$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa File: 03d609bb-e0d2-3ffa-8996-b2eac543f536.roa (raw, json) Hash identifier: lEvF7C1adYMknGehwJmQJkUUuTGmEDy6bycNKGbjLQY= Subject key identifier: FF:89:BB:75:73:56:95:F5:28:3A:78:A7:22:39:85:64:4E:04:2A:08 Certificate issuer: /CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Certificate serial: 010D0C9F4328584A25E2FAE4339DAC01838CBE80 Authority key identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa Signing time: Fri 25 Apr 2025 20:27:04 +0000 ROA not before: Fri 25 Apr 2025 20:27:04 +0000 ROA not after: Thu 24 Jul 2025 20:27:04 +0000 asID: 30417 IP address blocks: 172.81.4.0/22 maxlen: 24 192.64.196.0/23 maxlen: 24 199.85.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:e2:fa:e4:33:9d:ac:01:83:8c:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Validity Not Before: Apr 25 20:27:04 2025 GMT Not After : Jul 24 20:27:04 2025 GMT Subject: CN=dee9cdb7-31d8-45fc-bc12-08cbf992266d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:4c:8f:6e:77:b9:38:50:0f:16:8d:21:41: c2:a4:c7:c9:29:1d:fa:cd:77:c5:11:74:b0:a0:14: ec:9f:58:e4:05:15:98:02:e9:6f:04:d5:c3:95:db: 50:f8:e8:65:07:fd:0f:cd:69:04:a9:c2:c7:6c:90: 9d:6e:59:62:76:cc:8d:d4:e9:58:a3:9f:68:9e:eb: d5:22:51:e8:3a:7b:14:73:44:bd:e8:53:73:aa:23: f5:55:0b:ad:f3:da:b4:3a:49:a8:4a:a0:67:3a:d1: 76:5b:65:04:12:97:62:1a:a8:0d:8c:7f:6b:4c:ca: b1:1c:87:d6:74:c8:13:a8:77:28:e8:52:58:9b:10: 63:00:c6:30:65:00:80:57:35:74:66:42:43:c7:2b: cf:ef:5f:0b:5c:39:cf:05:6a:73:1e:03:c4:79:d1: ba:d9:00:21:43:56:e5:21:25:13:54:46:4e:d3:7a: 4a:3a:5b:aa:4e:5d:00:02:fb:c8:7a:70:18:c8:cc: ca:cb:7b:ce:a0:50:5a:c6:66:21:f3:0e:2f:9a:d1: c1:07:1b:29:ce:d6:c7:a0:7f:42:ad:99:49:6c:1b: ca:23:c1:b2:da:01:c5:62:32:d8:c9:a0:70:47:81: c8:ee:4d:63:85:f7:2a:2a:ec:fc:a1:3e:1e:34:92: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:89:BB:75:73:56:95:F5:28:3A:78:A7:22:39:85:64:4E:04:2A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl X509v3 Authority Key Identifier: keyid:C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer sbgp-ipAddrBlock: critical IPv4: 172.81.4.0/22 192.64.196.0/23 199.85.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d7:a4:05:3f:52:3b:50:2e:d4:4f:6b:69:e9:33:52:05:0a: 09:50:53:b6:9e:5f:2c:9e:7a:06:93:c2:37:de:43:e2:ec:e1: 11:03:58:49:df:57:27:92:a3:8d:ef:41:33:5e:fa:f4:a6:53: ca:e9:bd:ee:32:f9:5b:4b:c8:35:43:a5:2e:32:08:bc:61:33: 1e:96:bc:85:da:64:37:9a:9f:35:45:9d:12:43:82:5a:48:8e: e5:18:d0:3d:92:5b:ed:1a:92:e1:77:60:30:61:82:be:f4:fa: 23:bf:d5:25:99:6b:21:59:3e:8d:b2:58:b6:32:79:54:28:db: cb:76:c8:25:76:30:f0:a0:fd:9a:ce:f8:28:80:f1:0d:5d:9c: 19:b6:71:53:b1:d9:97:a7:e3:ee:1e:7f:68:43:f1:66:8a:75: d9:01:f4:3d:d5:89:9e:84:45:1a:b0:d0:a3:e2:51:82:6e:14: 00:53:e2:fa:01:5a:0b:33:6d:61:d7:4c:c6:ac:70:0c:f8:33: a1:c4:5b:55:b7:55:cd:f3:ea:ca:27:c1:4a:61:64:c5:44:4f: 56:18:1a:36:76:68:f4:94:25:af:e9:d5:87:1f:15:e3:d7:f0: 9e:8c:a2:28:64:d9:20:4c:ab:2f:d9:3e:f7:2f:c2:27:43:ba: 22:db:4f:93 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEol4vrkM52sAYOMvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkZjcyYTUtZjBkYS00YzY0LTk1M2EtMTVhNjJkNWNh M2IwMB4XDTI1MDQyNTIwMjcwNFoXDTI1MDcyNDIwMjcwNFowLzEtMCsGA1UEAxMk ZGVlOWNkYjctMzFkOC00NWZjLWJjMTItMDhjYmY5OTIyNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ5Mj253uThQDxaNIUHCpMfJKR36zXfFEXSw oBTsn1jkBRWYAulvBNXDldtQ+OhlB/0PzWkEqcLHbJCdbllidsyN1OlYo59onuvV IlHoOnsUc0S96FNzqiP1VQut89q0OkmoSqBnOtF2W2UEEpdiGqgNjH9rTMqxHIfW dMgTqHco6FJYmxBjAMYwZQCAVzV0ZkJDxyvP718LXDnPBWpzHgPEedG62QAhQ1bl ISUTVEZO03pKOluqTl0AAvvIenAYyMzKy3vOoFBaxmYh8w4vmtHBBxspztbHoH9C rZlJbBvKI8Gy2gHFYjLYyaBwR4HI7k1jhfcqKuz8oT4eNJIBzQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFP+Ju3VzVpX1KDp4pyI5hWROBCoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NWRm NzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1Y2EzYjAvMDNkNjA5YmItZTBkMi0z ZmZhLTg5OTYtYjJlYWM1NDNmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjVkZjcyYTUtZjBkYS00YzY0LTk1 M2EtMTVhNjJkNWNhM2IwLzY1ZGY3MmE1LWYwZGEtNGM2NC05NTNhLTE1YTYyZDVj YTNiMC5jcmwwHwYDVR0jBBgwFoAUw/ftawHjYye8m7oJ+guJtIPPlyIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2 MmQ1Y2EzYjAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCrFEEAwQB wEDEAwQAx1X1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACfXpAU/UjtQLtRPa2npM1IFCglQU7aeXyyeegaT wjfeQ+Ls4REDWEnfVyeSo43vQTNe+vSmU8rpve4y+VtLyDVDpS4yCLxhMx6WvIXa ZDeanzVFnRJDglpIjuUY0D2SW+0akuF3YDBhgr70+iO/1SWZayFZPo2yWLYyeVQo 28t2yCV2MPCg/ZrO+CiA8Q1dnBm2cVOx2Zen4+4ef2hD8WaKddkB9D3ViZ6ERRqw 0KPiUYJuFABT4voBWgszbWHXTMascAz4M6HEW1W3Vc3z6sonwUphZMVET1YYGjZ2 aPSUJa/p1YcfFePX8J6Moihk2SBMqy/ZPvcvwidDuiLbT5M= -----END CERTIFICATE-----Generated at Thu Jun 19 09:13:35 2025 by rpki-client