$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a4178db3-028e-3c18-9254-d0a090216ba3.roa File: a4178db3-028e-3c18-9254-d0a090216ba3.roa (raw, json) Hash identifier: cAor1qZPzlbZuoKxDrPL9ApmAaZAF4hvTSO1Sx3ybL4= Subject key identifier: 37:03:59:E4:4E:CD:EB:5C:26:19:A7:99:B7:3B:D1:DE:5C:59:0B:DD Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A03A54E7194C8410997979DC0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a4178db3-028e-3c18-9254-d0a090216ba3.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 13576 IP address blocks: 208.53.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4e:71:94:c8:41:09:97:97:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=edb546bd-1570-4575-9f22-baa728f02696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:9a:a7:fa:f0:6c:22:35:6e:ec:11:79:bc: 3e:c8:4c:1f:f6:1c:30:b8:3e:02:aa:20:64:81:9a: 87:1b:0c:0a:73:6a:7d:a2:54:0f:90:ff:0b:9f:0a: 59:e1:6d:22:02:f4:3c:90:35:c0:98:39:6d:c3:e0: cd:0c:16:95:63:69:4f:b2:d2:91:00:85:b5:f0:3b: 58:68:82:9c:78:1c:bd:c9:af:47:ee:57:64:b2:0f: c6:e9:3f:40:3a:1c:bf:89:a3:a4:c5:9f:11:06:01: 73:38:0d:70:98:1a:bb:5e:5a:69:2f:46:2b:a3:4c: 08:62:52:aa:c2:ba:7c:c4:13:16:5e:f4:71:cc:ef: d5:84:db:b3:81:44:83:bd:7e:59:f6:01:e3:31:91: c7:2c:b1:1a:dc:75:d9:d8:f1:c4:40:27:52:d6:13: 3b:01:b8:67:0e:c6:69:f9:8c:55:f8:45:ae:b0:77: 80:d3:85:77:3e:c4:b0:44:61:a2:9a:dd:ee:6f:9a: 5c:21:58:18:76:43:58:31:b1:8e:8a:c0:4d:a4:b3: cd:31:80:0c:de:bb:d2:3d:59:3e:c6:ac:b8:3d:99: 92:63:55:79:ee:2b:3c:de:8a:6d:f0:78:3f:b0:1e: 16:30:15:48:71:e7:b8:13:b8:61:33:60:83:32:90: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:03:59:E4:4E:CD:EB:5C:26:19:A7:99:B7:3B:D1:DE:5C:59:0B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a4178db3-028e-3c18-9254-d0a090216ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:35:a0:51:eb:e1:a8:0f:43:19:11:69:82:da:33:4e:8c:f8: c4:7d:ee:de:98:0b:62:6b:fd:0b:8f:93:7a:53:e2:64:a8:22: e6:0c:37:a5:f6:c2:8f:02:a3:2f:d3:cb:e7:78:e5:5e:1c:79: 87:e5:43:c6:b0:1a:59:92:8d:ff:82:60:17:d6:0e:8e:bf:c4: 6e:12:11:ed:c4:11:5d:a0:f7:cb:2d:56:17:4c:87:fd:17:da: 4e:1f:19:9a:5e:49:e6:28:e1:e7:80:76:82:5f:84:85:39:1b: 64:43:3c:a3:d9:d6:d8:3e:3e:95:9b:33:a5:bd:7b:b2:f2:16: 2c:7e:df:19:55:a7:8d:c7:a2:3a:35:d3:0b:65:c1:02:72:22: ea:1f:fa:8d:c2:a0:b6:b8:90:3c:d3:53:75:86:dc:7a:17:c1: ba:b6:85:d5:2d:85:35:72:f4:30:3b:aa:7b:9e:39:28:31:e1: 31:44:15:62:54:6e:cb:bc:fa:f2:79:66:94:c0:02:ca:45:2e: 51:63:e0:f9:07:9b:60:8e:0e:b8:56:3a:2c:2c:cf:8e:a6:58: 0c:28:19:c4:17:da:96:3d:d3:59:97:62:f5:f4:d7:72:bf:36: e2:d0:d9:b3:2d:11:f6:d4:b0:82:42:29:65:3e:4d:41:ed:7d: 22:27:33:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpU5xlMhBCZeXncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZWRiNTQ2YmQtMTU3MC00NTc1LTlmMjItYmFhNzI4ZjAyNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL6ap/rwbCI1buwRebw+yEwf9hwwuD4CqiBk gZqHGwwKc2p9olQPkP8LnwpZ4W0iAvQ8kDXAmDltw+DNDBaVY2lPstKRAIW18DtY aIKceBy9ya9H7ldksg/G6T9AOhy/iaOkxZ8RBgFzOA1wmBq7XlppL0Yro0wIYlKq wrp8xBMWXvRxzO/VhNuzgUSDvX5Z9gHjMZHHLLEa3HXZ2PHEQCdS1hM7AbhnDsZp +YxV+EWusHeA04V3PsSwRGGimt3ub5pcIVgYdkNYMbGOisBNpLPNMYAM3rvSPVk+ xqy4PZmSY1V57is83opt8Hg/sB4WMBVIcee4E7hhM2CDMpD1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcDWeROzetcJhmnmbc70d5cWQvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYTQxNzhkYjMtMDI4ZS0z YzE4LTkyNTQtZDBhMDkwMjE2YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY1oFHr4agPQxkRaYLaM06M+MR97t6YC2Jr/QuPk3pT4mSoIuYMN6X2 wo8Coy/Ty+d45V4ceYflQ8awGlmSjf+CYBfWDo6/xG4SEe3EEV2g98stVhdMh/0X 2k4fGZpeSeYo4eeAdoJfhIU5G2RDPKPZ1tg+PpWbM6W9e7LyFix+3xlVp43Hojo1 0wtlwQJyIuof+o3CoLa4kDzTU3WG3HoXwbq2hdUthTVy9DA7qnueOSgx4TFEFWJU bsu8+vJ5ZpTAAspFLlFj4PkHm2CODrhWOiwsz46mWAwoGcQX2pY901mXYvX013K/ NuLQ2bMtEfbUsIJCKWU+TUHtfSInM4o= -----END CERTIFICATE-----Generated at Mon Jun 16 15:30:46 2025 by rpki-client