$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa File: 4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa (raw, json) Hash identifier: 5nBERM3eH9O5wgQxpHOhUhcOMjau5QVa48Loudirg6s= Subject key identifier: D1:A8:3E:59:97:78:76:E9:6F:CB:DC:4C:E9:48:88:18:4C:AC:CE:CA Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A07D53A085D9FE6AAC4D4C480 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 12157 IP address blocks: 208.67.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3a:08:5d:9f:e6:aa:c4:d4:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=638ff15c-d11f-4590-97b5-1ca059724889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:73:f3:dd:71:b5:84:c8:09:c0:e0:b4:ce: 5c:08:3b:d3:21:67:5e:e7:86:12:69:03:a2:54:ac: ab:64:79:cc:89:43:07:f5:4e:78:29:20:0a:0a:8e: b1:2e:ff:7f:c0:3e:d5:23:eb:3a:82:a3:6b:ee:b0: 25:e4:e8:7d:ea:4c:9e:57:82:cf:93:b8:dc:1f:7e: 2e:f9:ef:b2:91:a5:02:e3:6d:9c:a8:33:e5:5f:1b: 59:a5:ad:a5:5a:d9:8b:80:2c:3d:b0:75:87:1f:3d: fb:9a:90:7f:5f:68:a3:05:99:83:92:18:71:a8:63: f5:55:ef:3b:70:c7:be:a4:46:fa:29:6a:2e:33:c0: 91:8c:9e:a0:0e:09:f6:f6:7f:83:b0:ff:9b:6f:50: 8b:10:e9:dc:8a:d2:37:d7:18:c1:db:b8:5b:dd:09: 31:13:02:e0:1d:f9:38:78:1a:ad:a4:d0:75:a3:af: 7f:6b:76:8c:bc:bd:90:85:1f:27:db:b9:e1:55:10: dc:ec:06:0d:4c:e4:f4:b3:e6:34:3c:fd:78:1f:2b: e7:88:95:b0:c6:8e:4c:5f:74:90:3e:23:1c:f5:46: 90:d1:5b:25:8d:ff:bc:55:1b:ca:94:bc:1b:52:ea: f0:fe:64:38:0a:54:c0:55:62:1e:40:47:cc:97:56: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A8:3E:59:97:78:76:E9:6F:CB:DC:4C:E9:48:88:18:4C:AC:CE:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.67.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:65:69:c5:4c:90:5f:8b:a2:0e:a8:22:9c:c0:7e:74:6c:3a: 58:9a:e9:98:64:c1:bf:4c:04:17:05:ae:57:44:8c:45:54:81: 00:33:a8:a4:ef:4b:a9:73:c4:2f:ac:9d:bb:96:6d:4c:5b:d9: c3:ca:d9:fb:14:4a:fb:35:d1:37:01:f2:c7:5b:39:9a:3b:5b: 61:7a:c8:cd:c2:8e:4f:89:69:68:5b:fb:a5:b0:22:16:76:28: 84:37:c6:56:ec:04:30:6a:33:3d:a1:a0:37:c7:d9:0a:eb:b5: 60:93:ed:17:af:d7:5a:ad:85:f6:4e:ca:60:b0:b5:75:b6:6d: 25:0b:6e:44:09:de:26:ea:ce:00:d8:77:71:e1:fd:e4:ce:4d: 77:7b:09:35:90:e2:15:36:eb:86:86:c2:6c:56:04:d2:e5:45: b5:97:a0:56:8c:cc:58:91:d8:e2:e3:e1:b8:60:29:99:7b:84: 65:c0:22:fd:b2:d7:ef:03:6f:24:98:70:a6:2f:4e:c2:b6:51: 46:f1:bf:d9:4f:8a:41:e5:94:c2:49:ed:fe:b2:41:09:c1:80: 35:c6:8d:1e:e8:34:30:66:42:23:c1:0b:99:6f:96:2f:61:6a: 08:f8:a6:db:0f:1d:3f:0d:7b:70:dc:ef:56:a9:3e:89:81:a1: 8c:c7:63:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1ToIXZ/mqsTUxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NjM4ZmYxNWMtZDExZi00NTkwLTk3YjUtMWNhMDU5NzI0ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzRz891xtYTICcDgtM5cCDvTIWde54YSaQOi VKyrZHnMiUMH9U54KSAKCo6xLv9/wD7VI+s6gqNr7rAl5Oh96kyeV4LPk7jcH34u +e+ykaUC422cqDPlXxtZpa2lWtmLgCw9sHWHHz37mpB/X2ijBZmDkhhxqGP1Ve87 cMe+pEb6KWouM8CRjJ6gDgn29n+DsP+bb1CLEOncitI31xjB27hb3QkxEwLgHfk4 eBqtpNB1o69/a3aMvL2QhR8n27nhVRDc7AYNTOT0s+Y0PP14HyvniJWwxo5MX3SQ PiMc9UaQ0Vsljf+8VRvKlLwbUurw/mQ4ClTAVWIeQEfMl1aHtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGoPlmXeHbpb8vcTOlIiBhMrM7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNGM4YTA2ZjctNDJjMi0z Njk5LTljMTAtYWE2MDE1OTE4Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EN/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVlacVMkF+Log6oIpzAfnRsOlia6Zhkwb9MBBcFrldEjEVUgQAzqKTv S6lzxC+snbuWbUxb2cPK2fsUSvs10TcB8sdbOZo7W2F6yM3Cjk+JaWhb+6WwIhZ2 KIQ3xlbsBDBqMz2hoDfH2QrrtWCT7Rev11qthfZOymCwtXW2bSULbkQJ3ibqzgDY d3Hh/eTOTXd7CTWQ4hU264aGwmxWBNLlRbWXoFaMzFiR2OLj4bhgKZl7hGXAIv2y 1+8DbySYcKYvTsK2UUbxv9lPikHllMJJ7f6yQQnBgDXGjR7oNDBmQiPBC5lvli9h agj4ptsPHT8Ne3Dc71apPomBoYzHY2M= -----END CERTIFICATE-----Generated at Mon Jun 16 05:29:09 2025 by rpki-client