:fc:8c:3c:b7:e2:cc:1f:dc:fb: 7a:94:17:ac:c8:54:b7:18:93:ad:54:4f:bb:8f:e8:99:a8:69: 8f:dd:a5:e3:66:11:b3:1a:c5:50:61:69:a1:08:cc:c4:aa:f2: 93:40:94:c4:dd:51:46:73:65:85:ca:88:d8:98:c1:b8:5c:7d: c7:da:62:7a:7a:de:93:60:95:46:51:d3:e9:b8:a6:bb:08:5b: e3:f4:32:df:3f:21:f7:60:0d:a5:65:fb:86:9d:bb:59:c8:ba: 18:a9:ef:7d:c6:49:4a:83:ff:5d:55:52:e2:82:c5:17:0d:e2: a3:e9:dc:b1:9a:6c:fe:e7:1b:43:58:e2:81:64:d7:0a:50:78: 17:2b:fd:e4:fb:ff:23:54:6c:a2:13:6d:b9:56:33:ed:95:dd: 8d:36:1d:3d:31:38:44:28:f3:fc:76:15:ae:74:0b:d3:d0:a2: 10:d1:1a:31:a7:03:76:7d:96:c3:3a:3c:51:07:07:d8:98:57: fb:2d:da:bf:de:19:b7:99:33:38:91:e9:e8:49:a8:0a:8f:61: 98:b8:46:54:98:18:40:42:a5:d5:c2:94:48:ce:37:dc:5a:92: fe:dd:55:fe -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEny5SyDvqw9TOrMdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NmZhNzZiNGItOTk3OS00NzQ5LTkzNmEtOTZjNjNlM2ZjZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj62+r1l9EQpbx9pzSuknFOq09TCQFsQ0tNQ 2PUznjp9rMzzlyBjqmBtVslXh8lwueE/Cd8vdYVcWHT+zxyQEpAV9VXE7LGRQJ/9 SA/Qu+6Mq3iQIt2/UZuoxKAJ9Az3ZslghCO5Whq55rm+ivioM+w4YEsOgVZnrXPu 0pRa5zV5IuslpE+8Onwvi3b6C8TkPzqowfcyRmL4UkzPsDrB9hsSnR3mRLP6vlHR C4tMyARLA4Bb3iutlfBdqDMID2KASK+JxMiinMhpFuKrFc/iRi4rJWAgNloqvlEv DYbJVgGlR6YZb6m7EHf6ahXOzJMNAAQrZPdHVqmVxvx55G3HbQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFNZeYKPvJgXHL0Zfk5MeZWnWGdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvMmI0ZDdkMjEtNjE2ZS0z ODRhLWFjZjUtMmIyNGQ1MzNjN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQB2Em2MA4E AgACMAgDBgQmAvwxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjj+NKw6jW7nVjEkTj1ux/Xke7bbFNgKRD 0Uj8jDy34swf3Pt6lBesyFS3GJOtVE+7j+iZqGmP3aXjZhGzGsVQYWmhCMzEqvKT QJTE3VFGc2WFyojYmMG4XH3H2mJ6et6TYJVGUdPpuKa7CFvj9DLfPyH3YA2lZfuG nbtZyLoYqe99xklKg/9dVVLigsUXDeKj6dyxmmz+5xtDWOKBZNcKUHgXK/3k+/8j VGyiE225VjPtld2NNh09MThEKPP8dhWudAvT0KIQ0RoxpwN2fZbDOjxRBwfYmFf7 Ldq/3hm3mTM4kenoSagKj2GYuEZUmBhAQqXVwpRIzjfcWpL+3VX+ -----END CERTIFICATE-----Generated at Sun Jun 15 23:20:14 2025 by rpki-client