$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa File: 0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa (raw, json) Hash identifier: 39QI0E4vdF2wwqOGONkDGZGllzLfpIbjXZjRSZr/0pk= Subject key identifier: 83:5A:A3:85:C4:D1:C6:3F:17:69:C7:F1:75:3D:BC:EF:BD:93:08:D3 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849E859A74583455FC4F90EFD80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa Signing time: Mon 19 May 2025 18:22:00 +0000 ROA not before: Mon 19 May 2025 18:22:00 +0000 ROA not after: Sun 17 Aug 2025 18:22:00 +0000 asID: 13536 IP address blocks: 216.107.192.0/20 maxlen: 24 216.107.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e8:59:a7:45:83:45:5f:c4:f9:0e:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: May 19 18:22:00 2025 GMT Not After : Aug 17 18:22:00 2025 GMT Subject: CN=343f8edb-36f6-433a-8f97-a9a1e4861852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:9d:17:ea:eb:cf:83:26:32:16:ad:51:de: e1:98:1b:a4:86:d2:82:81:24:50:47:0b:9b:41:6f: dd:31:19:93:40:54:08:14:dc:08:9f:8b:db:ee:45: b3:24:5b:40:5e:e5:b4:90:d3:25:88:cc:f4:53:15: b0:86:36:95:e8:1e:ed:2c:61:3a:9f:b8:ec:c0:9c: e1:9b:35:20:a3:d0:8a:bc:52:1c:0c:0a:36:5b:34: 27:1d:cb:9f:08:a6:28:1c:49:c7:fa:23:e1:2d:e9: 5b:96:fe:32:b6:59:3a:17:80:6e:3f:d8:1b:d2:96: f2:25:78:f7:8c:33:6a:e6:4a:25:91:22:33:c1:9e: f4:2b:58:40:30:28:f7:5e:38:57:48:03:3a:4c:f6: 10:13:46:05:3d:eb:32:44:92:93:d0:ef:58:5b:b5: 4f:a0:ed:b0:7a:04:27:29:fa:21:0f:ba:6d:82:f7: 55:fa:a2:65:6d:7d:96:06:1f:5f:18:76:5f:b8:65: 34:c5:d7:92:bc:c3:99:c9:2d:ec:33:2a:92:0b:44: b3:af:1f:d8:06:95:16:e6:c0:76:5b:e5:f5:3c:25: ef:4f:48:ca:27:42:44:8d:17:23:a8:22:75:13:7f: 70:1c:50:7a:fc:f2:ba:f8:9b:0f:ab:5b:70:dd:de: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5A:A3:85:C4:D1:C6:3F:17:69:C7:F1:75:3D:BC:EF:BD:93:08:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.107.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:79:5f:8f:07:34:77:75:16:44:39:22:d8:42:09:0d:32:3d: 30:3c:86:41:20:a9:e2:75:e2:47:6a:24:a1:7e:32:43:bb:18: e4:17:40:6a:78:81:16:47:22:41:43:44:d2:de:93:0f:4f:56: 27:c0:5e:bb:9e:16:43:b8:6d:ea:83:95:15:f6:9a:b7:24:04: 5a:5b:80:7b:8c:68:a1:e5:ce:ce:77:c7:d3:1e:55:34:30:03: 7e:7b:2f:fe:e7:20:c0:b7:d5:40:62:cd:cb:06:29:e9:05:e6: 2a:9d:a7:98:6c:fd:65:46:c6:1c:3f:eb:80:9d:be:b3:42:97: 0e:f3:5b:3e:9c:06:09:18:d1:81:c2:6f:f9:d0:1b:3b:bb:e8: 57:70:e5:16:5e:24:c1:a5:2e:67:e8:5f:38:db:55:22:0f:c2: e0:f4:57:ec:b8:c3:10:ef:4d:fb:44:05:9a:a3:bc:4e:73:75: 87:3e:64:ea:49:8b:f8:1a:5c:7e:9b:e2:bd:4a:c4:b7:3e:10: c9:51:7a:81:98:cb:97:d1:01:d8:e5:78:86:6f:27:de:bc:21: 67:2f:9b:a6:f7:e4:f2:32:9f:34:bd:04:a6:ad:7c:88:4d:e1: 93:31:94:90:d9:cc:08:0a:4e:7d:0d:d4:8e:31:5b:bf:f3:2b: ca:90:d0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnoWadFg0VfxPkO/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDUxOTE4MjIwMFoXDTI1MDgxNzE4MjIwMFowLzEtMCsGA1UEAxMk MzQzZjhlZGItMzZmNi00MzNhLThmOTctYTlhMWU0ODYxODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW2dF+rrz4MmMhatUd7hmBukhtKCgSRQRwub QW/dMRmTQFQIFNwIn4vb7kWzJFtAXuW0kNMliMz0UxWwhjaV6B7tLGE6n7jswJzh mzUgo9CKvFIcDAo2WzQnHcufCKYoHEnH+iPhLelblv4ytlk6F4BuP9gb0pbyJXj3 jDNq5kolkSIzwZ70K1hAMCj3XjhXSAM6TPYQE0YFPesyRJKT0O9YW7VPoO2wegQn KfohD7ptgvdV+qJlbX2WBh9fGHZfuGU0xdeSvMOZyS3sMyqSC0Szrx/YBpUW5sB2 W+X1PCXvT0jKJ0JEjRcjqCJ1E39wHFB6/PK6+JsPq1tw3d4HcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINao4XE0cY/F2nH8XU9vO+9kwjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGUzOTg3NWQtMzZlYi0z MGMxLWEzMmEtMWJjMGU0N2E3ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2GvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV5X48HNHd1FkQ5IthCCQ0yPTA8hkEgqeJ14kdqJKF+MkO7GOQXQGp4 gRZHIkFDRNLekw9PVifAXrueFkO4beqDlRX2mrckBFpbgHuMaKHlzs53x9MeVTQw A357L/7nIMC31UBizcsGKekF5iqdp5hs/WVGxhw/64CdvrNClw7zWz6cBgkY0YHC b/nQGzu76Fdw5RZeJMGlLmfoXzjbVSIPwuD0V+y4wxDvTftEBZqjvE5zdYc+ZOpJ i/gaXH6b4r1KxLc+EMlReoGYy5fRAdjleIZvJ968IWcvm6b35PIynzS9BKatfIhN 4ZMxlJDZzAgKTn0N1I4xW7/zK8qQ0I8= -----END CERTIFICATE-----Generated at Mon Jun 16 02:05:32 2025 by rpki-client