$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: z6MFCV3wXbcTQaf235rYyPKeoaEFs9EztFtaM+V6P+4= Subject key identifier: 4A:34:5D:8F:33:A8:22:4A:03:D3:A9:38:BD:4E:A9:4F:8E:45:34:BD Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F43285849E2251F156B6211055E0AD640 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1f:15:6b:62:11:05:5e:0a:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=4e45b6ea-e160-4a79-9587-98b1d5416d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:ea:95:14:e6:cd:60:b5:37:14:8e:32:a3: ee:74:bd:a4:12:c1:c7:19:ed:0d:fe:ca:9c:b5:31: 53:07:fc:26:0e:95:e0:08:98:53:fb:b0:1b:22:df: dd:a3:82:2f:61:32:05:fa:a7:6e:d2:b8:4c:60:1b: d1:50:26:76:3d:14:4e:d5:29:a2:ee:39:3d:ac:8f: 0e:30:f5:94:20:99:dc:6e:02:ef:b8:15:fd:59:03: 41:76:93:46:70:dc:d6:82:6a:03:66:77:76:88:c6: 91:2f:88:42:a1:36:66:26:4e:93:12:9e:17:b8:59: 81:56:56:23:9c:15:bc:14:d1:57:46:4c:26:71:0c: 0e:38:e5:df:8d:86:9a:03:02:37:f3:9a:22:f2:8b: 66:d4:95:c6:56:88:b5:23:30:c4:6f:93:3d:60:73: 02:6a:10:cb:21:2e:8c:f5:3e:1a:62:f6:de:c6:fb: aa:61:69:ee:9e:e4:cc:3f:96:8f:4a:4d:1b:1a:33: 5e:80:8c:6e:23:70:86:51:b9:58:1e:76:a8:c9:27: be:e1:c8:c7:53:7c:cd:6d:86:1c:1f:07:f5:c8:e2: 57:c8:7f:8d:4d:55:a7:f6:e8:c4:3c:69:3e:e9:ab: 1a:86:9a:1d:1e:ca:d7:74:54:a1:b5:3c:be:df:18: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:5D:8F:33:A8:22:4A:03:D3:A9:38:BD:4E:A9:4F:8E:45:34:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:60:d7:9e:0b:53:3e:48:11:1e:95:f3:36:10:47:13:77:94: 59:72:d1:5f:f0:0d:73:63:26:dc:3f:88:0d:27:e2:e1:18:e1: 8d:99:c1:69:12:b9:27:ef:80:40:fb:cf:78:76:b7:da:e9:27: f2:92:77:be:bd:91:98:54:ee:3e:b5:6b:f0:c9:37:28:29:3c: 98:7c:0d:1a:2a:a9:ca:67:73:dd:d4:70:81:97:90:22:8f:29: ba:43:2b:41:c0:3d:13:fb:d4:1d:79:1b:b4:0d:78:7c:07:22: 86:0e:43:31:f1:49:5f:bd:46:9f:a4:14:0d:92:9b:8f:50:d2: 78:97:e4:2f:fc:12:4f:d6:f1:f6:2d:f7:71:02:00:7f:98:85: 14:36:f7:b4:da:fe:ea:4d:7d:f6:35:78:f5:54:ec:d4:73:40: 4e:8d:4d:cb:77:7b:f7:df:03:53:90:34:f3:3f:ca:e7:c5:2c: 1a:08:2c:a1:e0:aa:3b:9c:b4:6f:54:72:da:b5:6c:72:3b:5f: 5c:ca:b7:10:05:b0:25:c8:24:5c:b1:a9:f8:48:00:58:a5:9e: e5:57:41:7b:25:6f:2c:bd:34:6f:23:ff:87:3a:f4:df:ec:e1: 9a:b6:d0:b7:bd:61:e3:7e:dd:38:e2:8e:2e:cc:46:a4:a4:6c: 28:b5:6b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR8Va2IRBV4K1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NGU0NWI2ZWEtZTE2MC00YTc5LTk1ODctOThiMWQ1NDE2ZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+vqlRTmzWC1NxSOMqPudL2kEsHHGe0N/sqc tTFTB/wmDpXgCJhT+7AbIt/do4IvYTIF+qdu0rhMYBvRUCZ2PRRO1Smi7jk9rI8O MPWUIJncbgLvuBX9WQNBdpNGcNzWgmoDZnd2iMaRL4hCoTZmJk6TEp4XuFmBVlYj nBW8FNFXRkwmcQwOOOXfjYaaAwI385oi8otm1JXGVoi1IzDEb5M9YHMCahDLIS6M 9T4aYvbexvuqYWnunuTMP5aPSk0bGjNegIxuI3CGUblYHnaoySe+4cjHU3zNbYYc Hwf1yOJXyH+NTVWn9ujEPGk+6asahpodHsrXdFShtTy+3xir2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo0XY8zqCJKA9OpOL1OqU+ORTS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRg154LUz5IER6V8zYQRxN3lFly0V/wDXNjJtw/iA0n4uEY4Y2ZwWkS uSfvgED7z3h2t9rpJ/KSd769kZhU7j61a/DJNygpPJh8DRoqqcpnc93UcIGXkCKP KbpDK0HAPRP71B15G7QNeHwHIoYOQzHxSV+9Rp+kFA2Sm49Q0niX5C/8Ek/W8fYt 93ECAH+YhRQ297Ta/upNffY1ePVU7NRzQE6NTct3e/ffA1OQNPM/yufFLBoILKHg qjuctG9Uctq1bHI7X1zKtxAFsCXIJFyxqfhIAFilnuVXQXslbyy9NG8j/4c69N/s 4Zq20Le9YeN+3Tjiji7MRqSkbCi1axs= -----END CERTIFICATE-----Generated at Mon Jun 16 01:49:36 2025 by rpki-client