$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa File: f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa (raw, json) Hash identifier: V0m5gZwar2yDZk75y32JuUHxrPpL2Oi9H2rB5blTFkE= Subject key identifier: 54:55:8D:26:E5:D7:57:CC:00:38:9C:1A:C4:A2:3C:C3:65:0D:8C:00 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584ABD4B729573480F99E847F680 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16509 IP address blocks: 134.224.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:72:95:73:48:0f:99:e8:47:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=3db60d8c-e9bc-4cc5-baaa-9b4286f3dbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:9f:33:9a:fb:51:09:01:15:8b:5f:02:6b: d1:78:e2:d6:d5:06:d9:d8:45:68:74:81:80:30:07: 3c:37:94:e5:72:72:c1:f4:41:8b:cc:fb:15:76:47: 37:6c:3f:d4:b4:be:40:14:0a:a2:25:d0:39:d2:59: e5:b1:cf:c5:4f:7e:82:72:8c:2a:99:d2:24:aa:dc: c7:a2:d0:d7:71:b9:31:b7:0a:fb:57:5d:7a:0c:43: 21:68:16:15:2d:7e:26:8e:06:48:ba:2e:ff:43:2d: 98:19:17:98:e5:91:25:d0:ce:13:80:7b:d8:e8:c3: 56:56:ca:27:34:63:4b:87:82:90:d5:a3:e3:67:ff: f5:d3:de:47:98:7d:a6:bd:d2:29:93:1c:8d:9d:f9: 6c:bd:07:2c:00:bc:12:fa:fe:45:5e:87:52:21:bc: 43:f9:e9:b6:f2:19:6c:a4:71:99:e6:52:31:87:27: bd:a1:a8:74:e4:f7:04:68:35:09:30:1b:c0:6d:1c: 38:3b:93:d9:b5:11:e8:74:65:a8:49:04:de:96:dc: 81:05:1b:0e:7f:d9:be:c6:14:28:aa:b1:fd:dc:0b: dd:64:fd:3b:c0:41:8f:75:9f:47:03:c4:92:fd:f5: 4e:f1:e7:6a:a1:47:87:ac:46:12:01:c4:64:8c:d8: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:55:8D:26:E5:D7:57:CC:00:38:9C:1A:C4:A2:3C:C3:65:0D:8C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:41:4c:22:ef:e3:80:8c:11:cb:3e:b6:2f:13:ae:6a:c5:2a: 94:07:71:20:72:a9:11:02:60:ac:dd:38:49:1b:5a:8c:e5:57: 01:5e:02:6a:e3:d7:8c:78:80:3d:77:59:7b:1d:0d:65:45:71: 1c:7d:b8:6c:f5:32:06:64:82:89:e6:03:85:e6:7d:75:a3:7b: 05:8e:6e:06:5f:8a:f1:01:6a:cb:8e:2a:f8:eb:e5:8e:b4:ab: 4a:50:2a:a9:95:c5:42:76:3b:14:c7:0a:ad:6d:0e:1b:4c:d2: 4d:79:42:d8:ab:7d:c5:54:20:40:6a:71:b5:96:ba:d8:6f:16: a5:f0:25:d1:8a:81:3a:b8:41:d1:cb:6c:37:10:af:37:f0:bf: d1:5f:5f:9c:a2:5b:32:bb:66:26:de:44:29:f4:e5:cc:17:b4: 95:cc:a2:a4:84:a7:4e:28:78:83:86:ae:86:78:e2:25:0a:56: 19:75:76:b0:03:cb:b9:f3:e7:c4:da:de:02:21:34:6b:b6:56: 19:0e:42:10:5e:49:9f:eb:9e:7d:8c:e6:77:b2:ce:b0:9f:b8: 8a:65:89:54:48:3e:6d:40:20:20:66:32:34:26:63:52:d7:53: 92:b4:ba:f6:75:46:57:2a:95:92:51:2b:30:5a:82:95:34:08: ca:c0:80:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3KVc0gPmehH9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk M2RiNjBkOGMtZTliYy00Y2M1LWJhYWEtOWI0Mjg2ZjNkYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVSfM5r7UQkBFYtfAmvReOLW1QbZ2EVodIGA MAc8N5TlcnLB9EGLzPsVdkc3bD/UtL5AFAqiJdA50lnlsc/FT36CcowqmdIkqtzH otDXcbkxtwr7V116DEMhaBYVLX4mjgZIui7/Qy2YGReY5ZEl0M4TgHvY6MNWVson NGNLh4KQ1aPjZ//1095HmH2mvdIpkxyNnflsvQcsALwS+v5FXodSIbxD+em28hls pHGZ5lIxhye9oah05PcEaDUJMBvAbRw4O5PZtRHodGWoSQTeltyBBRsOf9m+xhQo qrH93AvdZP07wEGPdZ9HA8SS/fVO8edqoUeHrEYSAcRkjNgAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRVjSbl11fMADicGsSiPMNlDYwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjNkZDhlMjktZGI2ZS0z ZmQwLTg5N2EtYmNjNGViZTVkMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhuDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNBTCLv44CMEcs+ti8TrmrFKpQHcSByqRECYKzdOEkbWozlVwFeAmrj 14x4gD13WXsdDWVFcRx9uGz1MgZkgonmA4XmfXWjewWObgZfivEBasuOKvjr5Y60 q0pQKqmVxUJ2OxTHCq1tDhtM0k15QtirfcVUIEBqcbWWuthvFqXwJdGKgTq4QdHL bDcQrzfwv9FfX5yiWzK7ZibeRCn05cwXtJXMoqSEp04oeIOGroZ44iUKVhl1drAD y7nz58Ta3gIhNGu2VhkOQhBeSZ/rnn2M5neyzrCfuIpliVRIPm1AICBmMjQmY1LX U5K0uvZ1RlcqlZJRKzBagpU0CMrAgKM= -----END CERTIFICATE-----Generated at Mon Aug 4 21:45:39 2025 by rpki-client