$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa File: 98856bda-5be1-31b8-a55f-ce163d5571f9.roa (raw, json) Hash identifier: A/lMKtjxKD7LTB+HhjFKThKm2JSL5AvJw/F3DUJ3fCY= Subject key identifier: 37:FE:66:5A:9B:D1:2F:25:FA:E0:1B:8F:ED:F5:A2:9D:10:D4:E8:62 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F43285849D85F8C620B2187F5232C7880 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.95.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:8c:62:0b:21:87:f5:23:2c:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=56309506-323f-41e3-b562-09bb3a65d1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:bb:39:db:43:06:9f:d4:f7:47:4a:b0:00: 6c:3d:5f:d3:4d:40:4d:8a:81:bf:e4:15:e3:de:a5: b8:f8:95:f6:b1:c3:7c:bd:8a:86:56:92:15:46:90: c1:3c:96:0c:fa:3a:c7:6f:12:0e:c6:d9:bf:ee:ce: a2:ce:ac:a2:f0:94:25:a1:69:d1:49:e6:78:30:33: 05:97:23:2b:6f:0f:b2:11:22:23:8d:35:6b:2a:ab: 96:e0:7d:51:73:97:fb:12:da:90:14:16:0d:de:12: 68:8c:2b:d1:e2:70:cc:e7:a9:07:25:5a:5a:62:52: eb:14:cd:dd:c8:6a:ee:9b:25:a5:58:fe:0d:28:65: ce:ac:29:57:3f:58:d0:7a:50:cb:74:c8:06:24:66: 75:e2:bd:f1:d9:d3:6e:4a:55:f2:04:50:76:64:5a: 17:4c:ce:64:fa:4c:ae:13:2b:57:cf:e8:86:97:db: 1e:1c:90:fd:9f:39:b6:8e:42:4b:16:00:51:8a:db: 56:af:ad:cc:be:21:ba:24:30:cb:06:5f:9b:87:cf: 8f:48:f1:59:26:ee:33:d9:89:24:df:88:5b:35:2c: f1:08:23:13:d7:ba:b8:57:4b:35:e2:e5:81:e2:e5: 2e:c3:2f:14:1b:2f:c7:2c:91:ac:a6:4f:37:9b:69: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:66:5A:9B:D1:2F:25:FA:E0:1B:8F:ED:F5:A2:9D:10:D4:E8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:78:0b:41:2c:6c:1f:2e:cf:d7:eb:d9:b3:e8:8a:e4:de:05: 9b:f1:c4:06:84:50:2e:99:5b:e9:03:f5:85:85:2f:98:99:7f: 9e:19:9b:47:79:92:61:3e:c3:23:a2:2c:da:6e:37:8d:94:1b: 58:8c:50:08:0c:80:36:ff:13:4a:44:3f:ad:55:8d:fc:63:86: 46:04:e4:e7:9d:79:54:e9:02:ba:09:18:8a:b1:0c:a2:69:b0: d6:d0:c0:c4:e4:9d:b2:72:a5:f5:24:fd:52:5e:be:7e:51:d8: 07:d6:85:68:e8:de:bd:03:ac:90:5a:6c:43:22:80:67:00:5b: 52:06:75:f5:73:c5:0d:d5:66:3c:f0:39:76:87:5f:35:3a:7f: f5:81:ee:e3:e2:e6:c6:b5:0b:de:82:44:c7:4a:4b:c7:3b:42: c4:48:bb:5d:ec:f7:61:60:fe:4f:9b:01:b6:2c:c7:8a:7f:74: 2d:15:ad:38:b4:40:66:91:18:b6:69:2b:53:b3:22:7e:a2:70: 79:f4:dc:0b:01:a8:ac:07:d5:fd:74:f4:7a:99:61:f8:e7:2d: a3:5c:3e:86:0c:b3:4d:6c:e9:e4:80:e3:0b:5d:09:f3:61:74: 12:cc:ff:70:da:a7:91:55:fd:c9:67:69:e3:fc:d3:f0:c9:e2: ce:42:2a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4xiCyGH9SMseIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTYzMDk1MDYtMzIzZi00MWUzLWI1NjItMDliYjNhNjVkMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhC7OdtDBp/U90dKsABsPV/TTUBNioG/5BXj 3qW4+JX2scN8vYqGVpIVRpDBPJYM+jrHbxIOxtm/7s6izqyi8JQloWnRSeZ4MDMF lyMrbw+yESIjjTVrKquW4H1Rc5f7EtqQFBYN3hJojCvR4nDM56kHJVpaYlLrFM3d yGrumyWlWP4NKGXOrClXP1jQelDLdMgGJGZ14r3x2dNuSlXyBFB2ZFoXTM5k+kyu EytXz+iGl9seHJD9nzm2jkJLFgBRittWr63MviG6JDDLBl+bh8+PSPFZJu4z2Ykk 34hbNSzxCCMT17q4V0s14uWB4uUuwy8UGy/HLJGspk83m2kNrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf+Zlqb0S8l+uAbj+31op0Q1OhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvOTg4NTZiZGEtNWJlMS0z MWI4LWE1NWYtY2UxNjNkNTU3MWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl4C0EsbB8uz9fr2bPoiuTeBZvxxAaEUC6ZW+kD9YWFL5iZf54Zm0d5 kmE+wyOiLNpuN42UG1iMUAgMgDb/E0pEP61VjfxjhkYE5OedeVTpAroJGIqxDKJp sNbQwMTknbJypfUk/VJevn5R2AfWhWjo3r0DrJBabEMigGcAW1IGdfVzxQ3VZjzw OXaHXzU6f/WB7uPi5sa1C96CRMdKS8c7QsRIu13s92Fg/k+bAbYsx4p/dC0VrTi0 QGaRGLZpK1OzIn6icHn03AsBqKwH1f109HqZYfjnLaNcPoYMs01s6eSA4wtdCfNh dBLM/3Dap5FV/clnaeP80/DJ4s5CKgo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:51:49 2025 by rpki-client