$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa File: bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json) Hash identifier: ctB56gxfto/hOmfgZAhJwmVaXLvDHUEE4FRx/gEherk= Subject key identifier: E3:F0:77:C1:03:BA:8E:D7:86:B3:43:26:A7:B9:63:D8:23:3C:8B:CA Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F43285849D165170E0A267E93633DB240 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 1299 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:17:0e:0a:26:7e:93:63:3d:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=d5688f44-093e-44c4-b675-849883f6b8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:67:69:b9:d6:6d:c5:fb:82:cb:0d:e6:ea: 9e:bf:fe:7d:c7:95:0d:e9:1a:33:a2:9f:54:ce:fe: 3e:91:86:b3:6f:a1:37:bb:18:06:ce:0f:eb:4d:f7: bf:13:d6:0c:36:64:6d:0d:dd:53:7a:1f:b6:47:cf: 59:ff:8d:e1:f8:db:65:95:36:7c:db:f1:94:5b:a9: fb:58:07:5b:d8:ef:d4:8d:f7:e2:68:05:83:40:a1: 04:07:4a:6b:22:87:af:67:a1:6a:95:ae:1a:01:ea: 62:ce:6a:af:1f:a2:7f:3c:ae:5b:03:d8:23:ce:ad: b6:34:d6:a3:1a:8f:63:59:9c:9e:13:37:61:a7:e8: 97:b8:b7:a4:97:5a:4a:4d:34:14:a0:c7:94:dc:27: 04:55:47:ae:04:bd:fb:9f:aa:77:e1:5b:a8:df:cb: 2d:ad:92:c4:4c:ae:91:3e:42:b7:5e:2c:a8:d7:ec: 29:0f:79:72:1d:1f:e4:44:5d:cf:aa:70:13:8a:3e: 49:e5:50:ac:56:6f:b6:2d:62:d5:d5:09:4f:3d:ef: 04:2f:d6:c5:58:38:31:a5:7b:6b:f7:50:bd:a2:2a: 5c:67:a0:ca:8b:34:20:a6:f5:2f:80:8a:de:cb:ba: d9:22:6b:be:74:19:43:b3:2f:d9:ec:87:b3:f1:be: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F0:77:C1:03:BA:8E:D7:86:B3:43:26:A7:B9:63:D8:23:3C:8B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:87:7c:b8:d5:01:71:5f:05:8b:bc:ec:82:21:49:63:50:aa: 0f:b4:e9:c8:c0:0c:62:54:27:81:e1:b8:8d:5b:a2:f7:c6:f1: 0e:fd:2d:53:54:c7:7a:03:9f:2e:73:8a:95:2d:83:7f:ec:1a: ba:d7:b4:26:a4:89:90:00:03:38:de:4c:ef:b4:dc:b5:f3:bd: 3e:58:86:e8:f5:21:e2:a5:71:16:66:9f:68:68:92:f7:11:72: e8:72:b8:5c:1f:3e:fa:79:5b:49:d3:ac:9f:75:7f:f6:df:d8: b2:ad:ba:f5:cb:96:54:00:63:b9:8f:d0:44:ad:d0:ab:f9:60: 76:71:16:93:dc:d6:fd:40:f7:81:76:a3:a1:d8:89:a1:53:6e: 64:61:0f:18:36:fa:95:18:6e:c6:fe:d6:02:9d:e9:fa:4f:38: 6d:df:c4:26:a2:1e:e9:9b:b3:5f:13:3b:14:f8:ba:3d:bc:98: 10:f5:b1:f7:ce:4a:95:68:ff:a8:73:a5:32:8d:5a:ec:32:31: fa:e0:f9:7e:9a:07:5a:58:ba:5d:92:dc:81:cf:b2:5c:43:2e: 3a:17:ec:65:61:fb:28:6a:d5:57:2b:78:fa:c2:19:f8:ea:6b: 94:ed:c0:ce:0e:9f:b4:9c:f5:ae:0c:93:98:2d:4b:da:55:30: d6:8b:ba:6a -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEnRZRcOCiZ+k2M9skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZDU2ODhmNDQtMDkzZS00NGM0LWI2NzUtODQ5ODgzZjZiOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6dnabnWbcX7gssN5uqev/59x5UN6Rozop9U zv4+kYazb6E3uxgGzg/rTfe/E9YMNmRtDd1Teh+2R89Z/43h+NtllTZ82/GUW6n7 WAdb2O/UjffiaAWDQKEEB0prIoevZ6Fqla4aAepizmqvH6J/PK5bA9gjzq22NNaj Go9jWZyeEzdhp+iXuLekl1pKTTQUoMeU3CcEVUeuBL37n6p34Vuo38strZLETK6R PkK3Xiyo1+wpD3lyHR/kRF3PqnATij5J5VCsVm+2LWLV1QlPPe8EL9bFWDgxpXtr 91C9oipcZ6DKizQgpvUvgIrey7rZImu+dBlDsy/Z7Iez8b6pBQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFOPwd8EDuo7XhrNDJqe5Y9gjPIvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvYmQ4OWRhOGItYmQzMi0z M2EyLTgwOTMtMWI1ZjQ0YmM3YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACmHfLjVAXFfBYu87IIhSWNQqg+0 6cjADGJUJ4HhuI1bovfG8Q79LVNUx3oDny5zipUtg3/sGrrXtCakiZAAAzjeTO+0 3LXzvT5Yhuj1IeKlcRZmn2hokvcRcuhyuFwfPvp5W0nTrJ91f/bf2LKtuvXLllQA Y7mP0ESt0Kv5YHZxFpPc1v1A94F2o6HYiaFTbmRhDxg2+pUYbsb+1gKd6fpPOG3f xCaiHumbs18TOxT4uj28mBD1sffOSpVo/6hzpTKNWuwyMfrg+X6aB1pYul2S3IHP slxDLjoX7GVh+yhq1VcrePrCGfjqa5TtwM4On7Sc9a4Mk5gtS9pVMNaLumo= -----END CERTIFICATE-----Generated at Sun Jun 15 19:07:56 2025 by rpki-client