$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/38216dd7-3ade-3a40-8aae-ddba1cb2a3ae.roa File: 38216dd7-3ade-3a40-8aae-ddba1cb2a3ae.roa (raw, json) Hash identifier: 1j0tpvR6ThK4iqg7j03p7nEMCt8eW77pUv7P0rUtwgc= Subject key identifier: D0:C6:5F:72:AC:21:46:75:76:38:E8:20:C2:1E:C6:A0:9D:50:9F:5D Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A1F90263A5E96E0E1D70A2790 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/38216dd7-3ade-3a40-8aae-ddba1cb2a3ae.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 2152 IP address blocks: 207.62.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:26:3a:5e:96:e0:e1:d7:0a:27:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=6b10fe15-eb6a-42f2-9a15-02a1af3da858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:38:49:0d:ec:f5:ba:08:b9:89:7a:ad:4e: fd:d1:54:aa:aa:b5:9e:45:05:16:a3:6f:11:0b:60: 47:64:2e:02:5a:8a:d1:41:8a:7d:1e:cd:b8:62:2d: 7a:bf:6d:cc:fe:d1:e3:b1:74:8f:d3:1c:74:9b:08: 90:a0:07:14:c2:b1:f0:e6:32:64:45:69:18:59:b9: 1e:87:ee:5d:1c:f6:a4:30:4c:f6:33:d6:c8:a8:40: 5a:74:9b:25:85:97:85:a6:2f:d9:d4:0f:5e:20:35: fd:6a:17:6c:92:43:93:6f:c0:69:67:55:51:4c:51: 06:b5:0f:d1:66:bf:2b:9e:14:9b:6f:09:aa:4c:23: 5c:0d:bf:23:88:2c:83:3d:ac:92:df:c7:25:30:b6: f2:75:b0:97:31:a8:4c:98:26:cd:63:6f:d6:ef:62: 4d:c5:24:09:38:4c:2b:fb:5d:93:bf:04:26:8f:46: 34:52:01:23:49:4b:88:a8:ec:36:31:d4:f0:29:d4: e0:4c:fc:45:e0:1f:23:1c:c8:af:23:88:63:fd:ea: 6e:d8:7a:30:54:32:b2:99:7c:e8:71:ea:b0:1a:df: d0:fb:e6:bb:a7:35:c4:63:5b:53:a5:6c:24:d8:5c: 14:3f:5b:2a:cd:73:79:3a:a4:9d:bd:8f:82:bc:83: ec:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C6:5F:72:AC:21:46:75:76:38:E8:20:C2:1E:C6:A0:9D:50:9F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/38216dd7-3ade-3a40-8aae-ddba1cb2a3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 207.62.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:17:7e:32:33:3c:2d:96:99:fc:ef:e9:1f:fc:11:3c:a0:9a: 4a:a5:ce:9f:d6:43:c2:9f:3c:b4:a4:e5:99:38:f9:ba:8a:ed: 4f:3b:33:71:81:42:30:a9:4e:74:35:ce:21:bc:2d:31:8a:08: db:f9:29:5f:b3:b8:78:8d:a4:43:d4:6a:47:ff:09:b5:f1:54: 2b:ef:08:86:e4:3e:5e:45:e9:5d:08:27:55:bf:de:b6:73:af: 19:78:6a:9e:e4:75:6c:52:81:3b:5f:00:c7:49:05:bd:b3:8f: 95:b6:8a:4d:2f:e6:b3:7c:3c:51:5c:39:75:c5:e4:43:fb:b4: e4:3f:5e:10:47:83:06:bc:14:a5:4b:31:d2:9c:c7:a5:f5:2e: b7:63:87:1b:2c:f7:e5:e1:3c:20:9b:b3:5b:96:f9:8e:4f:57: 64:d4:72:8d:21:f7:b8:48:2e:29:8e:c7:b8:d9:a6:49:3c:45: 13:01:d1:7d:1d:72:1c:53:74:63:d8:53:aa:d6:ca:5e:d0:4b: 58:57:fc:12:f8:83:de:ce:b6:97:54:3e:7d:d2:14:10:6e:f5: 5f:4c:55:40:52:7e:3d:7e:ca:7b:52:d9:d1:81:71:39:bb:d6: e8:e6:b9:c7:b7:9a:c1:03:02:dc:a5:a9:b8:e5:84:f3:47:57: 14:63:9b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCY6Xpbg4dcKJ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk NmIxMGZlMTUtZWI2YS00MmYyLTlhMTUtMDJhMWFmM2RhODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7g4SQ3s9boIuYl6rU790VSqqrWeRQUWo28R C2BHZC4CWorRQYp9Hs24Yi16v23M/tHjsXSP0xx0mwiQoAcUwrHw5jJkRWkYWbke h+5dHPakMEz2M9bIqEBadJslhZeFpi/Z1A9eIDX9ahdskkOTb8BpZ1VRTFEGtQ/R Zr8rnhSbbwmqTCNcDb8jiCyDPayS38clMLbydbCXMahMmCbNY2/W72JNxSQJOEwr +12TvwQmj0Y0UgEjSUuIqOw2MdTwKdTgTPxF4B8jHMivI4hj/epu2HowVDKymXzo ceqwGt/Q++a7pzXEY1tTpWwk2FwUP1sqzXN5OqSdvY+CvIPsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDGX3KsIUZ1djjoIMIexqCdUJ9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzgyMTZkZDctM2FkZS0z YTQwLThhYWUtZGRiYTFjYjJhM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzz4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkXfjIzPC2Wmfzv6R/8ETygmkqlzp/WQ8KfPLSk5Zk4+bqK7U87M3GB QjCpTnQ1ziG8LTGKCNv5KV+zuHiNpEPUakf/CbXxVCvvCIbkPl5F6V0IJ1W/3rZz rxl4ap7kdWxSgTtfAMdJBb2zj5W2ik0v5rN8PFFcOXXF5EP7tOQ/XhBHgwa8FKVL MdKcx6X1Lrdjhxss9+XhPCCbs1uW+Y5PV2TUco0h97hILimOx7jZpkk8RRMB0X0d chxTdGPYU6rWyl7QS1hX/BL4g97OtpdUPn3SFBBu9V9MVUBSfj1+yntS2dGBcTm7 1ujmuce3msEDAtylqbjlhPNHVxRjm1Y= -----END CERTIFICATE-----Generated at Sun Jun 15 06:35:46 2025 by rpki-client