$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa File: 4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa (raw, json) Hash identifier: FcWCJWvRWqaBZCvHO1NHeRy4h92gtCkub3BAsBlrESQ= Subject key identifier: 66:1D:2E:B8:6F:77:73:04:AB:9B:19:D6:A1:31:C6:B6:B1:9B:47:B6 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A050A73FB8D729B9905CF4480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 399439 IP address blocks: 208.53.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:73:fb:8d:72:9b:99:05:cf:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=216ec89f-29f4-4838-a80f-ea889a7e80e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:4d:21:40:13:42:65:13:87:ff:0d:3c:da: 5b:66:9e:c7:ac:72:2b:cd:b1:c8:d1:91:20:25:e5: de:28:63:b6:77:63:15:08:8f:83:be:c0:4c:80:5f: 0c:df:62:e6:5c:79:d6:61:37:d9:8e:15:11:83:8e: 9c:84:c1:2c:42:a1:1a:ec:7a:5b:d4:6e:f3:7e:f4: ee:71:70:f0:69:b1:58:0b:27:81:a1:db:9f:86:9d: d0:2f:54:74:f5:c5:7b:d1:d2:8e:92:33:7d:53:e1: ec:ad:d9:ac:b2:29:2c:e1:aa:67:59:4c:a3:91:fa: 98:8c:8a:11:95:b1:cb:53:cb:6f:93:26:31:f4:27: b1:04:fc:61:57:e8:84:64:ba:67:9e:26:17:aa:9d: 52:69:1b:ca:77:95:52:90:6d:5f:3d:0e:67:be:cd: fb:2b:1f:33:95:92:5f:d5:f5:37:ca:58:74:aa:19: a5:60:7c:f8:3c:a0:27:aa:9d:96:4e:24:77:59:a2: 91:d1:16:5e:13:38:7c:ab:68:c3:c7:06:5e:78:cc: fb:00:5c:74:a8:85:7c:ce:46:33:58:99:3b:8c:b3: 2b:0e:80:64:4c:f7:aa:ce:6d:41:4e:50:28:44:7f: f8:85:c8:5f:bd:a9:6f:d4:3a:cd:c8:c4:73:30:45: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1D:2E:B8:6F:77:73:04:AB:9B:19:D6:A1:31:C6:B6:B1:9B:47:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ee:29:56:0f:d8:14:61:a2:d3:8d:fc:ad:ab:f3:2c:01:d6: a1:79:2c:f2:2e:f2:d2:e5:46:35:ce:19:25:6d:9a:5d:d5:be: 99:b6:16:e5:c9:da:67:77:27:ea:75:4e:22:2e:63:d2:57:74: 59:65:9f:63:52:8e:f9:3b:2c:5f:32:5a:12:f2:a3:cc:8b:75: f0:b0:00:5a:bb:4d:ee:5e:c9:55:01:2d:6c:bf:a2:ab:7b:c6: a2:87:cf:86:c3:ee:cc:98:75:1d:61:68:87:17:c8:87:9c:a9: ac:43:bb:18:81:16:94:19:9f:fd:e4:56:ea:27:90:05:47:d1: 55:d4:6f:a9:da:e2:bc:52:1b:8a:a2:3a:8b:61:0c:92:a0:bd: c8:19:0f:81:c2:b3:43:db:71:d8:d9:ce:f1:f3:a0:d7:f6:18: 62:66:55:5a:9c:2a:34:eb:bd:d5:12:72:31:f7:ba:cb:f0:8c: ed:d7:7e:ff:6a:53:c0:a0:3a:2d:18:86:6f:0e:0d:6b:91:98: 9b:f6:fb:c2:24:5a:90:d7:c9:a3:3c:7c:0c:23:4d:78:a8:a7: cb:01:10:f3:a3:c9:98:53:b4:42:78:e6:f0:3a:34:f2:e8:5c: 33:94:77:ba:c3:02:84:c1:27:83:aa:38:d3:e7:cb:83:a2:43: 57:07:aa:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnP7jXKbmQXPRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MjE2ZWM4OWYtMjlmNC00ODM4LWE4MGYtZWE4ODlhN2U4MGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxxNIUATQmUTh/8NPNpbZp7HrHIrzbHI0ZEg JeXeKGO2d2MVCI+DvsBMgF8M32LmXHnWYTfZjhURg46chMEsQqEa7Hpb1G7zfvTu cXDwabFYCyeBodufhp3QL1R09cV70dKOkjN9U+Hsrdmssiks4apnWUyjkfqYjIoR lbHLU8tvkyYx9CexBPxhV+iEZLpnniYXqp1SaRvKd5VSkG1fPQ5nvs37Kx8zlZJf 1fU3ylh0qhmlYHz4PKAnqp2WTiR3WaKR0RZeEzh8q2jDxwZeeMz7AFx0qIV8zkYz WJk7jLMrDoBkTPeqzm1BTlAoRH/4hchfvalv1DrNyMRzMEUiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYdLrhvd3MEq5sZ1qExxraxm0e2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNGNmZTM0NDktMzFhZS0z Yzg2LWE4ZDgtYWZiZTNmYmI4N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbuKVYP2BRhotON/K2r8ywB1qF5LPIu8tLlRjXOGSVtml3Vvpm2FuXJ 2md3J+p1TiIuY9JXdFlln2NSjvk7LF8yWhLyo8yLdfCwAFq7Te5eyVUBLWy/oqt7 xqKHz4bD7syYdR1haIcXyIecqaxDuxiBFpQZn/3kVuonkAVH0VXUb6na4rxSG4qi OothDJKgvcgZD4HCs0PbcdjZzvHzoNf2GGJmVVqcKjTrvdUScjH3usvwjO3Xfv9q U8CgOi0Yhm8ODWuRmJv2+8IkWpDXyaM8fAwjTXiop8sBEPOjyZhTtEJ45vA6NPLo XDOUd7rDAoTBJ4OqONPny4OiQ1cHqrg= -----END CERTIFICATE-----Generated at Mon Jun 16 04:35:01 2025 by rpki-client