$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa File: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json) Hash identifier: XIdkrNH4FFGvRS2pPh1PjWVuWL+QkdGbI7JuRcZkuGs= Subject key identifier: 2B:B7:A7:58:B4:8B:88:3B:38:3D:66:82:2C:46:09:3E:9D:5C:D7:2C Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584A07D5281129A7D26481178BC0 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 33040 IP address blocks: 199.48.216.0/21 maxlen: 21 2605:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:28:11:29:a7:d2:64:81:17:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=f7dd01a1-094d-4dc3-bc95-a3315497eedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:52:ab:f4:f0:89:76:fa:c6:0c:b7:ac:8f:90: 51:65:56:bd:81:21:63:73:e3:2f:3c:a5:da:a3:f0: 43:10:91:1a:82:95:5a:d0:0c:57:33:e7:b0:c4:92: 17:69:4c:1f:39:cd:af:67:35:df:71:f0:6a:5a:5e: ec:65:df:48:fc:a3:d0:de:9f:e9:9c:72:5a:55:bd: 07:9e:e5:b7:2d:1e:b0:f9:c9:9c:22:ed:3c:a5:fd: 53:ee:3b:9a:9c:9c:28:40:24:be:a6:fc:ee:0a:0d: ec:5f:11:ad:5b:73:11:81:00:d1:51:bf:4a:0f:ea: 25:6c:82:6a:ff:f7:7e:14:b5:60:09:97:ab:ea:27: 9a:f1:a2:37:c0:d3:1e:de:d5:65:a3:53:b0:7e:d7: 21:62:62:4e:d2:28:c3:81:32:10:ea:e4:ae:1d:ad: 14:41:d5:61:8e:0c:89:f0:b2:fa:1a:9f:c0:96:6b: cf:b7:4c:ad:52:99:d1:9f:80:4c:a6:aa:61:ff:5e: b2:2c:a5:fb:a1:ac:ce:d7:5c:8d:8b:df:9d:c5:ac: e7:77:fa:03:b7:f8:51:39:3f:89:4a:8f:9a:84:e3: 43:87:b6:cf:15:fa:b6:81:04:87:be:d8:42:75:42: 4e:6a:40:5d:20:4f:5e:7b:81:27:3a:f2:34:8d:4d: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:A7:58:B4:8B:88:3B:38:3D:66:82:2C:46:09:3E:9D:5C:D7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fe:ed:ed:6f:d5:ef:53:58:2f:d5:86:3d:13:9c:e5:1e:74: 27:e9:76:85:f6:04:90:73:f5:13:13:30:9c:7c:ca:90:e7:c8: 8e:4f:65:fe:b2:23:1b:58:ef:ac:31:48:17:4d:cc:d4:b8:99: 26:2c:e4:13:98:1d:bb:45:34:a3:72:aa:1f:58:a8:09:d2:ba: a3:17:0c:31:8e:cc:52:2c:e4:34:1c:17:04:b1:4e:a0:67:1b: c2:8c:84:6a:7b:21:ce:95:de:e6:36:54:f9:e8:17:bb:10:ef: 1a:40:8f:84:8d:c0:85:90:14:55:09:7f:e8:6c:44:9c:e0:28: 96:4c:ce:84:e3:0b:9a:46:fb:f7:aa:2d:3d:1a:3c:cd:a0:e7: 25:30:b6:61:90:b0:e1:b6:27:29:4b:bb:0e:25:eb:55:60:08: 84:a1:72:53:f5:d6:ba:82:eb:61:1b:b9:e3:c4:eb:fc:53:e6: a3:50:5b:b3:8c:1e:08:ef:83:0e:c7:fa:5c:2c:04:f8:0b:66: 40:ec:a6:78:a4:ba:4f:dc:6a:79:9e:09:3f:9f:a3:fb:b3:8b: 59:28:ed:65:e3:84:28:d8:97:ca:79:38:00:07:9a:97:4b:cf: d6:79:20:98:96:61:d6:69:a7:fe:40:28:62:61:93:9b:d0:8a: 3d:38:11:4b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEoH1SgRKafSZIEXi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjdkZDAxYTEtMDk0ZC00ZGMzLWJjOTUtYTMzMTU0OTdlZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FKr9PCJdvrGDLesj5BRZVa9gSFjc+MvPKXa o/BDEJEagpVa0AxXM+ewxJIXaUwfOc2vZzXfcfBqWl7sZd9I/KPQ3p/pnHJaVb0H nuW3LR6w+cmcIu08pf1T7juanJwoQCS+pvzuCg3sXxGtW3MRgQDRUb9KD+olbIJq //d+FLVgCZer6iea8aI3wNMe3tVlo1OwftchYmJO0ijDgTIQ6uSuHa0UQdVhjgyJ 8LL6Gp/AlmvPt0ytUpnRn4BMpqph/16yLKX7oazO11yNi9+dxaznd/oDt/hROT+J So+ahONDh7bPFfq2gQSHvthCdUJOakBdIE9ee4EnOvI0jU2YHQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCu3p1i0i4g7OD1mgixGCT6dXNcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjM4NDllOGEtMzc5YS0z MGU3LWFhZWYtOGQ4NzQ2Yjk5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxzDYMA0E AgACMAcDBQAmBT1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGr+7e1v1e9TWC/Vhj0TnOUedCfpdoX2BJBz 9RMTMJx8ypDnyI5PZf6yIxtY76wxSBdNzNS4mSYs5BOYHbtFNKNyqh9YqAnSuqMX DDGOzFIs5DQcFwSxTqBnG8KMhGp7Ic6V3uY2VPnoF7sQ7xpAj4SNwIWQFFUJf+hs RJzgKJZMzoTjC5pG+/eqLT0aPM2g5yUwtmGQsOG2JylLuw4l61VgCIShclP11rqC 62EbuePE6/xT5qNQW7OMHgjvgw7H+lwsBPgLZkDspnikuk/canmeCT+fo/uzi1ko 7WXjhCjYl8p5OAAHmpdLz9Z5IJiWYdZpp/5AKGJhk5vQij04EUs= -----END CERTIFICATE-----Generated at Mon Jun 16 21:43:15 2025 by rpki-client