$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa File: bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa (raw, json) Hash identifier: DeaoFE+zccBwZP6Z4mD1zqQ/wEBV0J0IpL+7EiPFZRc= Subject key identifier: 5B:EB:E9:35:DC:D6:9D:77:22:3E:07:D0:4E:66:7A:02:BA:34:BE:FB Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A31B5637C30A2B0DADD71E880 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 21947 IP address blocks: 216.47.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:63:7c:30:a2:b0:da:dd:71:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=c71c273b-b26d-4387-8716-142463ed2e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:8b:05:ec:b0:56:5e:80:24:b2:80:be:0f: 44:36:b8:35:75:91:10:be:f9:9e:26:ba:c3:cf:12: 4c:5e:8d:92:0b:41:1f:91:7c:fd:3e:35:9e:f5:d4: 64:04:d9:96:35:dd:e8:f9:84:98:17:59:c4:f6:d6: c1:2f:a8:8a:15:d3:15:72:b5:0d:e7:a6:e8:b2:c7: 4d:22:2c:11:5c:d9:46:4a:af:3f:74:c6:53:5b:d0: ab:5b:4d:65:56:7b:63:54:50:68:c3:fa:bb:e6:dd: 19:b5:dc:d9:e9:40:06:c4:5f:ed:c0:ec:9c:2c:87: 2d:34:a7:6f:62:c4:e6:2f:f3:22:d9:97:62:d0:6f: 52:17:86:ff:3b:a3:c5:b5:c7:21:f8:ae:72:74:94: 7f:79:00:75:2a:32:23:ce:42:56:02:03:a1:44:67: 12:4d:82:bc:6c:35:5d:6b:80:23:d5:0a:3c:2e:ae: 28:06:ec:1d:2c:dd:c0:3f:03:2a:c0:f8:52:ab:32: 6a:9a:36:3f:ad:f1:c6:26:15:3b:ec:81:49:1b:93: a4:62:a3:09:1a:7a:01:17:62:ef:94:92:0b:9f:70: 22:3c:f1:02:65:ca:7a:b5:d7:f2:53:a6:24:05:d2: 6f:03:0d:69:a6:79:f7:d0:ce:c8:f8:a6:3a:84:45: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EB:E9:35:DC:D6:9D:77:22:3E:07:D0:4E:66:7A:02:BA:34:BE:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 216.47.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c0:5e:dc:d7:68:4a:f5:26:67:0a:c3:e8:87:2a:cb:bf:ba: 45:c7:17:8b:a9:e8:40:6d:15:0f:83:e7:ee:ac:69:87:06:20: 2b:bd:59:a7:d7:0b:98:75:e5:26:8e:72:9c:69:df:1e:a5:30: c8:75:d2:6b:5b:95:57:7b:e6:63:76:e6:99:c2:0e:b1:19:62: 93:63:20:4f:5f:24:20:cd:2d:c5:71:a7:85:84:ad:0b:f4:17: fb:8f:66:58:e2:03:37:d6:11:39:e4:40:8a:66:f6:d3:47:e4: 6f:39:eb:7a:d7:31:5c:fe:2d:69:53:65:8a:b5:80:31:b9:b1: 76:f0:19:f8:7a:d8:1d:c8:20:32:c1:58:28:d1:9a:46:37:6b: ff:55:af:2c:b0:7a:c8:d3:7b:59:c0:14:5d:7a:98:a9:84:ad: 19:81:7b:99:61:16:8b:ed:ad:ad:75:a6:49:39:ae:e8:67:bc: 5d:ca:77:3c:e1:8a:89:a6:7d:29:83:36:60:3b:b8:cb:8f:6a: 98:44:e9:57:9c:3e:87:e2:b1:f5:19:15:a0:28:d7:aa:32:5c: 1f:65:85:53:3b:5b:e7:eb:c6:b1:7d:0d:43:b0:0f:32:75:95: c8:8a:de:a9:33:f1:e0:1e:29:3c:cb:23:50:22:98:d2:a0:14: fb:8a:5a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWN8MKKw2t1x6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk YzcxYzI3M2ItYjI2ZC00Mzg3LTg3MTYtMTQyNDYzZWQyZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEqLBeywVl6AJLKAvg9ENrg1dZEQvvmeJrrD zxJMXo2SC0EfkXz9PjWe9dRkBNmWNd3o+YSYF1nE9tbBL6iKFdMVcrUN56bossdN IiwRXNlGSq8/dMZTW9CrW01lVntjVFBow/q75t0ZtdzZ6UAGxF/twOycLIctNKdv YsTmL/Mi2Zdi0G9SF4b/O6PFtcch+K5ydJR/eQB1KjIjzkJWAgOhRGcSTYK8bDVd a4Aj1Qo8Lq4oBuwdLN3APwMqwPhSqzJqmjY/rfHGJhU77IFJG5OkYqMJGnoBF2Lv lJILn3AiPPECZcp6tdfyU6YkBdJvAw1ppnn30M7I+KY6hEX4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvr6TXc1p13Ij4H0E5megK6NL77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYmNmNDgzN2ItNzA1Zi0z YWUwLWE5YTMtYzhjZTQ3ODgyOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2C8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfAXtzXaEr1JmcKw+iHKsu/ukXHF4up6EBtFQ+D5+6saYcGICu9WafX C5h15SaOcpxp3x6lMMh10mtblVd75mN25pnCDrEZYpNjIE9fJCDNLcVxp4WErQv0 F/uPZljiAzfWETnkQIpm9tNH5G8563rXMVz+LWlTZYq1gDG5sXbwGfh62B3IIDLB WCjRmkY3a/9VryywesjTe1nAFF16mKmErRmBe5lhFovtra11pkk5ruhnvF3Kdzzh iommfSmDNmA7uMuPaphE6VecPofisfUZFaAo16oyXB9lhVM7W+frxrF9DUOwDzJ1 lciK3qkz8eAeKTzLI1AimNKgFPuKWnQ= -----END CERTIFICATE-----Generated at Mon Jun 16 21:24:09 2025 by rpki-client