$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa File: 80176c29-2db4-33cf-b400-b52a4a80cd03.roa (raw, json) Hash identifier: OpurQagfNsr7ZyJeDuv2UJOHM+69UtU8hXCT+8CaiH0= Subject key identifier: 16:97:C3:05:68:09:B5:D2:BA:2F:81:1E:C2:B2:6E:41:EE:25:13:AE Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584A03A54721B725B37E29EB1700 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 208.71.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:47:21:b7:25:b3:7e:29:eb:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=12b68221-c09d-452c-837a-466b446f2d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:c8:b9:d9:79:55:9d:7b:2f:67:ca:c0:65: ac:3e:1d:ca:14:0e:e0:f2:7c:9c:02:7d:a5:f2:cf: 1c:fe:31:f0:33:a0:c5:c7:96:ee:ab:36:2f:e2:be: 59:23:43:35:1f:14:98:16:0a:f7:8a:60:e2:07:6a: 94:12:d7:bb:91:df:1a:bd:cb:7a:df:34:96:51:7b: 70:c4:5f:46:1c:14:08:17:54:82:a6:7b:e3:3f:68: b0:f5:1c:4b:af:b5:b2:36:08:23:17:16:5f:cc:76: ab:20:d6:10:e8:f4:da:6a:fb:cb:8e:4f:d6:96:cb: da:f4:71:59:a1:fe:9d:36:22:34:6e:ec:71:71:ba: c3:31:a0:ce:9d:b9:d8:3b:8e:b8:7d:e1:61:c0:03: d8:6a:40:75:ea:9c:03:82:85:32:42:8a:08:bc:ae: 5f:17:af:43:b7:01:20:26:65:bb:bd:66:18:f5:90: dc:61:20:a7:29:c5:0f:8e:6f:b7:58:84:1b:47:fa: 61:94:76:de:33:d4:58:4e:01:80:04:50:89:66:b3: 55:4c:90:14:15:4d:63:e9:e2:02:f0:6d:9d:69:bf: e3:06:53:16:ae:af:82:cd:bd:62:61:2b:3b:45:27: f7:9f:2f:46:45:5c:1f:41:66:2d:b0:f4:54:c1:36: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:97:C3:05:68:09:B5:D2:BA:2F:81:1E:C2:B2:6E:41:EE:25:13:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:91:17:cf:69:62:3f:e1:cb:84:f9:05:a8:bd:08:ba:72:c1: 7e:41:be:61:ac:89:bd:be:43:c4:bd:cb:8d:75:79:88:5f:12: d2:87:4f:84:19:9e:b2:53:47:47:c6:7d:e2:b3:7d:f9:ea:95: 27:85:b8:ae:9b:d1:11:48:13:8b:52:e6:29:8d:b7:43:6d:fc: c6:06:dc:f1:59:99:27:b6:14:93:89:8d:0f:b2:52:20:08:bd: 41:ee:86:22:6e:27:f3:e6:2a:de:47:7a:fa:66:26:94:ce:88: 5a:28:db:4a:4c:14:bf:aa:41:68:7b:6d:c4:49:c8:07:7e:c9: b6:d8:ba:12:f5:ae:4d:7a:d7:fa:5a:32:1b:40:d7:22:23:de: e0:a4:a6:45:83:87:a3:45:98:45:f5:7b:73:b2:7f:a4:49:c5: 39:a6:79:ca:03:07:05:35:af:48:62:e3:c4:e9:c3:84:8d:74: 55:de:14:a0:bd:72:fa:16:8c:82:00:00:a8:d2:05:f6:60:98: 2b:67:33:c1:05:93:2d:02:42:40:24:d4:88:86:a4:75:08:92: 40:1f:ed:64:b8:1e:d1:f9:a4:1a:dc:ab:03:b3:07:91:8f:63: 19:20:a3:42:f3:03:c8:24:2f:de:6f:cc:cc:46:8a:72:9e:ef: 90:ef:00:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUchtyWzfinrFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTJiNjgyMjEtYzA5ZC00NTJjLTgzN2EtNDY2YjQ0NmYyZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHjIudl5VZ17L2fKwGWsPh3KFA7g8nycAn2l 8s8c/jHwM6DFx5buqzYv4r5ZI0M1HxSYFgr3imDiB2qUEte7kd8avct63zSWUXtw xF9GHBQIF1SCpnvjP2iw9RxLr7WyNggjFxZfzHarINYQ6PTaavvLjk/Wlsva9HFZ of6dNiI0buxxcbrDMaDOnbnYO464feFhwAPYakB16pwDgoUyQooIvK5fF69DtwEg JmW7vWYY9ZDcYSCnKcUPjm+3WIQbR/phlHbeM9RYTgGABFCJZrNVTJAUFU1j6eIC 8G2dab/jBlMWrq+Czb1iYSs7RSf3ny9GRVwfQWYtsPRUwTYETwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaXwwVoCbXSui+BHsKybkHuJROuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvODAxNzZjMjktMmRiNC0z M2NmLWI0MDAtYjUyYTRhODBjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqRF89pYj/hy4T5Bai9CLpywX5BvmGsib2+Q8S9y411eYhfEtKHT4QZ nrJTR0fGfeKzffnqlSeFuK6b0RFIE4tS5imNt0Nt/MYG3PFZmSe2FJOJjQ+yUiAI vUHuhiJuJ/PmKt5HevpmJpTOiFoo20pMFL+qQWh7bcRJyAd+ybbYuhL1rk161/pa MhtA1yIj3uCkpkWDh6NFmEX1e3Oyf6RJxTmmecoDBwU1r0hi48Tpw4SNdFXeFKC9 cvoWjIIAAKjSBfZgmCtnM8EFky0CQkAk1IiGpHUIkkAf7WS4HtH5pBrcqwOzB5GP Yxkgo0LzA8gkL95vzMxGinKe75DvAEc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:00:04 2025 by rpki-client