$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa File: a569e485-6b37-3b02-a56e-74b826b6659a.roa (raw, json) Hash identifier: RhgUMb1whWC0K6tdroOpsFtLWjGF4a7H0qLSOulUPFE= Subject key identifier: 3D:42:D8:75:DB:2F:D2:64:14:19:DE:E7:BD:D6:D5:C2:5D:3A:2F:38 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F4328584A1B5FFA914064AFBFCE10DF18 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 20326 IP address blocks: 208.91.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fa:91:40:64:af:bf:ce:10:df:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=795b3667-0b25-44ea-a83c-f2504e8a4e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:4c:64:3e:d2:5b:b7:b2:63:3d:98:4b:98: 64:33:dc:24:7d:7a:b2:cd:c3:f1:46:39:01:29:24: cf:4d:a3:31:94:08:7a:44:3d:ee:08:42:16:1a:cf: 62:ee:b4:37:f8:a4:83:1f:92:3b:5e:31:ff:bc:20: e9:85:19:b1:57:3c:c0:03:3d:18:dc:6e:bb:57:be: 74:6a:95:5d:de:e4:7c:cb:ac:4e:d8:03:f5:58:da: d8:35:49:fb:0a:c1:bb:34:cf:9a:95:df:75:08:26: a7:5d:23:aa:8f:d1:00:dc:fa:f6:cf:e9:e8:c0:ee: ad:d5:b6:e9:97:2b:e5:d7:cf:2f:08:43:7b:50:3a: 13:14:43:a6:76:ed:da:ea:41:1b:16:e8:4b:7b:ba: f3:3d:ee:ab:5f:af:e5:c9:14:b4:35:ca:28:c5:c0: 43:c4:0c:26:d3:eb:70:64:30:eb:3c:74:e0:b9:58: 22:d9:7d:0c:a3:99:40:82:54:c6:d6:9c:f1:2c:c7: 3c:bd:a2:72:a9:85:05:29:56:53:db:8a:dc:7e:11: b9:43:2e:a2:a9:bd:17:25:b6:a8:1a:8b:2a:43:9e: 46:3c:04:05:11:32:43:25:22:15:11:42:63:50:1f: ec:37:4d:2d:12:f4:76:98:74:dd:fc:d5:90:24:e6: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:42:D8:75:DB:2F:D2:64:14:19:DE:E7:BD:D6:D5:C2:5D:3A:2F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 208.91.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:64:f5:de:5f:3c:94:c8:21:80:6e:bb:3e:cc:ad:9b:9b:06: ec:34:8e:16:5b:ae:74:67:f5:3e:13:4a:7d:af:10:1d:ba:7f: b3:91:8e:26:bb:65:8f:58:d9:e0:26:b9:ab:f0:a3:1c:4e:e6: a8:25:7a:bd:3a:9c:02:13:0e:b7:99:85:22:4a:c4:f1:e1:f7: 6d:83:b3:67:82:47:34:ba:03:ea:75:12:01:ff:10:bc:76:37: a7:9b:82:0c:21:81:59:20:f0:4a:be:ab:b1:1f:ad:7f:24:63: c0:fc:b3:dd:ca:fb:64:52:65:0b:a1:2e:28:2d:16:74:da:97: fa:b8:93:37:86:c0:14:2e:b4:f5:a5:00:c1:f4:30:58:8d:f3: bf:5b:53:ae:65:47:22:fc:f9:87:53:fd:1b:46:17:6d:2f:ff: 8b:b1:f5:6b:79:93:c0:f4:00:c4:21:71:a4:29:0f:9b:76:b0: 04:d1:60:a5:68:56:37:48:eb:77:35:ce:11:d1:cf:d0:25:8e: 04:bb:55:a9:95:51:9d:f4:a4:c5:b8:a2:bd:1b:5f:e1:65:f6: 1c:27:6b:96:2b:a2:31:d0:bb:6b:33:b1:20:56:2d:e5:b8:bf: 45:40:33:f4:86:69:f1:0d:47:59:ec:1b:49:7f:3d:cc:57:70: 26:fa:e8:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/qRQGSvv84Q3xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk Nzk1YjM2NjctMGIyNS00NGVhLWE4M2MtZjI1MDRlOGE0ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQpMZD7SW7eyYz2YS5hkM9wkfXqyzcPxRjkB KSTPTaMxlAh6RD3uCEIWGs9i7rQ3+KSDH5I7XjH/vCDphRmxVzzAAz0Y3G67V750 apVd3uR8y6xO2AP1WNrYNUn7CsG7NM+ald91CCanXSOqj9EA3Pr2z+nowO6t1bbp lyvl188vCEN7UDoTFEOmdu3a6kEbFuhLe7rzPe6rX6/lyRS0NcooxcBDxAwm0+tw ZDDrPHTguVgi2X0Mo5lAglTG1pzxLMc8vaJyqYUFKVZT24rcfhG5Qy6iqb0XJbao GosqQ55GPAQFETJDJSIVEUJjUB/sN00tEvR2mHTd/NWQJOYd6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1C2HXbL9JkFBne573W1cJdOi84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvYTU2OWU0ODUtNmIzNy0z YjAyLWE1NmUtNzRiODI2YjY2NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJk9d5fPJTIIYBuuz7MrZubBuw0jhZbrnRn9T4TSn2vEB26f7ORjia7 ZY9Y2eAmuavwoxxO5qgler06nAITDreZhSJKxPHh922Ds2eCRzS6A+p1EgH/ELx2 N6ebggwhgVkg8Eq+q7EfrX8kY8D8s93K+2RSZQuhLigtFnTal/q4kzeGwBQutPWl AMH0MFiN879bU65lRyL8+YdT/RtGF20v/4ux9Wt5k8D0AMQhcaQpD5t2sATRYKVo VjdI63c1zhHRz9AljgS7VamVUZ30pMW4or0bX+Fl9hwna5YrojHQu2szsSBWLeW4 v0VAM/SGafENR1nsG0l/PcxXcCb66Gk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:09 2025 by rpki-client