$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa File: 15302cbf-57f0-373f-96de-03dd65f8b849.roa (raw, json) Hash identifier: XeiwsUuEpAE/kpzsPsAfYzzkXo0MrS9XEdTmO6VBlJM= Subject key identifier: 12:9C:B7:39:06:7B:60:41:68:12:83:3E:7B:CB:88:7D:C9:00:04:8B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A14657C941F784CA463B22680 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 13576 IP address blocks: 216.106.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7c:94:1f:78:4c:a4:63:b2:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b4a065c7-8d82-4784-b5df-904d641e571e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:46:ec:5e:92:9a:0a:bd:a7:28:1c:65:2c: 1b:1e:b2:99:72:2f:b8:43:81:96:00:ce:f5:5f:a0: 22:13:59:68:dd:40:49:39:17:d3:6b:1a:c0:af:c2: 36:94:b7:da:76:81:dd:29:e5:b0:72:65:57:cc:ee: c6:d6:37:4f:8b:3f:04:57:37:ea:b9:4d:67:b8:0a: bc:f9:b9:85:65:bc:f6:8b:c8:7a:ee:75:21:13:fd: 84:2f:37:73:6a:00:23:6f:bb:76:cd:27:8d:ec:b9: 6b:1b:5d:d8:08:1f:5b:9a:dc:e0:11:e6:78:4b:2f: 35:53:b3:0a:0f:4d:5a:3f:ad:16:1e:62:12:14:c0: e2:71:3a:dd:51:67:43:4b:33:6c:d3:bc:4a:10:89: 6f:70:5e:a5:d7:f8:62:33:35:91:1e:a2:ed:4c:7b: 46:88:92:1f:3e:66:9d:03:f9:b6:30:fb:63:67:bf: 06:0d:71:09:cf:5e:e4:10:5d:c2:be:a6:ea:60:a5: 00:6f:96:35:99:4a:b3:de:56:64:c3:f0:10:55:47: 98:85:97:d7:cb:ca:af:54:b3:ca:c9:68:1c:95:a4: 14:7b:99:55:66:ae:ba:1e:9d:83:2a:9b:38:ad:a1: 1d:10:93:fd:0a:ad:25:0a:9f:2d:2c:2e:9e:37:48: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9C:B7:39:06:7B:60:41:68:12:83:3E:7B:CB:88:7D:C9:00:04:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:df:2e:dd:af:fa:ff:8c:69:b7:3c:db:45:ab:df:d8:9a:67: 45:29:f2:77:58:3d:76:d8:8e:c3:a1:d7:c0:ea:8c:75:32:d2: 51:40:e5:92:03:84:14:1c:d1:f6:b8:fa:19:01:c6:bd:1f:f0: be:e0:9e:06:ed:b6:12:a8:53:76:c1:fe:26:d2:2d:87:8e:d8: 21:f4:5a:8a:02:96:34:f8:65:05:f9:0d:fa:c0:87:f9:e6:83: 2c:08:d1:12:0c:ba:9a:86:9c:2b:d6:c3:26:d8:a7:15:1f:09: 9d:dc:64:33:67:83:b9:3f:d5:a3:53:8e:82:9f:e2:c9:2c:d4: 8f:a6:b0:05:01:0b:b3:24:d3:9f:9c:bf:c6:e6:7e:d1:f4:1b: 00:76:f0:99:44:19:15:3b:12:b6:80:92:04:8b:ef:17:86:6b: 4b:1a:08:74:2d:ea:47:bf:de:16:42:90:00:52:38:c2:69:3d: 00:c5:b8:2e:91:e8:ea:bb:98:59:97:5c:fa:3a:33:02:3b:c5: 31:3c:b0:02:53:fd:b0:80:d7:c7:90:99:4e:db:6a:c6:76:99: 9e:32:56:47:44:b8:6f:c4:cc:2c:2f:db:c4:f1:d1:6a:fd:90: ac:6e:8b:7a:c8:c2:5f:02:fb:3e:7b:12:b6:86:79:7e:0a:ca: d0:84:fc:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXyUH3hMpGOyJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YjRhMDY1YzctOGQ4Mi00Nzg0LWI1ZGYtOTA0ZDY0MWU1NzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp1G7F6Smgq9pygcZSwbHrKZci+4Q4GWAM71 X6AiE1lo3UBJORfTaxrAr8I2lLfadoHdKeWwcmVXzO7G1jdPiz8EVzfquU1nuAq8 +bmFZbz2i8h67nUhE/2ELzdzagAjb7t2zSeN7LlrG13YCB9bmtzgEeZ4Sy81U7MK D01aP60WHmISFMDicTrdUWdDSzNs07xKEIlvcF6l1/hiMzWRHqLtTHtGiJIfPmad A/m2MPtjZ78GDXEJz17kEF3CvqbqYKUAb5Y1mUqz3lZkw/AQVUeYhZfXy8qvVLPK yWgclaQUe5lVZq66Hp2DKps4raEdEJP9Cq0lCp8tLC6eN0gFUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKctzkGe2BBaBKDPnvLiH3JAASLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTUzMDJjYmYtNTdmMC0z NzNmLTk2ZGUtMDNkZDY1ZjhiODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPfLt2v+v+Mabc820Wr39iaZ0Up8ndYPXbYjsOh18DqjHUy0lFA5ZID hBQc0fa4+hkBxr0f8L7gngbtthKoU3bB/ibSLYeO2CH0WooCljT4ZQX5DfrAh/nm gywI0RIMupqGnCvWwybYpxUfCZ3cZDNng7k/1aNTjoKf4sks1I+msAUBC7Mk05+c v8bmftH0GwB28JlEGRU7EraAkgSL7xeGa0saCHQt6ke/3hZCkABSOMJpPQDFuC6R 6Oq7mFmXXPo6MwI7xTE8sAJT/bCA18eQmU7basZ2mZ4yVkdEuG/EzCwv28Tx0Wr9 kKxui3rIwl8C+z57EraGeX4KytCE/Kw= -----END CERTIFICATE-----Generated at Mon Jun 16 11:00:04 2025 by rpki-client