$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa File: 468e47db-5e5d-3b56-8599-c0d6de193ee1.roa (raw, json) Hash identifier: yfOeRhY3QcDyatAi8jB0tMQuSrzr0mRmVsIcDSHNw0Y= Subject key identifier: 33:D1:5A:50:74:3F:C9:CB:9A:8E:E3:F9:A0:1A:C4:23:C3:6B:28:82 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A1465645E3E3EEB73AEAEA400 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 25645 IP address blocks: 208.85.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:64:5e:3e:3e:eb:73:ae:ae:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=4d9d7351-4150-4c77-991d-72892c7579da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:99:97:46:55:51:19:48:5c:4e:76:ca:c2: 05:a3:77:de:d2:46:17:01:34:0b:4d:cd:1a:d6:78: 39:db:dd:b9:95:5f:1b:72:6f:f9:2e:46:60:d6:03: 28:a5:da:97:8f:20:51:d5:b2:e2:c5:56:08:64:f8: d9:93:17:f7:24:ed:21:3a:6f:52:da:6f:37:d9:eb: 79:29:0c:74:6f:3b:79:e2:0c:fa:0c:de:e8:b6:97: bf:0f:15:bd:c9:87:7f:a0:3c:0a:7f:03:0d:10:55: 1e:20:0c:d4:4d:d8:a4:e2:4e:47:ac:3c:a2:20:08: b7:c2:c1:b1:d3:0d:b8:63:24:35:39:57:21:36:f3: a6:c4:9a:ac:97:4a:ba:65:51:9f:f2:c4:be:17:cb: f5:8d:5f:93:ac:ab:0c:5e:d8:cc:90:ed:a2:0c:81: 78:71:ac:19:6a:ca:23:ce:fa:61:a7:ce:33:2f:5a: 26:60:82:00:41:ee:f6:91:73:5d:cd:7a:81:f0:9b: 13:7c:b3:53:32:b4:35:45:1b:89:2c:a0:2d:f9:c4: 99:3a:36:cf:d1:d7:3e:fb:57:22:ab:9e:fc:c7:ec: b2:f2:19:f0:a5:db:1c:9e:4d:39:71:cd:54:a6:9c: d1:c6:76:0d:42:bf:ef:ac:6c:d1:b3:2a:4e:05:99: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:5A:50:74:3F:C9:CB:9A:8E:E3:F9:A0:1A:C4:23:C3:6B:28:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 208.85.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:da:41:4e:9c:ee:c7:0f:f5:d8:bb:95:ef:31:8e:5c:ff:f2: 7c:d3:1b:ab:51:33:1c:29:fa:d7:90:f8:00:0f:06:e1:90:65: 2d:7b:8e:cc:7c:b0:e0:93:70:a2:4b:2e:b5:80:2a:2e:5d:2c: f2:82:21:52:a3:0a:f6:91:95:45:03:1d:27:95:6c:64:28:45: 50:60:05:20:37:80:9c:66:d3:9e:78:cc:fa:4f:f9:84:34:0a: 49:6e:1f:36:2d:25:e5:ba:2f:b9:94:63:eb:3a:61:ae:a0:f5: a6:3b:67:f9:64:fe:3d:33:28:68:c4:c3:31:d5:86:f4:2f:c9: 3a:d8:f8:9f:42:d3:a4:cf:d2:1a:a9:9a:00:d3:76:0d:ae:45: 55:ad:78:a7:0c:b7:41:99:db:58:7d:89:2f:96:45:2d:cb:c9: 35:45:34:9c:95:14:36:1a:d3:4c:f7:8e:26:33:fe:19:8c:16: c8:d5:d1:70:64:08:f2:9b:cb:14:f1:74:34:09:80:b9:4d:2b: 40:97:6a:ae:9d:b9:a2:d7:22:b4:f0:ef:8b:2c:a1:6e:1d:64: 42:1b:17:68:d3:62:73:26:8f:82:b3:bb:15:ea:70:10:8f:0a: f0:67:60:14:31:33:b9:77:c4:8d:b3:82:ac:05:a8:ef:9d:a2: 55:82:31:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWRePj7rc66upAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NGQ5ZDczNTEtNDE1MC00Yzc3LTk5MWQtNzI4OTJjNzU3OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9uZl0ZVURlIXE52ysIFo3fe0kYXATQLTc0a 1ng52925lV8bcm/5LkZg1gMopdqXjyBR1bLixVYIZPjZkxf3JO0hOm9S2m832et5 KQx0bzt54gz6DN7otpe/DxW9yYd/oDwKfwMNEFUeIAzUTdik4k5HrDyiIAi3wsGx 0w24YyQ1OVchNvOmxJqsl0q6ZVGf8sS+F8v1jV+TrKsMXtjMkO2iDIF4cawZasoj zvphp84zL1omYIIAQe72kXNdzXqB8JsTfLNTMrQ1RRuJLKAt+cSZOjbP0dc++1ci q578x+yy8hnwpdscnk05cc1UppzRxnYNQr/vrGzRsypOBZkY5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPRWlB0P8nLmo7j+aAaxCPDayiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNDY4ZTQ3ZGItNWU1ZC0z YjU2LTg1OTktYzBkNmRlMTkzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDaQU6c7scP9di7le8xjlz/8nzTG6tRMxwp+teQ+AAPBuGQZS17jsx8 sOCTcKJLLrWAKi5dLPKCIVKjCvaRlUUDHSeVbGQoRVBgBSA3gJxm0554zPpP+YQ0 CkluHzYtJeW6L7mUY+s6Ya6g9aY7Z/lk/j0zKGjEwzHVhvQvyTrY+J9C06TP0hqp mgDTdg2uRVWteKcMt0GZ21h9iS+WRS3LyTVFNJyVFDYa00z3jiYz/hmMFsjV0XBk CPKbyxTxdDQJgLlNK0CXaq6duaLXIrTw74ssoW4dZEIbF2jTYnMmj4KzuxXqcBCP CvBnYBQxM7l3xI2zgqwFqO+dolWCMaQ= -----END CERTIFICATE-----Generated at Mon Jun 16 17:54:02 2025 by rpki-client