$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa File: 4014fbc1-d2d1-376f-b669-c371f55fd20b.roa (raw, json) Hash identifier: HtN6l4+SsbSl975NDjOzZ4yhm1pfRb4scFXqbTLpLsA= Subject key identifier: 8C:AA:62:F5:D8:BC:36:1E:FE:43:F9:8A:C4:06:46:4F:5A:26:AB:AF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A17300318C2B436FF35D4DA68 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 399439 IP address blocks: 216.249.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:03:18:c2:b4:36:ff:35:d4:da:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=50ddc8a2-0153-4de4-b5ad-469d6fb84e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:b4:ae:61:fb:6e:5c:bf:a9:a7:4c:40:9b: 95:2d:51:61:a2:a6:5b:df:98:63:83:c1:6f:d2:fe: 32:0d:6d:f1:ee:bc:18:8b:54:99:fc:5f:3b:c4:50: 21:02:28:36:ef:7d:34:95:af:20:37:09:2b:ff:fd: df:c0:a1:b9:7d:ec:52:95:05:16:e8:41:2f:8c:15: f9:17:3f:55:5e:0b:6b:a0:2a:82:b4:f6:6a:c1:6f: 08:3d:be:a8:96:ca:39:7a:a7:72:e8:02:7f:db:36: c8:c3:e1:d1:19:9d:21:f5:81:53:ea:b8:1b:ea:4e: b6:15:5d:85:c2:94:b5:ad:1f:b4:25:ad:95:cd:af: 9f:9c:e0:6a:6a:df:d5:fd:44:39:20:b1:de:66:13: 06:bc:87:59:33:6e:93:53:2c:59:84:02:9e:0d:8a: 57:37:e6:91:e2:58:4e:a4:8b:3f:dc:1b:18:de:6e: f3:8d:fd:ce:47:72:45:64:97:a9:c7:18:37:ce:1a: be:ec:e3:14:d4:80:cf:b2:a8:f8:a1:1b:e3:d2:0b: ed:75:df:9a:c2:87:6a:94:86:1b:51:c5:fe:74:1a: 3c:e6:7e:de:cf:a3:0b:0b:81:d9:32:00:37:bf:a9: d7:8e:d8:63:f1:9f:41:f8:42:a5:ba:03:bd:d0:04: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:62:F5:D8:BC:36:1E:FE:43:F9:8A:C4:06:46:4F:5A:26:AB:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:54:6f:d7:47:53:6d:51:99:bc:15:24:10:83:da:bd:9d:e2: dd:b2:d1:01:e0:72:34:98:bd:01:00:cc:49:d5:92:53:8f:11: 6d:23:f2:d4:fa:74:df:40:1f:99:d0:df:dd:46:bf:d9:f8:73: 86:fc:6a:78:e6:b2:74:a3:c3:db:00:2b:ae:b6:80:52:c3:f6: fa:8c:0b:10:96:fc:3c:b2:4c:23:55:be:ab:66:a8:58:46:ae: 9d:46:4d:67:76:fa:a8:3d:f7:c5:9d:87:85:92:f7:90:28:43: c3:ec:ed:ff:e4:d2:4e:a3:71:02:fd:ac:04:17:59:0a:b2:48: 24:e3:39:db:02:3d:4c:2a:8d:59:d5:ef:6e:da:c7:b9:34:83: d0:8f:8c:4b:fe:72:8c:d8:bf:f3:a1:50:10:94:92:a8:56:6e: b8:d9:e3:32:57:0c:23:d3:1f:9a:f6:32:98:08:d2:3e:34:ff: 02:af:58:27:88:72:0a:14:b5:de:33:8e:ac:2b:a3:7d:83:1f: f6:48:8b:f7:08:88:bb:dd:22:4d:78:5b:18:93:7d:08:d2:93: 6f:12:f2:f1:c8:38:54:d4:2d:d7:11:08:63:f0:30:7b:f1:17: 5a:c1:77:5e:d5:fb:fc:7b:8e:19:38:7e:91:02:98:82:f2:7e: 19:f2:d1:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAMYwrQ2/zXU2mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk NTBkZGM4YTItMDE1My00ZGU0LWI1YWQtNDY5ZDZmYjg0ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5na0rmH7bly/qadMQJuVLVFhoqZb35hjg8Fv 0v4yDW3x7rwYi1SZ/F87xFAhAig27300la8gNwkr//3fwKG5fexSlQUW6EEvjBX5 Fz9VXgtroCqCtPZqwW8IPb6olso5eqdy6AJ/2zbIw+HRGZ0h9YFT6rgb6k62FV2F wpS1rR+0Ja2Vza+fnOBqat/V/UQ5ILHeZhMGvIdZM26TUyxZhAKeDYpXN+aR4lhO pIs/3BsY3m7zjf3OR3JFZJepxxg3zhq+7OMU1IDPsqj4oRvj0gvtdd+awodqlIYb UcX+dBo85n7ez6MLC4HZMgA3v6nXjthj8Z9B+EKlugO90AQcfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyqYvXYvDYe/kP5isQGRk9aJquvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDAxNGZiYzEtZDJkMS0z NzZmLWI2NjktYzM3MWY1NWZkMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJUb9dHU21RmbwVJBCD2r2d4t2y0QHgcjSYvQEAzEnVklOPEW0j8tT6 dN9AH5nQ391Gv9n4c4b8anjmsnSjw9sAK662gFLD9vqMCxCW/DyyTCNVvqtmqFhG rp1GTWd2+qg998Wdh4WS95AoQ8Ps7f/k0k6jcQL9rAQXWQqySCTjOdsCPUwqjVnV 727ax7k0g9CPjEv+cozYv/OhUBCUkqhWbrjZ4zJXDCPTH5r2MpgI0j40/wKvWCeI cgoUtd4zjqwro32DH/ZIi/cIiLvdIk14WxiTfQjSk28S8vHIOFTULdcRCGPwMHvx F1rBd17V+/x7jhk4fpECmILyfhny0QQ= -----END CERTIFICATE-----Generated at Mon Jun 16 01:40:37 2025 by rpki-client