$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa File: 350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa (raw, json) Hash identifier: oDkZu3fGQXOM07WVUjQreEFo2QVN4kydk7j85KcHleU= Subject key identifier: E6:27:C3:57:2A:DB:B5:14:31:CF:B6:E5:44:B1:C0:80:7D:E6:A6:22 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285849CE9A3F989E71A09748412B40 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6639 IP address blocks: 208.157.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3f:98:9e:71:a0:97:48:41:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=15771205-74a0-4bc5-8baf-7a9445a0c551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:32:4e:45:24:9b:64:b8:30:b5:d0:a8:e4: a4:7d:cb:8e:ef:e5:a2:dd:59:0a:9f:6d:97:ae:87: b4:8f:01:fe:86:f3:cb:40:92:b7:b4:ab:98:f2:be: 6d:7f:88:a2:f5:e1:03:be:46:7a:73:b2:e6:34:9c: b7:dc:e9:02:40:0d:0d:07:d1:de:4a:20:61:6a:47: a3:d6:4b:61:91:8f:ed:cc:e7:b2:e5:00:13:a9:c5: 7b:57:bf:2b:58:89:8a:df:ce:f7:55:9c:6c:b9:85: 06:47:37:2c:66:bc:77:43:91:00:c6:10:74:de:91: c7:ab:bc:6f:40:68:3d:b2:d0:e8:c4:89:3c:26:ea: 5f:31:23:93:d4:a5:07:17:06:68:20:1a:a0:5d:9a: 3e:6c:f1:de:a0:a1:3c:ea:61:3a:49:d4:5a:0e:3d: 95:95:59:00:a1:81:7f:61:2f:84:50:18:2d:ac:e9: d9:50:88:ef:0f:2f:c7:bb:1a:e4:99:5a:e3:11:e4: 5a:36:a4:e0:62:df:31:58:2d:44:0b:c4:be:46:c1: d1:20:4a:b3:54:14:7c:b2:c3:a4:2b:5c:fb:3e:86: 06:ef:b7:30:1a:3e:23:83:e3:eb:d6:21:39:e8:68: 8e:0c:3c:d6:88:58:ed:46:44:da:a8:20:21:be:a8: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:C3:57:2A:DB:B5:14:31:CF:B6:E5:44:B1:C0:80:7D:E6:A6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.157.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:90:7d:57:41:b4:34:a1:1b:81:c3:8b:40:6b:8b:db:c5:fc: 7f:fa:00:46:42:5a:47:e8:36:78:f5:a7:f6:f4:6f:d9:ca:72: ee:c4:bc:5d:90:9f:42:18:88:65:d2:d5:67:85:1e:b9:ed:28: 50:2d:de:c3:8e:58:ac:29:cd:4c:8c:79:bb:ac:65:03:58:f3: 3a:fd:d1:73:b7:87:df:f2:6e:8e:bb:b5:40:76:65:9f:6b:e1: dd:50:3f:2e:4c:b1:20:78:aa:7a:16:ad:3b:68:c1:6e:3d:f4: fd:8f:b1:8f:05:b2:43:76:bb:64:a5:30:7c:7c:96:64:15:f5: 20:b6:ea:14:60:a2:be:1c:75:12:60:3b:14:2d:b1:a1:1e:36: 77:b6:0d:fe:07:1e:43:49:97:bd:05:d6:02:c9:16:3e:6f:24: 05:cf:f7:34:b7:c2:58:06:a8:a6:86:57:56:78:f0:04:a8:6d: 5f:f2:8e:55:8d:6a:99:fa:78:ee:b5:db:27:13:02:37:0c:e2: 10:7e:e4:9a:2e:ce:b6:4d:4b:80:8c:85:86:66:ad:4c:01:bf: b4:d6:e3:93:d4:b2:c3:ea:1c:1c:51:e6:58:60:55:c4:43:c1: b5:3d:03:39:46:d7:9f:9c:3c:74:d5:2c:94:82:5f:17:02:43: 84:60:ab:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmj+YnnGgl0hBK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MTU3NzEyMDUtNzRhMC00YmM1LThiYWYtN2E5NDQ1YTBjNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV8yTkUkm2S4MLXQqOSkfcuO7+Wi3VkKn22X roe0jwH+hvPLQJK3tKuY8r5tf4ii9eEDvkZ6c7LmNJy33OkCQA0NB9HeSiBhakej 1kthkY/tzOey5QATqcV7V78rWImK3873VZxsuYUGRzcsZrx3Q5EAxhB03pHHq7xv QGg9stDoxIk8JupfMSOT1KUHFwZoIBqgXZo+bPHeoKE86mE6SdRaDj2VlVkAoYF/ YS+EUBgtrOnZUIjvDy/HuxrkmVrjEeRaNqTgYt8xWC1EC8S+RsHRIEqzVBR8ssOk K1z7PoYG77cwGj4jg+Pr1iE56GiODDzWiFjtRkTaqCAhvqgSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYnw1cq27UUMc+25USxwIB95qYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMzUwYTkxODctMjBlNi0z ODU5LWJiZjAtYzVmM2ZhNWQwYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0J2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuQfVdBtDShG4HDi0Bri9vF/H/6AEZCWkfoNnj1p/b0b9nKcu7EvF2Q n0IYiGXS1WeFHrntKFAt3sOOWKwpzUyMebusZQNY8zr90XO3h9/ybo67tUB2ZZ9r 4d1QPy5MsSB4qnoWrTtowW499P2PsY8FskN2u2SlMHx8lmQV9SC26hRgor4cdRJg OxQtsaEeNne2Df4HHkNJl70F1gLJFj5vJAXP9zS3wlgGqKaGV1Z48ASobV/yjlWN apn6eO612ycTAjcM4hB+5JouzrZNS4CMhYZmrUwBv7TW45PUssPqHBxR5lhgVcRD wbU9AzlG15+cPHTVLJSCXxcCQ4Rgqzs= -----END CERTIFICATE-----Generated at Mon Jun 16 05:36:39 2025 by rpki-client