$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa File: 528a072d-fb5e-3209-b0b6-eff453de4aaf.roa (raw, json) Hash identifier: 203UqkERpDj8FGFmL7CLaLU52RQZV1k+yxfvYXuJ93c= Subject key identifier: 06:92:19:6A:87:E5:C1:74:C6:3F:2D:78:FB:82:79:DE:72:1A:26:9F Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285849CE9A3FAC24465991F1B7FD80 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6639 IP address blocks: 208.168.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3f:ac:24:46:59:91:f1:b7:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=deb754ed-d7e1-4351-a7a3-121c8fb34eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:b0:6a:81:08:92:c4:1c:47:f5:07:2f:0c: dd:73:fa:50:b5:ca:58:9d:da:5c:87:8e:06:48:96: f8:50:96:b4:ac:f4:ed:c5:ad:8f:b5:2e:70:d8:28: 75:7c:b7:62:bc:1c:67:d3:fc:1b:1b:1b:29:40:65: ef:25:91:c6:dd:94:35:52:d2:12:68:13:e7:ad:4b: 8d:b1:55:cd:a3:c7:22:28:10:94:9f:53:73:40:37: d8:72:3b:f7:a9:d2:0f:5c:1b:0f:e9:34:82:e8:82: e5:68:02:78:fc:6d:42:34:f8:ee:30:4c:49:a3:7c: a9:f4:86:18:86:77:82:c3:41:55:21:46:2c:32:df: 03:3f:2c:e2:5a:7c:ee:ef:b9:1c:8f:1d:78:1c:aa: 6b:8c:e3:3c:51:59:a8:5a:c8:0b:92:65:b5:2f:65: e5:4d:8e:45:f4:33:1e:0c:86:26:39:bc:5e:1c:f1: 1c:20:d3:f0:94:ae:8e:ad:da:07:68:9e:fd:df:c0: 26:d4:55:9f:9a:e5:e4:4a:f6:c7:42:73:80:9f:96: db:e9:90:1c:49:3e:cd:7b:0f:fd:44:93:ff:f2:04: ae:d4:b4:4b:70:2d:36:c2:d4:8c:db:7a:89:b9:6f: 32:7d:58:85:70:1f:3b:6c:53:7a:c8:d0:79:44:48: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:92:19:6A:87:E5:C1:74:C6:3F:2D:78:FB:82:79:DE:72:1A:26:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2e:a7:36:48:d8:91:b2:91:26:b1:c5:a6:19:50:bf:55:63: 5a:6a:10:a1:5b:1d:5a:14:65:36:a1:40:dc:bc:33:97:e3:21: 4f:4f:14:50:73:7e:58:f2:c3:ed:92:c7:4d:4d:84:ce:83:98: b0:dd:7b:4f:91:52:16:75:74:cb:9d:3c:9a:b3:df:d8:e8:0d: d2:83:0a:86:00:b4:8a:b7:21:19:e8:15:f2:82:e8:ea:e7:54: 8f:41:6f:c9:77:7a:be:8c:b9:12:c9:f6:c0:35:4a:26:1d:76: 11:c5:0d:ee:0e:f0:ac:b3:ef:d8:1c:d0:2d:15:83:d8:a4:69: a7:c9:4e:27:37:34:85:58:db:ed:13:69:12:7c:34:73:23:fb: 9b:69:23:23:df:bd:65:d6:6d:bb:8a:28:18:23:3c:51:48:45: 42:e4:a5:5f:23:6b:ed:5e:dc:32:ce:a1:05:0f:90:b1:8e:aa: c6:6a:be:cc:39:58:cf:d5:a9:d7:da:95:32:ee:1b:3e:30:7c: 0b:c7:43:52:1e:e9:90:f5:89:b1:a9:ca:5e:c9:b3:48:a7:28: 0e:bb:d5:5d:28:13:d9:67:95:23:86:5d:ce:c6:6e:c8:be:54: c7:a6:55:6b:d5:a6:79:30:bd:8a:f0:15:44:76:73:e8:29:ca: 1a:c2:9c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmj+sJEZZkfG3/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZGViNzU0ZWQtZDdlMS00MzUxLWE3YTMtMTIxYzhmYjM0ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuWwaoEIksQcR/UHLwzdc/pQtcpYndpch44G SJb4UJa0rPTtxa2PtS5w2Ch1fLdivBxn0/wbGxspQGXvJZHG3ZQ1UtISaBPnrUuN sVXNo8ciKBCUn1NzQDfYcjv3qdIPXBsP6TSC6ILlaAJ4/G1CNPjuMExJo3yp9IYY hneCw0FVIUYsMt8DPyziWnzu77kcjx14HKprjOM8UVmoWsgLkmW1L2XlTY5F9DMe DIYmObxeHPEcINPwlK6OrdoHaJ7938Am1FWfmuXkSvbHQnOAn5bb6ZAcST7New/9 RJP/8gSu1LRLcC02wtSM23qJuW8yfViFcB87bFN6yNB5REj3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaSGWqH5cF0xj8tePuCed5yGiafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNTI4YTA3MmQtZmI1ZS0z MjA5LWIwYjYtZWZmNDUzZGU0YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0KjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcupzZI2JGykSaxxaYZUL9VY1pqEKFbHVoUZTahQNy8M5fjIU9PFFBz fljyw+2Sx01NhM6DmLDde0+RUhZ1dMudPJqz39joDdKDCoYAtIq3IRnoFfKC6Orn VI9Bb8l3er6MuRLJ9sA1SiYddhHFDe4O8Kyz79gc0C0Vg9ikaafJTic3NIVY2+0T aRJ8NHMj+5tpIyPfvWXWbbuKKBgjPFFIRULkpV8ja+1e3DLOoQUPkLGOqsZqvsw5 WM/VqdfalTLuGz4wfAvHQ1Ie6ZD1ibGpyl7Js0inKA671V0oE9lnlSOGXc7Gbsi+ VMemVWvVpnkwvYrwFUR2c+gpyhrCnM0= -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:08 2025 by rpki-client