$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa File: d44b739e-4693-3efd-8c82-67f73703b4ec.roa (raw, json) Hash identifier: TEn1iUMky2tg+Rtm/s5yjGqKk7k9ySs4HxZW6w2tIP8= Subject key identifier: 60:43:1B:2B:A8:FA:FE:CC:86:2A:62:B7:91:6C:10:4B:86:2D:8F:FE Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F4328584A6F207CE324AF222CDDEC6280 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 46149 IP address blocks: 208.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7c:e3:24:af:22:2c:dd:ec:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=ba8f67c6-ee16-4731-a475-c1809f85fe64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:64:09:5e:03:8e:58:b1:ab:76:16:7e:60:86: 40:00:ad:fc:a7:fb:6f:05:c1:0c:38:0e:c7:4a:b6: 75:e8:95:53:92:09:4c:e6:85:13:6d:2e:a9:6a:0f: 0f:b8:08:d5:ec:ef:03:1b:23:57:97:b0:36:8c:6c: 4d:e1:de:15:3b:8e:88:d6:ab:79:b6:41:e1:75:72: 68:ec:a7:3d:16:3b:91:b7:92:f6:d5:7a:72:2f:23: f5:08:c2:cb:35:ca:70:c8:19:4f:a0:7a:37:ff:94: 55:d6:89:42:e5:69:56:43:ea:eb:cd:74:4b:b6:28: 6f:80:0d:e1:8c:36:d9:07:d4:4b:98:75:33:c3:9f: 68:f1:85:d1:0f:8c:99:d7:f9:c7:fa:bc:b1:27:28: 0c:ab:af:58:53:ac:50:96:fb:9d:d0:5b:22:85:ed: 01:f7:f9:a7:19:f4:62:cd:ce:1c:ba:67:43:4e:19: 4f:0e:25:2e:74:ee:2f:62:ad:90:11:4c:57:e0:5e: 3e:d4:da:24:1c:ec:f2:db:b1:a0:f8:79:13:3e:cc: 37:40:ce:67:93:90:3a:ea:1f:66:07:56:03:80:79: c5:dc:9a:bb:b8:69:d4:fc:10:60:bb:34:13:14:5c: 7d:2d:52:e9:51:0b:08:86:18:da:d1:98:2b:81:22: ef:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:43:1B:2B:A8:FA:FE:CC:86:2A:62:B7:91:6C:10:4B:86:2D:8F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv4: 208.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:10:b2:9e:da:bc:26:ad:36:c5:de:6f:9f:10:a8:91:b0:f5: f8:4d:4c:30:c4:b1:19:78:45:66:5c:93:0f:ad:1b:1c:8d:da: 66:6e:54:df:cc:b7:d2:b3:3f:a9:e8:7a:0e:54:32:62:b6:9f: ae:2c:72:76:a5:40:12:13:11:98:bf:e5:8d:51:c7:4d:b2:df: 1b:7d:66:01:b5:fa:8a:d7:71:67:0e:d6:b6:c3:f4:dd:15:7d: 23:fd:0d:77:8b:74:7f:a0:97:e2:40:9c:e3:8a:8e:34:cd:75: 46:e8:75:1b:74:7f:26:44:4d:94:71:a1:5e:a9:cb:72:ae:e4: cd:0e:92:6f:74:e4:75:b3:08:ea:2c:34:0c:cb:0d:3a:8f:df: 77:3a:63:96:34:f0:08:1e:b5:97:ef:37:f2:2f:c4:f0:9e:85: e6:40:ea:29:f6:05:f0:5c:bc:05:02:2e:4e:42:cc:97:0d:28: 90:2c:b1:dc:b7:7f:3a:4c:9e:b5:d2:f4:ab:07:15:7a:84:9a: a5:05:65:33:83:a9:93:49:f1:d9:21:fe:32:72:87:b7:1d:8b: 15:9c:0c:7b:10:fb:13:5e:73:ae:35:fd:a5:f8:18:e1:4b:ce: 24:c1:ec:ab:46:12:e9:a7:29:fc:27:63:5c:38:16:ea:71:9d: 45:5f:15:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHzjJK8iLN3sYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk YmE4ZjY3YzYtZWUxNi00NzMxLWE0NzUtYzE4MDlmODVmZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWQJXgOOWLGrdhZ+YIZAAK38p/tvBcEMOA7H SrZ16JVTkglM5oUTbS6pag8PuAjV7O8DGyNXl7A2jGxN4d4VO46I1qt5tkHhdXJo 7Kc9FjuRt5L21XpyLyP1CMLLNcpwyBlPoHo3/5RV1olC5WlWQ+rrzXRLtihvgA3h jDbZB9RLmHUzw59o8YXRD4yZ1/nH+ryxJygMq69YU6xQlvud0Fsihe0B9/mnGfRi zc4cumdDThlPDiUudO4vYq2QEUxX4F4+1NokHOzy27Gg+HkTPsw3QM5nk5A66h9m B1YDgHnF3Jq7uGnU/BBguzQTFFx9LVLpUQsIhhja0ZgrgSLvpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBDGyuo+v7Mhipit5FsEEuGLY/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvZDQ0YjczOWUtNDY5My0z ZWZkLThjODItNjdmNzM3MDNiNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4Qsp7avCatNsXeb58QqJGw9fhNTDDEsRl4RWZckw+tGxyN2mZuVN/M t9KzP6noeg5UMmK2n64scnalQBITEZi/5Y1Rx02y3xt9ZgG1+orXcWcO1rbD9N0V fSP9DXeLdH+gl+JAnOOKjjTNdUbodRt0fyZETZRxoV6py3Ku5M0Okm905HWzCOos NAzLDTqP33c6Y5Y08AgetZfvN/IvxPCeheZA6in2BfBcvAUCLk5CzJcNKJAssdy3 fzpMnrXS9KsHFXqEmqUFZTODqZNJ8dkh/jJyh7cdixWcDHsQ+xNec641/aX4GOFL ziTB7KtGEumnKfwnY1w4FupxnUVfFfE= -----END CERTIFICATE-----Generated at Tue Aug 5 20:18:12 2025 by rpki-client