$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/1c5b8235-5fdf-3984-ab2c-79dc3596d7ec.roa File: 1c5b8235-5fdf-3984-ab2c-79dc3596d7ec.roa (raw, json) Hash identifier: 5jHuAY4YC/r+61I2+cb+5j7z9bHIMXV28PY6h/YGTTU= Subject key identifier: CE:B2:D7:4E:94:8B:58:40:E3:5B:9D:6A:68:A4:5E:29:EC:0A:97:14 Certificate issuer: /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Certificate serial: 010D0C9F4328584A24355BFBA1C74B9C2B6BD250 Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/1c5b8235-5fdf-3984-ab2c-79dc3596d7ec.roa Signing time: Tue 10 Jun 2025 04:57:23 +0000 ROA not before: Tue 10 Jun 2025 04:57:23 +0000 ROA not after: Mon 08 Sep 2025 04:57:23 +0000 asID: 22295 IP address blocks: 208.84.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:24:35:5b:fb:a1:c7:4b:9c:2b:6b:d2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Validity Not Before: Jun 10 04:57:23 2025 GMT Not After : Sep 8 04:57:23 2025 GMT Subject: CN=d54ca570-910b-40f3-9547-ce8976df3598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:4f:dd:05:b4:da:ef:29:4d:b5:87:51:05: 56:ad:4b:c7:bc:df:6e:c3:17:c9:90:e8:30:50:8b: 16:21:d7:e9:3c:20:3a:a5:71:db:9d:54:ce:fa:f2: 8f:27:c2:7f:e5:50:ce:9a:fe:39:02:0e:d1:37:3f: b4:4c:c3:5b:08:98:f6:4b:95:60:e9:d4:5c:64:ac: 17:50:83:ef:25:b6:76:65:92:0e:58:92:ee:3a:7c: 2a:0d:97:4c:6f:78:e7:17:34:bd:81:dd:62:df:73: 3a:b3:7b:bf:aa:9d:25:27:de:12:d8:cd:e5:03:02: 1b:e5:15:0a:da:0f:db:3e:50:f2:99:8b:5c:d1:b3: 86:d3:dd:cf:a2:10:15:20:e9:60:92:d7:07:14:6d: 9c:eb:d0:e3:10:6c:5a:94:06:85:7a:eb:fd:d8:ec: 2f:d0:ac:fd:d0:1c:a5:39:d8:dc:ab:91:eb:f1:4b: 21:cf:0f:8c:6f:ae:ee:bd:a9:30:d9:52:eb:0e:10: 99:b0:51:fa:66:6d:a5:87:2b:67:42:49:66:a0:5f: 80:bb:43:e0:95:55:66:e0:dc:c1:fb:62:1a:1d:8b: 15:56:09:39:b5:18:ae:1a:90:ca:90:c4:81:07:be: 5e:55:e4:1b:f8:58:98:4a:98:ac:a9:f2:e9:d0:3b: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B2:D7:4E:94:8B:58:40:E3:5B:9D:6A:68:A4:5E:29:EC:0A:97:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/1c5b8235-5fdf-3984-ab2c-79dc3596d7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl X509v3 Authority Key Identifier: keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer sbgp-ipAddrBlock: critical IPv4: 208.84.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f0:f8:c7:fd:61:79:54:d5:5d:db:ec:d2:29:c6:82:b7:e7: b4:98:dc:cc:31:d8:83:9a:d3:c2:bb:0b:52:4d:af:53:c1:3d: e7:a3:4d:c3:d2:36:25:09:5d:31:6b:a1:24:b0:6f:67:71:34: d2:cf:6d:6b:72:01:91:13:05:00:81:a3:05:87:cc:7c:e9:6f: 68:4c:bd:e4:06:60:24:d7:ea:03:c3:f0:db:f4:f8:35:1d:77: 50:58:d2:70:f3:89:72:fb:07:a4:31:48:32:93:c3:50:27:63: e1:26:d2:c3:7a:55:42:8d:83:75:30:e2:90:97:8b:e1:5f:e4: c1:1d:26:bc:ef:3d:98:f9:71:e8:c8:56:4b:06:7b:47:6e:74: 0e:c4:e4:4c:8b:cd:d7:40:7c:05:53:34:4c:5d:3c:13:f6:75: da:31:b2:95:91:9b:be:2c:07:76:60:db:1e:09:35:b2:6f:aa: 51:e3:87:21:84:ba:b6:7e:c5:d6:aa:86:66:cf:6d:90:09:5a: 84:ca:83:48:3d:c2:47:21:6d:e1:e9:f4:6d:2d:e5:d4:99:7b: 61:58:3c:63:76:f6:41:52:7a:43:0c:19:82:8f:f9:9f:4a:dc: 8b:9a:1f:d5:00:ed:5e:cd:ea:89:e7:b4:b9:33:ce:cb:ca:7b: 3a:d8:c5:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEokNVv7ocdLnCtr0lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2Zl MDRkMB4XDTI1MDYxMDA0NTcyM1oXDTI1MDkwODA0NTcyM1owLzEtMCsGA1UEAxMk ZDU0Y2E1NzAtOTEwYi00MGYzLTk1NDctY2U4OTc2ZGYzNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBP3QW02u8pTbWHUQVWrUvHvN9uwxfJkOgw UIsWIdfpPCA6pXHbnVTO+vKPJ8J/5VDOmv45Ag7RNz+0TMNbCJj2S5Vg6dRcZKwX UIPvJbZ2ZZIOWJLuOnwqDZdMb3jnFzS9gd1i33M6s3u/qp0lJ94S2M3lAwIb5RUK 2g/bPlDymYtc0bOG093PohAVIOlgktcHFG2c69DjEGxalAaFeuv92Owv0Kz90Byl Odjcq5Hr8Ushzw+Mb67uvakw2VLrDhCZsFH6Zm2lhytnQklmoF+Au0PglVVm4NzB +2IaHYsVVgk5tRiuGpDKkMSBB75eVeQb+FiYSpisqfLp0DvL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6y106Ui1hA41udamikXinsCpcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3 YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvMWM1YjgyMzUtNWZkZi0z OTg0LWFiMmMtNzlkYzM1OTZkN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmYzN2JmNjgtNjdlNy00ZTY3LWEw OTMtYzg4YTNkN2ZlMDRkLzZmMzdiZjY4LTY3ZTctNGU2Ny1hMDkzLWM4OGEzZDdm ZTA0ZC5jcmwwHwYDVR0jBBgwFoAUKE/PkpbIsL6mmdN/BrN+mjnqi7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhh M2Q3ZmUwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPw+Mf9YXlU1V3b7NIpxoK357SY3Mwx2IOa08K7C1JNr1PBPeejTcPS NiUJXTFroSSwb2dxNNLPbWtyAZETBQCBowWHzHzpb2hMveQGYCTX6gPD8Nv0+DUd d1BY0nDziXL7B6QxSDKTw1AnY+Em0sN6VUKNg3Uw4pCXi+Ff5MEdJrzvPZj5cejI VksGe0dudA7E5EyLzddAfAVTNExdPBP2ddoxspWRm74sB3Zg2x4JNbJvqlHjhyGE urZ+xdaqhmbPbZAJWoTKg0g9wkchbeHp9G0t5dSZe2FYPGN29kFSekMMGYKP+Z9K 3IuaH9UA7V7N6onntLkzzsvKezrYxSk= -----END CERTIFICATE-----Generated at Mon Jun 16 21:12:41 2025 by rpki-client