$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa File: b1c86e78-67c7-333a-928e-a0cff3179bb3.roa (raw, json) Hash identifier: bAnmvv7ZP/z1So1FBabpcvbMHdN5gJOhdpqUSw2OTH0= Subject key identifier: E0:7F:AC:F5:91:7B:A5:9B:09:41:C3:96:80:E4:5D:42:86:14:A7:3F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A050A73E65F2F1433BD99BD34 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 13576 IP address blocks: 208.53.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:73:e6:5f:2f:14:33:bd:99:bd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=02873857-197d-492c-92cf-86fb8afaca0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:be:02:0a:d4:7f:f3:34:d9:fb:d7:ea:16: fe:e5:b1:89:5b:31:5f:3a:9b:d2:5b:29:78:8b:16: 8a:17:ef:91:1c:66:16:4e:a8:f7:3c:63:6a:b6:20: 35:3e:68:4c:d0:fc:0c:fa:19:80:2b:3c:df:70:6d: 7f:9b:db:38:a4:9a:9e:8b:60:6f:5a:c1:e1:9a:19: cc:db:47:6f:d0:10:6b:4e:e2:a0:aa:50:4b:c0:72: 45:46:84:0e:87:d0:73:9d:07:fb:b5:37:64:c9:89: 90:13:d3:39:bd:a5:de:55:ec:8d:aa:8b:f0:23:82: b7:37:b1:ed:81:34:b9:a1:0f:aa:03:c3:2d:c1:05: 78:fd:d8:df:dc:42:07:5a:c6:d0:4a:47:b9:52:29: 67:f2:37:47:77:55:bd:31:4d:4d:55:a9:16:e6:7d: e7:1c:ed:de:49:98:ef:92:dc:f7:26:de:10:a7:9c: b7:53:3c:19:7c:64:d8:1d:1a:78:4b:8c:7f:f5:ce: 8e:53:dd:bd:b5:f0:20:8d:25:aa:e8:ab:6e:16:30: fa:b5:dd:d8:68:f2:6b:be:9e:8b:67:9a:7c:41:2b: 78:2f:f3:50:9b:45:78:8f:e4:5d:85:cc:f2:9a:60: 32:03:1c:fb:72:db:66:9e:82:59:3d:4b:66:91:f7: 18:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7F:AC:F5:91:7B:A5:9B:09:41:C3:96:80:E4:5D:42:86:14:A7:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d2:7a:36:20:6e:56:3d:26:24:2c:fc:85:5e:d9:a8:dc:6f: af:c8:c7:2a:b7:fd:89:11:c1:d9:0c:5e:8e:d9:58:21:af:0a: 81:9c:7a:85:77:fd:56:46:b0:c4:86:d2:da:86:d3:ce:cd:51: 38:e0:e8:3a:f4:11:6c:d2:c3:cf:fa:6c:7f:51:94:b0:12:ad: 98:fb:55:a9:e4:81:9c:db:37:b1:ab:b5:b3:c9:9d:20:16:93: 0d:df:43:dc:c0:05:09:0d:c2:b8:e3:72:5b:f4:5a:2f:fd:53: 1d:c4:e1:3c:a2:99:dc:ec:70:3d:98:0d:1f:4e:bf:c0:c6:e8: 76:de:d1:2e:dc:a7:9a:74:28:a0:b5:35:c6:9b:15:35:c9:90: 50:77:1e:45:86:65:09:2b:ff:50:16:8e:20:3f:0b:81:a2:1e: 2a:1b:bb:ca:6c:8d:62:1a:1e:fb:e1:c1:0d:3a:27:b2:f0:09: 41:5f:f8:ec:4b:54:dc:ba:02:57:b7:93:b2:bb:81:de:cb:6e: 4b:77:76:e0:db:5d:19:b0:07:b4:fc:a3:d0:e6:ef:67:c4:ec: f5:a8:b0:51:8a:b6:61:4e:cc:6d:02:a4:1a:11:66:33:90:33: 74:ed:ad:a2:4f:3c:db:9c:ec:ab:ec:25:42:25:46:a6:c0:5e: bb:6a:18:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnPmXy8UM72ZvTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MDI4NzM4NTctMTk3ZC00OTJjLTkyY2YtODZmYjhhZmFjYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15i+AgrUf/M02fvX6hb+5bGJWzFfOpvSWyl4 ixaKF++RHGYWTqj3PGNqtiA1PmhM0PwM+hmAKzzfcG1/m9s4pJqei2BvWsHhmhnM 20dv0BBrTuKgqlBLwHJFRoQOh9BznQf7tTdkyYmQE9M5vaXeVeyNqovwI4K3N7Ht gTS5oQ+qA8MtwQV4/djf3EIHWsbQSke5Uiln8jdHd1W9MU1NVakW5n3nHO3eSZjv ktz3Jt4Qp5y3UzwZfGTYHRp4S4x/9c6OU929tfAgjSWq6KtuFjD6td3YaPJrvp6L Z5p8QSt4L/NQm0V4j+RdhczymmAyAxz7cttmnoJZPUtmkfcY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB/rPWRe6WbCUHDloDkXUKGFKc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjFjODZlNzgtNjdjNy0z MzNhLTkyOGUtYTBjZmYzMTc5YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrSejYgblY9JiQs/IVe2ajcb6/Ixyq3/YkRwdkMXo7ZWCGvCoGceoV3 /VZGsMSG0tqG087NUTjg6Dr0EWzSw8/6bH9RlLASrZj7VankgZzbN7GrtbPJnSAW kw3fQ9zABQkNwrjjclv0Wi/9Ux3E4TyimdzscD2YDR9Ov8DG6Hbe0S7cp5p0KKC1 NcabFTXJkFB3HkWGZQkr/1AWjiA/C4GiHiobu8psjWIaHvvhwQ06J7LwCUFf+OxL VNy6Ale3k7K7gd7Lbkt3duDbXRmwB7T8o9Dm72fE7PWosFGKtmFOzG0CpBoRZjOQ M3TtraJPPNuc7KvsJUIlRqbAXrtqGPw= -----END CERTIFICATE-----Generated at Mon Jun 16 15:43:47 2025 by rpki-client