$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b71b0d60-2287-334e-a837-88ad23ac4104.roa File: b71b0d60-2287-334e-a837-88ad23ac4104.roa (raw, json) Hash identifier: RjiOCMjWvrYpmnDQkEyNiO7gRYwCkCUGQsiBiReDkLg= Subject key identifier: 57:5C:31:4B:33:17:2D:3D:56:4B:4F:21:D9:65:09:B3:7D:9B:E9:4B Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584A23C0141F7C9179D0F979F3E0 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b71b0d60-2287-334e-a837-88ad23ac4104.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 208.123.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:14:1f:7c:91:79:d0:f9:79:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=3a6b657b-60f9-42eb-8985-484d816378f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:c6:5c:d9:4f:33:f6:5a:09:b4:3d:e3:bb: a1:28:ce:3f:1b:40:a6:17:1e:5e:1e:b6:51:60:81: 6f:cd:e8:aa:84:9d:7e:4e:fe:a4:27:d1:cd:ec:d7: 1d:20:8b:a5:15:37:e6:80:b3:8d:cb:ce:49:f4:c2: 92:39:22:e3:c0:69:57:ef:90:e1:de:49:d9:9e:cc: 24:81:01:d9:6c:d3:90:ab:59:53:9a:17:64:09:3b: 8d:09:61:f5:bc:e3:81:c5:65:2a:f0:bc:4f:9f:c7: 60:fe:8f:b0:e0:87:a7:40:bd:ff:22:f6:6e:6e:7a: b0:f2:2e:50:7f:2c:d5:c2:2b:1d:82:21:6c:d1:41: f4:cb:1a:ca:43:53:11:df:11:5a:94:a8:4f:0a:41: af:4f:b5:35:bd:b2:78:07:58:0f:b5:94:4e:79:53: a3:12:4a:e1:de:ce:8c:3c:b6:15:66:16:84:79:9a: 42:18:53:38:c6:2b:29:81:7a:d1:6a:cb:00:4c:00: d4:0e:19:82:32:58:56:4e:8a:c3:1d:15:5c:86:96: 02:fc:1e:a9:e1:e4:f6:24:fa:ce:f6:65:69:92:12: 35:a3:9b:24:7f:6e:ea:de:58:50:03:1b:ea:70:55: 33:1b:02:d1:02:8b:73:cf:84:d5:2f:6c:ff:1f:4b: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:31:4B:33:17:2D:3D:56:4B:4F:21:D9:65:09:B3:7D:9B:E9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b71b0d60-2287-334e-a837-88ad23ac4104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 208.123.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:b2:21:af:0f:f3:65:3c:61:8b:31:78:e8:4a:44:34:d9: db:f6:0d:91:d8:7d:91:74:16:0e:52:87:25:1c:a4:f0:11:26: e2:b1:ac:30:e1:de:fe:17:8f:27:af:7f:06:4c:d1:e6:db:46: 45:81:2b:83:1d:8d:bb:02:39:6e:44:34:3a:05:34:68:34:92: 32:d9:2d:63:be:c7:0a:0b:8f:3a:f9:39:57:97:81:8e:8b:1e: 97:07:d7:7b:d9:69:b2:71:68:e0:e1:20:78:3c:bb:f4:77:80: 55:35:51:b1:a1:b3:e1:0f:87:39:5c:85:de:de:49:f0:50:35: 51:8a:d8:89:ee:eb:59:ec:d0:ac:0b:6c:fb:5e:8d:cd:49:2d: c9:96:6f:8e:8b:c8:e3:5a:fc:2d:77:9f:cc:6a:2d:9d:f2:68: 12:c4:b5:43:58:91:dd:50:e7:b9:31:30:90:09:cb:19:c6:00: fd:47:6c:ec:7a:e6:af:0e:2a:fc:40:02:75:59:d5:2a:48:54: f0:5b:20:0b:5c:5f:fd:84:fa:31:a5:31:1a:1a:30:38:7d:97: d7:6a:be:f7:96:6c:db:59:0a:47:60:4a:92:fe:72:44:67:a7: 89:4d:48:df:c9:1b:ec:6a:ba:ac:5f:39:ba:38:f8:d6:5b:55: 15:88:db:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBQffJF50Pl58+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk M2E2YjY1N2ItNjBmOS00MmViLTg5ODUtNDg0ZDgxNjM3OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13vGXNlPM/ZaCbQ947uhKM4/G0CmFx5eHrZR YIFvzeiqhJ1+Tv6kJ9HN7NcdIIulFTfmgLONy85J9MKSOSLjwGlX75Dh3knZnswk gQHZbNOQq1lTmhdkCTuNCWH1vOOBxWUq8LxPn8dg/o+w4IenQL3/IvZubnqw8i5Q fyzVwisdgiFs0UH0yxrKQ1MR3xFalKhPCkGvT7U1vbJ4B1gPtZROeVOjEkrh3s6M PLYVZhaEeZpCGFM4xispgXrRassATADUDhmCMlhWTorDHRVchpYC/B6p4eT2JPrO 9mVpkhI1o5skf27q3lhQAxvqcFUzGwLRAotzz4TVL2z/H0uUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdcMUszFy09VktPIdllCbN9m+lLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYjcxYjBkNjAtMjI4Ny0z MzRlLWE4MzctODhhZDIzYWM0MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HveMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfQsiGvD/NlPGGLMXjoSkQ02dv2DZHYfZF0Fg5ShyUcpPARJuKxrDDh 3v4XjyevfwZM0ebbRkWBK4MdjbsCOW5ENDoFNGg0kjLZLWO+xwoLjzr5OVeXgY6L HpcH13vZabJxaODhIHg8u/R3gFU1UbGhs+EPhzlchd7eSfBQNVGK2Inu61ns0KwL bPtejc1JLcmWb46LyONa/C13n8xqLZ3yaBLEtUNYkd1Q57kxMJAJyxnGAP1HbOx6 5q8OKvxAAnVZ1SpIVPBbIAtcX/2E+jGlMRoaMDh9l9dqvveWbNtZCkdgSpL+ckRn p4lNSN/JG+xquqxfObo4+NZbVRWI22c= -----END CERTIFICATE-----Generated at Mon Jun 16 20:08:24 2025 by rpki-client