$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa File: 76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa (raw, json) Hash identifier: 1EmrO1dYHl7JMarmligCJHQtpT6BjLacGhDjqbHe8Tg= Subject key identifier: DB:9C:76:25:F8:14:71:79:26:C3:06:FE:FB:D8:41:21:48:17:A6:5A Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F43285849DC8FCC10B979AF0A5E223E80 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 8014 IP address blocks: 216.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:cc:10:b9:79:af:0a:5e:22:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=45e48c64-8a4e-4a0b-ae49-af629694ffcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:39:fe:79:a4:ca:35:9e:41:a7:b4:3b:30: dc:6f:16:ec:09:14:ca:4f:87:dd:1e:47:c8:9c:6e: ec:85:c5:7f:10:b4:13:3c:6f:f0:4b:81:22:66:07: 22:3b:32:b8:4f:cf:9f:34:61:26:31:ef:db:48:93: 7d:40:86:ed:4b:16:0b:6e:e3:96:0c:aa:2a:8e:19: d6:54:40:8d:ad:20:c8:00:2e:e0:f3:7e:d7:25:fe: cc:92:8c:5a:58:37:2a:80:72:f1:2e:8d:b3:c0:b5: a0:bd:88:5c:4f:2f:2d:54:8a:79:e0:13:d2:13:25: 7e:68:95:ee:33:32:31:9d:00:0b:a9:4a:42:00:13: 78:64:da:42:d3:1c:bf:87:35:94:8f:eb:6e:ad:73: 7d:da:c6:ca:ef:21:99:13:fe:9d:56:5e:48:68:a9: 8d:06:7f:a5:fe:6b:3f:5f:98:34:4a:46:b0:eb:01: 79:f7:25:dd:70:db:31:2f:f5:90:b7:7d:86:fa:d3: ce:65:0a:12:7a:6d:76:3e:f1:81:33:53:0d:d4:73: fa:bf:c6:cf:c3:cf:7a:28:5d:cd:46:ea:42:95:d6: dc:26:07:9c:6a:fe:3b:65:39:eb:ad:1d:b5:07:fe: fc:d6:94:47:c1:a1:3c:01:cd:0f:dc:87:9e:41:5b: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9C:76:25:F8:14:71:79:26:C3:06:FE:FB:D8:41:21:48:17:A6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 216.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:4d:4a:d5:69:43:34:f3:53:05:5c:b5:19:a3:05:bc:96:21: 6a:5a:cc:be:56:c1:31:2c:57:84:c5:ec:c5:cb:63:58:6c:d8: ef:7f:35:b8:40:80:7f:2d:0f:d9:d4:c1:4d:7e:f5:65:9e:46: 4d:b0:22:cd:c4:dd:e3:34:e0:9b:7e:5e:60:81:47:f3:43:b4: 7b:ce:27:0f:4e:ee:51:6e:c5:f1:83:6e:1d:3f:1b:db:f3:7e: 57:2e:33:0d:4b:b0:2a:1c:d1:dd:75:2b:4a:b1:0f:d6:a1:5f: d8:75:7c:c8:5d:6a:84:45:db:31:42:5a:64:e4:4b:2b:15:79: 29:b4:2c:a6:16:96:aa:dc:f3:a0:bc:44:38:87:07:9b:ba:c5: 8b:8d:82:a0:4f:32:27:03:90:43:d2:25:9a:fc:dc:92:95:da: 03:60:f3:6f:bb:67:5f:43:04:92:a5:69:14:4b:9a:4e:c9:f0: 2e:5c:6e:9f:7c:93:43:25:ac:e6:ef:84:87:2d:9a:4c:b7:a3: ea:a4:aa:97:51:13:9b:30:f0:d0:69:bc:0b:b8:db:1b:03:a5: 5e:ee:a2:b0:41:55:fd:2a:28:2c:72:2b:3f:8e:c4:e1:21:c3: 2d:fa:40:3c:bf:95:14:29:01:6b:ec:66:ca:ec:e4:3d:60:d1: e2:65:04:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8wQuXmvCl4iPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NDVlNDhjNjQtOGE0ZS00YTBiLWFlNDktYWY2Mjk2OTRmZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL45/nmkyjWeQae0OzDcbxbsCRTKT4fdHkfI nG7shcV/ELQTPG/wS4EiZgciOzK4T8+fNGEmMe/bSJN9QIbtSxYLbuOWDKoqjhnW VECNrSDIAC7g837XJf7MkoxaWDcqgHLxLo2zwLWgvYhcTy8tVIp54BPSEyV+aJXu MzIxnQALqUpCABN4ZNpC0xy/hzWUj+turXN92sbK7yGZE/6dVl5IaKmNBn+l/ms/ X5g0Skaw6wF59yXdcNsxL/WQt32G+tPOZQoSem12PvGBM1MN1HP6v8bPw896KF3N RupCldbcJgecav47ZTnrrR21B/781pRHwaE8Ac0P3IeeQVvBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNucdiX4FHF5JsMG/vvYQSFIF6ZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvNzZkMmNhZGItNjhmNS0z NzdjLWJlNmUtNzk5MmUxZTFjMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9NStVpQzTzUwVctRmjBbyWIWpazL5WwTEsV4TF7MXLY1hs2O9/NbhA gH8tD9nUwU1+9WWeRk2wIs3E3eM04Jt+XmCBR/NDtHvOJw9O7lFuxfGDbh0/G9vz flcuMw1LsCoc0d11K0qxD9ahX9h1fMhdaoRF2zFCWmTkSysVeSm0LKYWlqrc86C8 RDiHB5u6xYuNgqBPMicDkEPSJZr83JKV2gNg82+7Z19DBJKlaRRLmk7J8C5cbp98 k0MlrObvhIctmky3o+qkqpdRE5sw8NBpvAu42xsDpV7uorBBVf0qKCxyKz+OxOEh wy36QDy/lRQpAWvsZsrs5D1g0eJlBOY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:39:15 2025 by rpki-client