$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa File: 3cffd828-cce9-3c73-a852-0976eaacdfbb.roa (raw, json) Hash identifier: RN+f5p8AE0/OkuaYbc9j0twKZloW5kE4GguQqgHISiA= Subject key identifier: 35:26:8F:03:01:97:2F:6B:F3:5A:F6:6A:70:2A:BE:C9:B2:D8:E1:44 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A14656F084C496655A1041980 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 13576 IP address blocks: 216.106.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:6f:08:4c:49:66:55:a1:04:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=06c9200d-722a-466a-b0d7-3733ed53e6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:4e:0b:ff:10:12:aa:ad:0e:7f:40:2a:dc: ca:bc:99:e8:2f:3f:37:38:c7:c9:f4:c3:85:bb:fc: ac:21:1a:27:44:ed:cc:6d:84:57:d8:ec:8b:f8:5a: 03:a9:0f:f6:94:2c:68:7d:44:43:a5:ad:4a:be:14: 1d:53:0d:4a:8c:1a:17:cf:e1:fe:ca:7a:9a:e0:08: cf:29:88:bf:13:6a:87:d4:7f:89:41:72:d6:40:96: ae:88:a4:b5:25:53:ef:0a:a8:18:96:35:d6:fb:03: 08:8f:4a:e4:3d:b6:21:65:8a:04:1d:9c:4f:cf:85: 2b:11:2c:fa:d9:79:ab:59:e4:94:95:a9:1b:8a:b2: 3b:0e:da:db:17:73:2c:78:8a:1b:14:8e:17:fb:a0: db:cf:52:97:ec:0c:ad:1e:37:83:b8:06:46:66:63: b1:09:4d:7f:27:c9:bb:be:18:16:df:02:42:19:e4: 18:00:e0:85:a6:ba:1b:cb:a1:6f:09:78:66:df:b9: 0d:79:ae:08:64:ae:ac:87:81:2b:20:70:9c:37:fd: e5:fa:49:63:17:b7:ca:4c:03:9c:df:56:0e:02:64: 9f:62:ea:38:e5:60:f4:80:1a:ad:ac:ed:a4:24:34: 48:7d:30:37:1e:6e:88:fb:9e:b8:b6:4f:e0:43:4b: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:26:8F:03:01:97:2F:6B:F3:5A:F6:6A:70:2A:BE:C9:B2:D8:E1:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:90:9f:73:ac:73:49:73:21:f4:c4:d8:8c:52:8d:2c:19:25: 2a:f8:53:5d:bc:17:1f:0d:d6:7d:11:47:cc:6b:6e:55:f9:13: 3a:38:72:1a:bc:82:14:4a:e0:d2:df:31:94:f2:3c:db:ba:fd: f7:08:09:ba:a0:3a:2c:94:e0:1d:8e:52:dd:66:de:0e:ae:52: 9e:cb:04:34:2f:46:be:e9:70:10:25:f1:f3:24:04:37:10:a4: cf:03:1b:26:05:11:96:e7:7f:b0:53:5f:82:e5:ff:3f:51:9d: c3:43:e4:3a:62:c9:fb:05:83:65:bd:59:7d:02:62:da:ac:3b: 79:57:ce:01:0a:55:cb:51:c1:e4:76:f0:46:3e:ca:1d:1d:c6: b6:7d:cf:89:8a:f0:4f:3e:0e:ec:fb:6c:ca:3b:e2:cd:10:8d: cb:1b:dc:98:6c:3f:bf:fa:0d:44:24:04:68:c9:e9:88:19:16: 92:f2:d2:a7:b0:ba:2a:c4:b8:d0:51:b9:7c:c4:59:83:fe:7a: 51:e9:52:00:0a:9c:69:06:7e:2e:e4:ab:23:34:79:ae:8e:6f: 5e:42:27:1c:e1:d9:64:ad:9a:8f:5a:10:4b:c2:c6:2f:51:a9: ca:99:2a:1b:f2:20:90:a7:36:8c:ea:e4:21:75:e4:a2:89:17: 43:e4:7f:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZW8ITElmVaEEGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MDZjOTIwMGQtNzIyYS00NjZhLWIwZDctMzczM2VkNTNlNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW1OC/8QEqqtDn9AKtzKvJnoLz83OMfJ9MOF u/ysIRonRO3MbYRX2OyL+FoDqQ/2lCxofURDpa1KvhQdUw1KjBoXz+H+ynqa4AjP KYi/E2qH1H+JQXLWQJauiKS1JVPvCqgYljXW+wMIj0rkPbYhZYoEHZxPz4UrESz6 2XmrWeSUlakbirI7DtrbF3MseIobFI4X+6Dbz1KX7AytHjeDuAZGZmOxCU1/J8m7 vhgW3wJCGeQYAOCFproby6FvCXhm37kNea4IZK6sh4ErIHCcN/3l+kljF7fKTAOc 31YOAmSfYuo45WD0gBqtrO2kJDRIfTA3Hm6I+564tk/gQ0tCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUmjwMBly9r81r2anAqvsmy2OFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2NmZmQ4MjgtY2NlOS0z YzczLWE4NTItMDk3NmVhYWNkZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqQn3Osc0lzIfTE2IxSjSwZJSr4U128Fx8N1n0RR8xrblX5Ezo4chq8 ghRK4NLfMZTyPNu6/fcICbqgOiyU4B2OUt1m3g6uUp7LBDQvRr7pcBAl8fMkBDcQ pM8DGyYFEZbnf7BTX4Ll/z9RncND5DpiyfsFg2W9WX0CYtqsO3lXzgEKVctRweR2 8EY+yh0dxrZ9z4mK8E8+Duz7bMo74s0Qjcsb3JhsP7/6DUQkBGjJ6YgZFpLy0qew uirEuNBRuXzEWYP+elHpUgAKnGkGfi7kqyM0ea6Ob15CJxzh2WStmo9aEEvCxi9R qcqZKhvyIJCnNozq5CF15KKJF0Pkf2A= -----END CERTIFICATE-----Generated at Sun Jun 15 13:42:56 2025 by rpki-client