$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa File: d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa (raw, json) Hash identifier: ZZYAzv2u1vjG7um6PeyAn3SM/Kp64USxQk5nvt3R5pU= Subject key identifier: A9:7A:36:B5:AE:35:C7:1E:2C:A1:F5:FB:A3:17:BB:07:00:31:2E:6F Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F43285849C904DDCEB6BD93AD4E248460 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 208.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:dd:ce:b6:bd:93:ad:4e:24:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=ab17c0ab-8e74-4aae-903c-24698963b2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:fa:b6:5b:c3:e7:ce:35:01:4c:42:1f:d8: 3c:29:22:af:28:5e:1c:b5:24:93:4c:94:4c:31:62: da:75:38:99:ae:11:05:f1:e1:76:99:fe:04:59:44: 99:c9:6d:9b:e4:99:98:54:d6:67:de:81:25:53:aa: 15:e3:6d:be:3e:67:05:63:fd:6f:f1:86:32:9e:ff: b9:84:6a:cd:d0:c8:73:d7:ea:54:61:b3:a6:e2:91: c4:b2:55:e8:7e:c3:8a:47:a5:bc:b3:be:6c:82:d6: ff:0d:1c:c7:bd:41:a9:f4:f1:e5:7b:8f:e3:8d:95: 95:7b:fc:3a:3b:2a:72:e9:cf:3b:29:b1:37:cf:ed: 98:ce:4d:98:1c:c9:9b:b6:e2:e9:15:15:cd:af:49: af:8b:71:17:6e:49:02:22:3b:2b:d3:15:2d:a4:22: a6:f3:ce:e6:b9:60:53:50:09:75:38:a7:2e:80:b6: 14:de:e7:14:05:e0:cd:b6:bb:ba:f8:a4:93:c5:5a: 8f:bb:47:f0:78:08:74:e1:bb:73:37:c5:2d:43:6a: 44:9a:c7:92:91:c6:88:9c:1d:57:3b:5f:3d:14:a6: bc:01:2c:75:d8:54:9e:f5:76:4f:0e:a7:9f:45:cf: ff:0f:60:db:7e:0e:3e:ac:42:db:1c:16:92:f9:08: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7A:36:B5:AE:35:C7:1E:2C:A1:F5:FB:A3:17:BB:07:00:31:2E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8d:bb:a8:6a:d7:85:cf:07:d9:d0:6f:64:46:c5:ce:3f:c2: ad:dc:f2:55:aa:8b:f2:e4:a0:a4:d8:c6:f2:61:67:ec:67:d1: b6:75:d0:40:7a:52:93:a3:5d:14:dc:c6:f0:d7:b4:e6:15:ee: ac:b8:0e:d6:57:f1:58:2f:46:34:00:8b:74:cd:63:ab:fd:b8: 6e:63:17:b2:6b:17:54:d0:00:bc:59:e3:1e:be:85:34:e5:52: a7:81:8d:f7:46:39:15:cf:3a:e0:18:55:a9:e6:96:ab:cf:01: 25:4f:34:05:69:d4:af:b0:ec:e1:d4:98:54:ea:66:79:71:69: cc:26:12:46:2d:62:46:9b:99:a2:5d:88:ba:9b:6e:b6:5a:93: 70:9c:f9:50:ec:b9:fc:39:5b:b8:48:5c:c2:65:8a:90:43:a8: f2:e4:e1:e4:43:d7:d5:39:76:85:9e:df:2b:3d:be:26:e8:a8: ac:f0:bd:70:81:ef:f6:64:34:8e:d2:67:4b:f3:c0:e0:9e:8b: 11:66:e0:30:1e:b7:95:28:a6:7a:16:55:e0:85:ef:dd:b2:29: 18:3b:2a:7c:1e:cc:2f:c8:d2:4b:3b:1d:d7:24:b3:de:e3:87: b9:09:75:f2:78:9a:c8:66:10:3a:bf:e0:c7:6c:e3:ed:c3:99: ca:7c:75:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN3Otr2TrU4khGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk YWIxN2MwYWItOGU3NC00YWFlLTkwM2MtMjQ2OTg5NjNiMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xD6tlvD5841AUxCH9g8KSKvKF4ctSSTTJRM MWLadTiZrhEF8eF2mf4EWUSZyW2b5JmYVNZn3oElU6oV422+PmcFY/1v8YYynv+5 hGrN0Mhz1+pUYbOm4pHEslXofsOKR6W8s75sgtb/DRzHvUGp9PHle4/jjZWVe/w6 Oypy6c87KbE3z+2Yzk2YHMmbtuLpFRXNr0mvi3EXbkkCIjsr0xUtpCKm887muWBT UAl1OKcugLYU3ucUBeDNtru6+KSTxVqPu0fweAh04btzN8UtQ2pEmseSkcaInB1X O189FKa8ASx12FSe9XZPDqefRc//D2Dbfg4+rELbHBaS+QiUPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl6NrWuNcceLKH1+6MXuwcAMS5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvZDA1YmNiYWUtOWI2NC0z MGVlLWI2YjUtOTM0NmEzZTJmZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuNu6hq14XPB9nQb2RGxc4/wq3c8lWqi/LkoKTYxvJhZ+xn0bZ10EB6 UpOjXRTcxvDXtOYV7qy4DtZX8VgvRjQAi3TNY6v9uG5jF7JrF1TQALxZ4x6+hTTl UqeBjfdGORXPOuAYVanmlqvPASVPNAVp1K+w7OHUmFTqZnlxacwmEkYtYkabmaJd iLqbbrZak3Cc+VDsufw5W7hIXMJlipBDqPLk4eRD19U5doWe3ys9viboqKzwvXCB 7/ZkNI7SZ0vzwOCeixFm4DAet5UopnoWVeCF792yKRg7KnwezC/I0ks7Hdcks97j h7kJdfJ4mshmEDq/4Mds4+3Dmcp8dcY= -----END CERTIFICATE-----Generated at Sat Jun 14 05:51:42 2025 by rpki-client