$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa File: f22a97e2-6b52-3092-9e30-da9958902a1f.roa (raw, json) Hash identifier: fOsgInE2m9PGZ0qOeC8rnGyRkAHIMEhtzttOMYJlQ7g= Subject key identifier: C8:5A:58:E9:AA:26:2C:33:F4:FC:FA:38:A7:EF:C9:02:66:70:D7:CC Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A173003430E58471B5CE19640 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 13576 IP address blocks: 216.249.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:03:43:0e:58:47:1b:5c:e1:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=205514e2-894d-4d69-abd2-139ffff2ffe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:3e:24:ce:bf:5c:7a:3b:dd:42:bf:72:25: ab:75:71:29:6a:aa:29:b0:d9:f7:a6:14:d4:21:e7: cc:37:6f:65:a0:14:3d:03:ee:1e:36:53:62:68:2f: ba:6f:b6:9f:3b:e2:d1:89:c9:f6:1e:37:2d:fd:08: eb:0c:eb:02:24:1b:1e:8f:c6:8b:d6:d5:66:5d:e6: e5:75:ed:52:06:b5:db:49:33:c5:0c:e1:38:31:cc: 18:eb:fb:48:a0:a9:df:43:53:be:92:d8:a7:13:fe: b8:55:c9:f0:bf:d6:43:a5:13:e5:d2:64:ff:0d:33: f8:f6:b6:c0:10:dc:80:9a:05:b1:11:ff:c2:ab:1f: 2d:66:6d:62:05:f7:c1:7e:f5:fd:ad:49:72:28:18: 6b:6c:b2:fe:bd:79:bc:81:8c:6a:f7:20:90:09:f5: 8f:0f:e2:8b:3b:87:2f:30:03:f5:da:b0:f4:a5:ab: dc:45:4f:58:3e:11:d1:ca:fb:01:02:57:9d:d0:6f: b3:42:d3:62:d1:3d:51:ff:4e:b2:4d:72:82:63:ca: 59:b4:e8:2d:a0:f6:af:0f:15:93:a6:16:9e:b5:84: 25:e5:61:48:69:3e:d6:3f:56:55:90:e9:c5:38:20: cc:2c:2a:e0:74:76:4b:1d:6a:09:9b:83:0c:8c:a2: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5A:58:E9:AA:26:2C:33:F4:FC:FA:38:A7:EF:C9:02:66:70:D7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5e:36:4e:82:ed:3c:d5:8d:ac:9a:5a:36:6d:19:29:81:fa: ed:d3:67:12:01:a8:88:b3:01:a8:f6:a6:1f:c1:82:3f:f1:80: 54:9e:4f:57:93:6d:25:4b:42:4e:b5:fd:51:45:8c:90:6e:72: fd:7d:2f:8e:93:6b:16:d5:33:6a:06:96:2b:5e:c5:ce:ec:a2: 9a:8b:1c:d3:3b:51:1a:74:ce:08:12:3a:b7:f3:7c:95:6e:a5: 96:e2:50:9b:e9:da:3b:42:4b:31:58:7d:1a:6e:ff:c9:26:67: f7:46:45:2c:fa:7d:27:42:18:8a:e9:9b:98:70:21:8e:ae:fc: fb:c9:86:ac:e0:3c:36:85:01:73:8b:a4:05:29:10:6b:8a:3f: 7e:61:45:1f:6a:fd:4b:fb:30:74:d4:61:ee:2f:d3:b7:5a:10: 4b:86:05:94:00:a1:78:80:59:ac:bb:02:0d:08:4d:f0:d6:0c: 7a:29:41:da:6d:cf:03:1e:7d:25:6e:2f:73:42:84:99:bb:2f: a0:2d:fd:1f:09:54:15:26:27:ad:1c:c2:4f:f4:cd:8a:42:19: 24:80:94:80:cf:ba:a4:e7:fb:35:f1:6b:e7:f9:4f:ca:e3:ad: a4:c6:65:41:ea:6f:86:af:02:13:ea:75:f5:a1:30:b0:e8:30: e8:57:3f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMANDDlhHG1zhlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk MjA1NTE0ZTItODk0ZC00ZDY5LWFiZDItMTM5ZmZmZjJmZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb0+JM6/XHo73UK/ciWrdXEpaqopsNn3phTU IefMN29loBQ9A+4eNlNiaC+6b7afO+LRicn2Hjct/QjrDOsCJBsej8aL1tVmXebl de1SBrXbSTPFDOE4McwY6/tIoKnfQ1O+ktinE/64Vcnwv9ZDpRPl0mT/DTP49rbA ENyAmgWxEf/Cqx8tZm1iBffBfvX9rUlyKBhrbLL+vXm8gYxq9yCQCfWPD+KLO4cv MAP12rD0pavcRU9YPhHRyvsBAled0G+zQtNi0T1R/06yTXKCY8pZtOgtoPavDxWT phaetYQl5WFIaT7WP1ZVkOnFOCDMLCrgdHZLHWoJm4MMjKKXvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhaWOmqJiwz9Pz6OKfvyQJmcNfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjIyYTk3ZTItNmI1Mi0z MDkyLTllMzAtZGE5OTU4OTAyYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2PnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACheNk6C7TzVjayaWjZtGSmB+u3TZxIBqIizAaj2ph/Bgj/xgFSeT1eT bSVLQk61/VFFjJBucv19L46TaxbVM2oGlitexc7sopqLHNM7URp0zggSOrfzfJVu pZbiUJvp2jtCSzFYfRpu/8kmZ/dGRSz6fSdCGIrpm5hwIY6u/PvJhqzgPDaFAXOL pAUpEGuKP35hRR9q/Uv7MHTUYe4v07daEEuGBZQAoXiAWay7Ag0ITfDWDHopQdpt zwMefSVuL3NChJm7L6At/R8JVBUmJ60cwk/0zYpCGSSAlIDPuqTn+zXxa+f5T8rj raTGZUHqb4avAhPqdfWhMLDoMOhXP5A= -----END CERTIFICATE-----Generated at Sun Jun 15 21:04:10 2025 by rpki-client