$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa File: f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa (raw, json) Hash identifier: PKiYzOTgvi++1RLa/KpkxqpSEPjnq4bv/C2sVdvEBcU= Subject key identifier: 4A:ED:E2:4C:D9:E6:44:5D:0B:13:84:1F:93:8A:E8:7F:0F:FF:AA:9B Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285849DC8FA86DB27AA39B8BA18D00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 134.224.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:a8:6d:b2:7a:a3:9b:8b:a1:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=bdc70475-b3f8-4696-8a53-db3c1fc2251f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f5:7a:38:78:a0:95:d3:dd:e9:68:18:83:ec: 78:9d:73:39:b4:60:62:65:0a:8d:e8:db:25:99:d9: 29:f0:6b:8a:0e:37:51:81:15:02:dd:6a:8f:af:58: 53:d2:80:9e:2c:46:5b:5e:21:f4:9c:2e:03:2e:cd: 45:f6:96:cb:ab:5c:0b:2f:3b:c2:24:e6:20:9e:dd: c0:0a:c2:83:2e:ab:90:c4:bf:21:32:ee:60:f1:e7: a0:82:1d:6e:b9:d9:db:b1:4a:c2:fc:9b:5e:74:5c: 72:91:ff:cd:c7:2a:f7:42:22:96:96:b8:04:2d:41: 6f:db:fe:52:10:68:ce:c9:7b:db:07:88:6d:85:62: d7:05:00:4f:a2:ff:31:57:5e:20:f9:39:e8:a4:3b: 86:f8:be:99:e4:5e:02:b0:bc:30:cc:76:3e:c8:a5: df:91:d4:04:e6:e6:d5:48:69:23:e8:b2:5f:3c:d1: c7:61:52:20:89:cf:a8:5f:19:9a:e6:7a:fa:19:24: 6b:ab:b2:ad:a8:5b:a3:f4:bc:1a:ce:89:33:ea:03: 82:b1:b3:fc:9e:c7:eb:64:a4:61:50:6a:45:b4:ce: 5d:25:38:e8:0a:54:66:12:59:f1:63:1f:63:93:27: 65:f7:4b:fb:e1:27:66:77:0f:87:4f:ce:7c:89:55: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:E2:4C:D9:E6:44:5D:0B:13:84:1F:93:8A:E8:7F:0F:FF:AA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fc:ee:62:5d:fe:72:10:8e:7b:3d:48:ad:50:fc:c6:08:0e: d7:92:06:5c:72:bf:8a:26:92:ac:7c:27:03:1e:3f:dc:9f:7c: 97:3f:b7:3e:dd:46:43:e0:10:8d:37:b6:81:80:78:9d:b8:52: 47:dd:0e:d0:9d:8f:f5:ab:40:3a:ca:5a:79:c8:00:9e:93:8c: 3e:5d:82:ac:e6:63:ab:a6:e7:d8:d1:f8:6e:6c:fe:af:50:39: 38:bd:11:f7:5c:78:52:ae:3a:f5:24:95:37:9e:bf:8d:42:4b: 50:8c:cf:4c:84:e2:8d:1e:8f:2e:1e:e8:f6:78:fa:f0:f0:74: 72:f2:f7:b2:ee:37:a3:47:cd:2a:95:8b:0b:6e:e0:68:97:e8: 94:80:7c:8a:ec:6d:3b:0c:8f:36:35:df:6e:1c:f9:f6:c2:08: 70:c4:41:16:de:33:6b:fe:40:e9:c6:73:0b:3a:1a:c4:03:b5: 76:a2:f5:c7:2e:0f:e8:db:9a:e0:e2:52:91:fa:d5:4d:4a:03: 23:dc:f0:41:9a:40:d0:b5:04:bf:7f:4e:41:ad:7b:3f:81:6e: 67:63:99:0c:11:16:bf:1e:30:95:ca:c8:cf:d3:0e:38:ca:fe: 54:ea:c1:70:7e:f4:18:9e:a7:a5:aa:02:6c:b0:25:0f:7e:e8: a3:e7:72:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6htsnqjm4uhjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YmRjNzA0NzUtYjNmOC00Njk2LThhNTMtZGIzYzFmYzIyNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/V6OHigldPd6WgYg+x4nXM5tGBiZQqN6Nsl mdkp8GuKDjdRgRUC3WqPr1hT0oCeLEZbXiH0nC4DLs1F9pbLq1wLLzvCJOYgnt3A CsKDLquQxL8hMu5g8eeggh1uudnbsUrC/JtedFxykf/Nxyr3QiKWlrgELUFv2/5S EGjOyXvbB4hthWLXBQBPov8xV14g+TnopDuG+L6Z5F4CsLwwzHY+yKXfkdQE5ubV SGkj6LJfPNHHYVIgic+oXxma5nr6GSRrq7KtqFuj9Lwazokz6gOCsbP8nsfrZKRh UGpFtM5dJTjoClRmElnxYx9jkydl90v74Sdmdw+HT858iVVE/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErt4kzZ5kRdCxOEH5OK6H8P/6qbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjNkZDhlMjktZGI2ZS0z ZmQwLTg5N2EtYmNjNGViZTVkMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhuDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX87mJd/nIQjns9SK1Q/MYIDteSBlxyv4omkqx8JwMeP9yffJc/tz7d RkPgEI03toGAeJ24UkfdDtCdj/WrQDrKWnnIAJ6TjD5dgqzmY6um59jR+G5s/q9Q OTi9EfdceFKuOvUklTeev41CS1CMz0yE4o0ejy4e6PZ4+vDwdHLy97LuN6NHzSqV iwtu4GiX6JSAfIrsbTsMjzY1324c+fbCCHDEQRbeM2v+QOnGcws6GsQDtXai9ccu D+jbmuDiUpH61U1KAyPc8EGaQNC1BL9/TkGtez+BbmdjmQwRFr8eMJXKyM/TDjjK /lTqwXB+9Biep6WqAmywJQ9+6KPnclY= -----END CERTIFICATE-----Generated at Sat Jun 14 05:56:56 2025 by rpki-client