$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: MpsYApa3J+teeM58D+lnnxTGQC4LfjyYlhX7dBkHZ94= Subject key identifier: FA:62:15:DF:95:B7:E4:2C:68:60:89:F1:CE:33:15:E4:EC:A5:53:57 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F43285849FCAA75894439BAB52EEF5ED4 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:75:89:44:39:ba:b5:2e:ef:5e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=10eb3d26-b50b-4444-a2c8-1535c12cc8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:21:6a:3b:1f:d5:7e:c3:0a:1d:4a:05:44:6d: 66:c8:a0:9e:21:0b:a4:e4:9d:2e:65:ed:5e:94:14: 85:03:d8:33:28:dd:e6:cd:f3:eb:4b:b6:a9:9b:91: 72:79:bb:43:fd:c2:d4:62:be:64:9c:ff:68:43:8c: 96:a8:a1:a0:6c:d1:4e:2b:8c:83:d8:da:d7:f5:80: f7:3e:b5:ad:ae:e0:a5:62:ba:26:11:70:8c:32:9b: 43:2e:3a:a4:e1:42:d6:fe:ba:b0:be:37:4d:96:cd: 83:8b:4f:10:a9:f9:a9:5e:6a:d2:f7:7b:e9:e4:17: 99:a5:48:1a:b6:1f:c0:e6:f0:fa:03:d2:06:de:7f: df:d9:ec:9a:c6:c5:0f:e7:71:89:38:8e:fb:7e:af: 29:08:f6:f3:ec:e4:bd:28:05:0a:47:99:fd:22:a7: 1b:ba:86:df:51:4a:a7:de:71:18:84:fa:5e:64:03: 9d:49:40:ae:b2:80:0f:bb:4b:63:1c:b2:44:e5:a4: 92:e0:a3:82:e1:ba:b0:ef:1b:b7:18:82:81:8b:cb: 5d:7b:6f:20:4a:8a:1c:da:f7:1a:16:83:48:f0:a9: 9b:14:78:ce:94:8c:a4:16:4c:df:7f:53:b7:dd:ac: f3:87:e7:70:1c:0d:9e:99:be:8f:7a:00:94:ba:02: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:62:15:DF:95:B7:E4:2C:68:60:89:F1:CE:33:15:E4:EC:A5:53:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:35:2e:3d:a7:ee:e9:18:71:b9:6b:58:de:3b:3b:06:50:c5: 3e:f6:92:27:35:09:5f:ee:25:c2:d5:c5:cf:24:3b:5d:9c:34: 64:ce:a3:8c:35:35:d5:58:db:60:3d:91:02:8d:20:52:67:4e: cd:77:d7:8b:62:30:fc:72:a5:d4:ec:b9:1c:c1:2b:5d:1c:bc: 3b:c5:b3:11:8d:1d:96:86:82:c0:31:02:9e:45:95:06:44:0a: cc:15:63:c7:18:cc:0b:30:c6:6e:f5:9f:3b:c4:12:57:5a:3e: 72:05:02:60:9d:b3:9d:a0:3f:c8:30:d6:be:e6:c3:bb:28:87: dc:db:f9:47:58:22:c1:91:2a:0a:9c:82:36:ec:1f:35:3b:ea: 54:04:f6:91:40:e7:77:40:cd:a2:97:16:68:89:1e:7e:6c:3f: 6c:46:fd:5f:93:20:ee:63:a7:22:65:a1:00:68:09:41:ce:ab: 50:df:9e:25:40:f0:96:0d:fc:e6:07:44:db:41:a5:c3:78:d7: 48:db:a7:2e:d0:cd:40:24:03:c0:f6:47:cc:38:da:3a:3b:57: 22:b5:be:ef:63:d3:8d:3c:b5:a3:b4:2a:a5:6e:e7:19:21:d4: 55:0a:3d:cb:1c:94:9d:8a:8b:a9:56:ed:b0:83:99:47:f7:64: 19:a3:14:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnWJRDm6tS7vXtQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MTBlYjNkMjYtYjUwYi00NDQ0LWEyYzgtMTUzNWMxMmNjOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iFqOx/VfsMKHUoFRG1myKCeIQuk5J0uZe1e lBSFA9gzKN3mzfPrS7apm5FyebtD/cLUYr5knP9oQ4yWqKGgbNFOK4yD2NrX9YD3 PrWtruClYromEXCMMptDLjqk4ULW/rqwvjdNls2Di08QqfmpXmrS93vp5BeZpUga th/A5vD6A9IG3n/f2eyaxsUP53GJOI77fq8pCPbz7OS9KAUKR5n9IqcbuobfUUqn 3nEYhPpeZAOdSUCusoAPu0tjHLJE5aSS4KOC4bqw7xu3GIKBi8tde28gSooc2vca FoNI8KmbFHjOlIykFkzff1O33azzh+dwHA2emb6PegCUugLNnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpiFd+Vt+QsaGCJ8c4zFeTspVNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA81Lj2n7ukYcblrWN47OwZQxT72kic1CV/uJcLVxc8kO12cNGTOo4w1 NdVY22A9kQKNIFJnTs1314tiMPxypdTsuRzBK10cvDvFsxGNHZaGgsAxAp5FlQZE CswVY8cYzAswxm71nzvEEldaPnIFAmCds52gP8gw1r7mw7soh9zb+UdYIsGRKgqc gjbsHzU76lQE9pFA53dAzaKXFmiJHn5sP2xG/V+TIO5jpyJloQBoCUHOq1DfniVA 8JYN/OYHRNtBpcN410jbpy7QzUAkA8D2R8w42jo7VyK1vu9j0408taO0KqVu5xkh 1FUKPcsclJ2Ki6lW7bCDmUf3ZBmjFHA= -----END CERTIFICATE-----Generated at Mon Jun 16 13:14:45 2025 by rpki-client