$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa File: 7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa (raw, json) Hash identifier: dXCNaHRGU5YAXWDDWWCxg7OZRfgFKQ4l76WLR0SPe5U= Subject key identifier: 34:3A:41:16:25:80:1B:10:2A:63:B1:C2:C3:D4:3B:22:F3:3B:03:86 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F43285849E7ACC44BE94B51F1B22DDA00 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa Signing time: Mon 19 May 2025 12:33:39 +0000 ROA not before: Mon 19 May 2025 12:33:39 +0000 ROA not after: Sun 17 Aug 2025 12:33:39 +0000 asID: 22709 IP address blocks: 216.237.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ac:c4:4b:e9:4b:51:f1:b2:2d:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: May 19 12:33:39 2025 GMT Not After : Aug 17 12:33:39 2025 GMT Subject: CN=2cf1f143-0155-4a68-ac42-fe064d0c1065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:e9:c6:13:4c:0b:82:6e:a6:ab:98:01:ed: 0d:90:65:c6:e6:b6:1a:16:18:dd:71:7c:04:63:35: ed:c6:e5:72:93:80:6e:3f:69:23:44:9e:66:6d:c1: b0:47:b0:58:16:6a:41:22:04:64:e8:58:d6:24:b1: 52:7f:4c:77:e5:0e:13:bb:91:1c:c2:c3:1a:10:92: 90:76:d9:97:c8:0b:c0:31:5f:ac:0b:03:ce:0b:e9: 1f:c0:e2:be:ec:18:31:3d:b5:b0:a5:ab:a1:8b:48: 24:d6:33:11:20:26:bc:5b:ba:a6:7c:94:1a:c9:a3: 56:41:94:9c:41:7c:03:75:dc:b9:d8:51:a5:86:d2: 7e:94:64:40:a6:b3:88:22:c6:fa:78:26:92:1c:8a: 2f:82:a6:fe:61:b5:c6:cc:20:db:2a:3d:1b:63:ff: 23:a2:6b:e3:c2:ff:35:e9:c4:f8:b2:c9:16:a9:c8: 8f:d5:0f:b4:79:6c:6f:fb:eb:64:6e:f7:60:57:f9: d4:55:7a:a5:d2:0c:57:3d:5f:ec:6d:a0:04:0c:8e: 3a:fb:c1:38:90:a7:36:16:e7:70:75:33:e3:05:e6: 93:46:20:ea:33:e7:9c:5c:66:6e:27:d8:28:1d:4d: df:b1:6e:eb:c4:e8:f6:14:17:6e:29:ef:b0:9c:3d: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3A:41:16:25:80:1B:10:2A:63:B1:C2:C3:D4:3B:22:F3:3B:03:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 216.237.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f9:20:4c:d0:95:3a:f6:22:78:c1:c5:2e:39:c7:a5:a4:6f: 0b:4b:43:92:6e:7c:a6:45:b3:99:36:57:a5:ed:48:64:3e:a4: 62:36:58:34:69:38:d0:70:ef:ee:df:81:ea:ae:8c:19:cd:41: 0d:d9:25:b4:3c:75:00:74:de:00:30:fc:53:ad:c8:bc:5a:c8: 93:42:ce:70:4b:d2:44:cb:01:5d:07:e8:44:b5:ca:3d:2a:43: 61:1f:35:c2:c4:2c:a0:79:8b:f8:c5:dd:f7:38:ff:38:e3:db: 30:e9:2d:0d:2d:29:f7:78:82:53:8d:0d:a8:ce:dc:b8:e0:46: c4:e2:e6:c4:76:59:a8:0c:fa:72:40:21:e8:ae:53:9f:a8:fa: d9:64:e2:af:ab:1c:2c:5d:53:68:0c:82:e0:dc:60:38:a2:91: f2:41:8e:01:4d:9c:e3:7c:b2:66:6e:84:10:16:da:1e:55:ee: f6:30:be:b6:85:1c:d6:db:28:d5:f4:3f:e6:c0:ff:3b:97:09: 7f:9b:e0:c3:8b:5f:33:c4:82:79:1a:5f:b2:e3:e6:be:15:62: 98:9e:8e:9c:94:a8:67:ca:ed:ec:8e:67:3b:ea:98:dc:b7:75: 7e:8c:6b:f9:d1:38:d3:47:46:48:10:5f:55:d1:fe:2f:73:00: 5a:d1:ba:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnrMRL6UtR8bIt2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDUxOTEyMzMzOVoXDTI1MDgxNzEyMzMzOVowLzEtMCsGA1UEAxMk MmNmMWYxNDMtMDE1NS00YTY4LWFjNDItZmUwNjRkMGMxMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjszpxhNMC4JupquYAe0NkGXG5rYaFhjdcXwE YzXtxuVyk4BuP2kjRJ5mbcGwR7BYFmpBIgRk6FjWJLFSf0x35Q4Tu5EcwsMaEJKQ dtmXyAvAMV+sCwPOC+kfwOK+7BgxPbWwpauhi0gk1jMRICa8W7qmfJQayaNWQZSc QXwDddy52FGlhtJ+lGRAprOIIsb6eCaSHIovgqb+YbXGzCDbKj0bY/8jomvjwv81 6cT4sskWqciP1Q+0eWxv++tkbvdgV/nUVXql0gxXPV/sbaAEDI46+8E4kKc2Fudw dTPjBeaTRiDqM+ecXGZuJ9goHU3fsW7rxOj2FBduKe+wnD3urwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ6QRYlgBsQKmOxwsPUOyLzOwOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvN2UwY2JmZjctNzQ4Ny0z ZTdmLTk0NmQtZDFlNzQzNDlmYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2O3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv5IEzQlTr2InjBxS45x6WkbwtLQ5JufKZFs5k2V6XtSGQ+pGI2WDRp ONBw7+7fgequjBnNQQ3ZJbQ8dQB03gAw/FOtyLxayJNCznBL0kTLAV0H6ES1yj0q Q2EfNcLELKB5i/jF3fc4/zjj2zDpLQ0tKfd4glONDajO3LjgRsTi5sR2WagM+nJA IeiuU5+o+tlk4q+rHCxdU2gMguDcYDiikfJBjgFNnON8smZuhBAW2h5V7vYwvraF HNbbKNX0P+bA/zuXCX+b4MOLXzPEgnkaX7Lj5r4VYpiejpyUqGfK7eyOZzvqmNy3 dX6Ma/nRONNHRkgQX1XR/i9zAFrRutg= -----END CERTIFICATE-----Generated at Mon Jun 16 22:46:33 2025 by rpki-client