$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa File: c0423400-0048-3038-acb3-c7d67eb17923.roa (raw, json) Hash identifier: KGEeNwdHj7f+1sMXdLh+UDIGuRG7ahN9ENPHJulUrBM= Subject key identifier: F6:71:9C:FF:A9:63:DF:32:80:5F:12:E4:64:82:CF:8D:DF:59:4B:FA Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584A03A53F1EF2307F915F878200 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 208.71.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:3f:1e:f2:30:7f:91:5f:87:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=80cb6ca4-cac3-4af9-b024-75aced49d05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:36:cb:fb:9a:74:76:98:b1:98:05:41:7c: 22:4f:45:04:7d:85:0e:40:f9:2f:1e:ea:02:31:77: c6:f0:4e:b7:34:0a:78:9e:e8:39:e6:c4:74:68:e1: 3c:1e:4d:ad:6d:3c:7a:e0:38:7f:fe:af:ba:72:88: be:f7:3d:bc:0f:ab:18:04:a1:34:fa:37:95:5a:6e: 21:d1:66:21:a4:56:0e:ff:b3:de:50:4f:3b:cd:b3: ac:dd:b8:d8:c4:68:4e:60:58:9c:d3:62:fe:a8:ff: d5:f5:dd:a1:7a:33:e4:b6:a5:04:40:63:20:75:5a: 3d:7e:3d:27:dd:d9:a1:f9:3d:8c:65:37:78:64:a5: 3b:1c:7f:41:1b:8a:03:d2:ca:cc:5d:4b:32:1e:03: 28:18:d6:16:91:89:92:ee:bb:99:b8:99:5d:f7:01: 60:2e:e2:a0:f8:08:91:9d:80:53:13:90:4c:5f:b1: cf:8c:7c:87:c0:4c:bd:de:b6:5e:7f:d3:b3:97:2f: 54:a3:85:e3:35:1c:33:bb:8f:b2:b0:0d:34:ad:f5: 74:65:34:a0:ed:67:67:a4:7e:03:9d:b4:a3:a9:a9: 96:a5:4f:28:87:60:50:e4:91:9a:d7:d7:a4:d6:5e: 33:55:6b:23:90:62:0a:be:40:1c:97:19:b4:d1:5a: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:71:9C:FF:A9:63:DF:32:80:5F:12:E4:64:82:CF:8D:DF:59:4B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:44:37:23:d3:93:e3:57:31:55:98:a5:f5:a1:5d:3e:0a:8d: ee:96:70:41:6e:d5:f4:f9:fe:e7:3b:81:2e:48:ba:3b:df:c2: 85:8d:e3:7e:56:54:0f:fa:24:3d:ee:9c:cd:22:ba:76:5a:47: 1d:85:98:b9:78:ae:d5:22:f1:52:28:c1:28:25:41:53:6e:5f: c2:0a:c7:f0:e8:93:82:0a:d2:52:80:c9:20:cc:b5:8e:e9:b1: 97:8c:6c:6b:25:3b:7b:0b:d6:dd:77:47:f6:12:60:45:f6:09: 9b:6f:78:3a:1f:32:2b:77:40:5a:ec:8a:80:aa:d1:d9:01:9b: bf:0c:b0:a7:c6:06:be:d6:e2:06:2e:e8:be:cc:39:0a:8b:9d: f3:17:22:7a:cb:30:fc:63:ec:bc:a2:0f:8f:34:54:da:cd:90: ef:b7:ac:96:78:57:38:cb:f5:64:c0:80:fc:7d:b6:af:97:62: 0e:02:4b:db:30:cf:3c:82:f3:4e:73:c8:94:f4:07:b9:79:c6: a2:b3:9a:23:dc:f9:be:41:24:6d:58:56:8d:ee:05:d7:a4:2d: 0f:6d:c5:39:8c:8e:79:46:dc:4e:1a:db:91:3f:59:cc:af:4b: 84:99:b8:26:ed:f1:42:70:6e:ff:a3:cc:f5:c5:92:72:5f:8c: c1:48:e7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpT8e8jB/kV+HggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ODBjYjZjYTQtY2FjMy00YWY5LWIwMjQtNzVhY2VkNDlkMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixA2y/uadHaYsZgFQXwiT0UEfYUOQPkvHuoC MXfG8E63NAp4nug55sR0aOE8Hk2tbTx64Dh//q+6coi+9z28D6sYBKE0+jeVWm4h 0WYhpFYO/7PeUE87zbOs3bjYxGhOYFic02L+qP/V9d2hejPktqUEQGMgdVo9fj0n 3dmh+T2MZTd4ZKU7HH9BG4oD0srMXUsyHgMoGNYWkYmS7ruZuJld9wFgLuKg+AiR nYBTE5BMX7HPjHyHwEy93rZef9Ozly9Uo4XjNRwzu4+ysA00rfV0ZTSg7WdnpH4D nbSjqamWpU8oh2BQ5JGa19ek1l4zVWsjkGIKvkAclxm00VoSZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZxnP+pY98ygF8S5GSCz43fWUv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvYzA0MjM0MDAtMDA0OC0z MDM4LWFjYjMtYzdkNjdlYjE3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5ENyPTk+NXMVWYpfWhXT4Kje6WcEFu1fT5/uc7gS5IujvfwoWN435W VA/6JD3unM0iunZaRx2FmLl4rtUi8VIowSglQVNuX8IKx/Dok4IK0lKAySDMtY7p sZeMbGslO3sL1t13R/YSYEX2CZtveDofMit3QFrsioCq0dkBm78MsKfGBr7W4gYu 6L7MOQqLnfMXInrLMPxj7LyiD480VNrNkO+3rJZ4VzjL9WTAgPx9tq+XYg4CS9sw zzyC805zyJT0B7l5xqKzmiPc+b5BJG1YVo3uBdekLQ9txTmMjnlG3E4a25E/Wcyv S4SZuCbt8UJwbv+jzPXFknJfjMFI50o= -----END CERTIFICATE-----Generated at Sun Jun 15 00:03:12 2025 by rpki-client