$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/39c22615-9e4b-3071-8dad-0206319460d6.roa File: 39c22615-9e4b-3071-8dad-0206319460d6.roa (raw, json) Hash identifier: pm64ONZ7s3D0SB/lrlC39GPNeTpV8T0wtFqjsuQc8U8= Subject key identifier: 2F:38:5E:2A:80:B4:47:93:04:F7:B1:13:1F:14:AE:6E:5C:E4:97:66 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849F2E52B5909BED767816CCD40 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/39c22615-9e4b-3071-8dad-0206319460d6.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 36837 IP address blocks: 208.27.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2b:59:09:be:d7:67:81:6c:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=38f065e7-0f13-48f8-8e3e-5ce6610391e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:cc:96:4e:63:79:3b:a5:f3:05:e4:af:ee: 9e:5c:26:b5:91:36:45:e1:bb:a5:10:f0:51:07:6b: ae:b7:86:80:00:cb:1c:09:95:37:ca:7f:e7:6b:26: 31:10:8a:2d:f9:50:7d:de:23:97:3c:dc:3a:89:c4: 39:c7:50:b9:ab:66:02:f0:dc:de:4d:56:55:3a:d1: ca:b9:76:ed:63:61:99:fb:cf:bb:59:14:e5:75:bc: 60:4e:0b:5f:8e:f8:95:80:61:db:b3:01:0c:cb:14: 60:0c:fe:52:82:03:66:d1:42:af:81:97:c0:0a:95: 6d:d1:a9:8c:b7:2b:15:80:f8:81:0c:dc:63:b7:4e: e2:53:f8:22:3b:48:8f:20:4c:28:7a:c7:17:ff:b4: 4a:44:d9:4a:93:da:67:85:fa:fe:fe:f2:96:a8:4b: 25:75:67:fa:ab:2f:85:6c:02:01:33:05:ab:bb:47: fe:56:46:3a:07:1f:fa:c9:62:2c:e8:35:ad:f8:1f: 88:1c:03:80:39:10:a6:a4:bf:0c:d1:d9:d4:57:99: 0b:d9:db:ec:ee:fb:5e:3f:0f:19:69:63:66:d3:63: ce:b4:ad:7f:b1:58:af:09:e7:8b:ea:27:11:f7:e1: 14:f6:a0:d1:0e:95:58:05:86:bf:33:22:82:38:0a: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:38:5E:2A:80:B4:47:93:04:F7:B1:13:1F:14:AE:6E:5C:E4:97:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/39c22615-9e4b-3071-8dad-0206319460d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.27.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:35:27:1d:b0:7d:5a:d8:b5:ed:98:5e:90:c8:05:fc:b7:af: 42:53:6a:bc:3e:0e:41:bf:17:31:9b:36:84:53:69:53:da:0c: 7d:cd:74:85:01:24:a3:7d:21:ae:76:c0:01:05:55:c1:77:4d: 60:01:7e:c2:10:e8:8c:54:7a:5a:f4:ac:77:1f:fe:4c:ba:24: 57:79:48:37:4a:e6:85:d1:28:f6:d6:56:e9:64:2b:03:ff:5c: e6:61:7b:c7:79:bd:e0:69:a1:58:8a:d4:3a:10:9d:c2:dc:70: 86:69:ec:b8:a8:07:ff:26:12:9a:82:e5:db:3f:6b:cf:78:d5: 5b:a2:32:a2:95:b5:d7:d0:35:29:b2:fb:cc:69:44:6e:44:5a: 30:b3:8a:20:98:2a:e4:3f:cb:f2:b9:5b:c2:91:ad:6a:39:d1: 21:0d:85:69:6a:04:1c:39:07:25:49:3c:ba:0a:79:7f:f2:f3: 68:cb:f0:6f:7e:88:a6:15:b8:0c:db:3e:10:b2:97:46:a3:65: 53:a3:b6:fd:ed:09:71:3f:69:b8:39:72:c2:be:3d:3b:bc:af: 49:c5:26:8d:45:98:3a:b2:13:7b:b2:34:b7:b7:38:e4:f5:9e: 32:82:3d:20:dc:86:94:bb:26:ab:25:7d:9c:80:8a:5a:a0:84: ed:52:66:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5StZCb7XZ4FszUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MzhmMDY1ZTctMGYxMy00OGY4LThlM2UtNWNlNjYxMDM5MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfPMlk5jeTul8wXkr+6eXCa1kTZF4bulEPBR B2uut4aAAMscCZU3yn/nayYxEIot+VB93iOXPNw6icQ5x1C5q2YC8NzeTVZVOtHK uXbtY2GZ+8+7WRTldbxgTgtfjviVgGHbswEMyxRgDP5SggNm0UKvgZfACpVt0amM tysVgPiBDNxjt07iU/giO0iPIEwoescX/7RKRNlKk9pnhfr+/vKWqEsldWf6qy+F bAIBMwWru0f+VkY6Bx/6yWIs6DWt+B+IHAOAORCmpL8M0dnUV5kL2dvs7vtePw8Z aWNm02POtK1/sVivCeeL6icR9+EU9qDRDpVYBYa/MyKCOAqUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC84XiqAtEeTBPexEx8Urm5c5JdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMzljMjI2MTUtOWU0Yi0z MDcxLThkYWQtMDIwNjMxOTQ2MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE1Jx2wfVrYte2YXpDIBfy3r0JTarw+DkG/FzGbNoRTaVPaDH3NdIUB JKN9Ia52wAEFVcF3TWABfsIQ6IxUelr0rHcf/ky6JFd5SDdK5oXRKPbWVulkKwP/ XOZhe8d5veBpoViK1DoQncLccIZp7LioB/8mEpqC5ds/a8941VuiMqKVtdfQNSmy +8xpRG5EWjCziiCYKuQ/y/K5W8KRrWo50SENhWlqBBw5ByVJPLoKeX/y82jL8G9+ iKYVuAzbPhCyl0ajZVOjtv3tCXE/abg5csK+PTu8r0nFJo1FmDqyE3uyNLe3OOT1 njKCPSDchpS7JqslfZyAilqghO1SZko= -----END CERTIFICATE-----Generated at Mon Jun 16 11:25:48 2025 by rpki-client