$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/87a96ec2-6d9d-3aa3-b7b2-99d7f6c5d463.roa File: 87a96ec2-6d9d-3aa3-b7b2-99d7f6c5d463.roa (raw, json) Hash identifier: Un9pKuDH1xS7A3qiHAw4hoK1BPGq+yZ4Ia2WYGHNyL4= Subject key identifier: A9:36:8C:97:84:CA:5D:2D:4E:79:6E:13:E4:05:F3:0D:F3:1C:E9:FC Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849DF5A7645F88D2A013EE0CC00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/87a96ec2-6d9d-3aa3-b7b2-99d7f6c5d463.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 399439 IP address blocks: 208.53.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:76:45:f8:8d:2a:01:3e:e0:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=ab980f64-609b-4630-b9ad-e861ff69616c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:18:2e:2c:4e:a0:de:00:eb:3a:86:20:ee: c8:50:70:f6:42:9d:a5:38:8f:be:5e:46:fb:8e:35: 95:df:e6:66:9e:cb:ec:20:85:59:67:b1:7e:92:67: cb:11:a5:10:fa:1e:50:5a:65:77:40:79:bc:2f:17: a7:88:93:8b:21:ea:0c:34:da:23:c5:2c:ae:33:3b: a4:e1:d0:a6:57:00:a3:39:26:85:9e:23:32:5b:50: 63:c8:c4:1a:2f:44:e6:9f:cf:06:46:bd:20:9f:1c: db:fb:ae:3f:35:d8:dc:ba:66:12:d5:5a:1a:42:99: 9c:70:d5:f0:bc:c8:2c:cd:f9:b0:40:d9:7c:bd:f8: 4c:04:dd:63:ba:d6:d6:a6:9c:49:c2:72:85:64:e5: 49:bf:63:a8:73:ec:c9:ab:78:68:a0:5d:ce:4f:f2: b4:31:5c:c2:d5:9d:67:00:66:de:6e:ea:58:20:bb: 3a:4d:08:7c:8d:4d:cb:9d:b8:db:a8:e4:45:70:98: 46:f4:e3:4a:24:75:64:29:05:42:47:b9:56:62:da: 8e:be:64:1f:f1:0f:5b:9f:38:69:da:35:7f:20:da: 1a:e2:95:ea:21:03:23:24:45:35:75:96:a4:f0:65: 23:fd:c5:ae:f8:20:97:3b:50:90:3e:52:e2:70:2b: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:36:8C:97:84:CA:5D:2D:4E:79:6E:13:E4:05:F3:0D:F3:1C:E9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/87a96ec2-6d9d-3aa3-b7b2-99d7f6c5d463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d6:2d:d4:c4:98:f1:e0:b4:b0:7d:e4:6f:98:9e:47:5f:89: f6:2f:0f:14:03:26:bd:80:2f:d3:1e:3d:8f:a1:ff:a9:6c:c4: ae:a2:d7:d0:2e:3c:22:66:87:f5:90:68:3e:a5:95:b0:62:ae: ac:69:63:dc:49:53:49:be:d3:10:d8:92:71:a9:8e:16:c9:85: 68:3e:17:ec:6b:53:ef:87:1d:74:89:45:50:f5:79:15:f6:c6: f3:da:b0:9c:1b:3a:df:94:ae:e6:a5:02:62:95:61:76:95:28: 2e:40:69:47:92:c1:4a:dc:a8:5c:1d:bb:55:e1:e0:8f:e3:30: 7e:14:75:d0:84:c8:04:f2:15:ac:3c:fd:eb:e3:fc:f8:25:70: 38:b0:d8:14:9f:51:ac:02:f8:fa:7e:80:e4:12:f1:7f:d5:e6: dc:b0:ca:7e:15:36:a8:df:04:db:9e:df:6c:5c:09:d3:d2:c7: 7f:0d:5f:7c:36:c0:1b:fb:75:c6:74:38:c5:cd:3a:82:b2:8e: b7:02:73:07:a9:a7:fb:00:9e:40:76:e8:d5:b8:9a:f7:61:61: 44:ab:97:0b:9b:e4:60:a8:84:35:61:65:67:40:74:86:ec:22: 2c:53:5b:a4:c1:fd:b8:d0:42:a5:3a:48:15:85:ff:43:ad:23: b6:3b:60:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnZF+I0qAT7gzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YWI5ODBmNjQtNjA5Yi00NjMwLWI5YWQtZTg2MWZmNjk2MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXgYLixOoN4A6zqGIO7IUHD2Qp2lOI++Xkb7 jjWV3+ZmnsvsIIVZZ7F+kmfLEaUQ+h5QWmV3QHm8LxeniJOLIeoMNNojxSyuMzuk 4dCmVwCjOSaFniMyW1BjyMQaL0Tmn88GRr0gnxzb+64/NdjcumYS1VoaQpmccNXw vMgszfmwQNl8vfhMBN1jutbWppxJwnKFZOVJv2Ooc+zJq3hooF3OT/K0MVzC1Z1n AGbebupYILs6TQh8jU3LnbjbqORFcJhG9ONKJHVkKQVCR7lWYtqOvmQf8Q9bnzhp 2jV/INoa4pXqIQMjJEU1dZak8GUj/cWu+CCXO1CQPlLicCuG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk2jJeEyl0tTnluE+QF8w3zHOn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODdhOTZlYzItNmQ5ZC0z YWEzLWI3YjItOTlkN2Y2YzVkNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7WLdTEmPHgtLB95G+YnkdfifYvDxQDJr2AL9MePY+h/6lsxK6i19Au PCJmh/WQaD6llbBirqxpY9xJU0m+0xDYknGpjhbJhWg+F+xrU++HHXSJRVD1eRX2 xvPasJwbOt+UrualAmKVYXaVKC5AaUeSwUrcqFwdu1Xh4I/jMH4UddCEyATyFaw8 /evj/PglcDiw2BSfUawC+Pp+gOQS8X/V5tywyn4VNqjfBNue32xcCdPSx38NX3w2 wBv7dcZ0OMXNOoKyjrcCcwepp/sAnkB26NW4mvdhYUSrlwub5GCohDVhZWdAdIbs IixTW6TB/bjQQqU6SBWF/0OtI7Y7YDk= -----END CERTIFICATE-----Generated at Mon Jun 16 15:23:16 2025 by rpki-client