$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa File: 6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa (raw, json) Hash identifier: oDRgZkte8D6QTY0eTiMkRElWEq6Qbstghr6VqCyYd98= Subject key identifier: A3:BF:1F:48:70:11:8D:80:5D:CA:DD:F2:17:79:AF:5C:9F:40:34:B7 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285849DF5A73B2C449B2A9132D3900 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 394996 IP address blocks: 209.38.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:73:b2:c4:49:b2:a9:13:2d:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=6aa29534-7aa0-445f-8ef3-98b398f62cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:15:58:e4:42:a7:0b:ef:da:94:c6:0b:67: 5e:a0:97:e4:5a:44:78:31:71:ba:f1:46:07:f9:6f: 32:aa:2c:03:9b:96:97:04:bc:ae:43:05:25:a1:4a: d3:02:b7:25:d8:40:55:1b:98:a6:3f:39:71:60:9d: 28:c4:8d:d8:a3:f7:2e:78:a1:f2:0f:82:65:eb:7e: 48:81:aa:3e:fd:33:67:f4:1b:bb:75:96:71:c5:c7: 6e:2d:d2:b9:32:e1:72:44:81:e7:fb:57:2f:99:2a: 58:85:c5:5f:ce:18:31:88:07:28:d5:c6:e6:76:53: ef:ca:7c:28:c1:0e:78:23:87:21:cc:47:8c:db:1b: 3e:fa:bb:59:16:c3:e2:91:8a:92:91:0b:5e:6a:5f: 0e:22:e7:0a:70:b3:5f:68:ef:50:23:28:d8:41:15: e9:34:24:4d:92:11:02:7f:d5:8e:0d:14:9f:68:ef: fd:db:d5:cb:c7:a8:3d:6d:81:08:3e:f8:b5:9c:0d: e3:95:ba:b9:e6:f7:2f:80:54:a5:08:14:45:e1:c7: 78:75:9c:e7:63:0c:7d:93:e2:b1:5c:60:fa:b3:65: ce:1c:6d:2c:7f:8f:58:bb:d1:cb:72:00:f4:dd:8e: 93:28:e0:4f:2d:31:80:84:2b:09:ba:a9:45:83:9a: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BF:1F:48:70:11:8D:80:5D:CA:DD:F2:17:79:AF:5C:9F:40:34:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:49:b2:b7:53:ea:e6:20:18:56:4d:2b:e0:06:c0:10:9a:04: d9:62:16:c9:33:9e:9a:6f:0c:10:37:30:fb:7f:a7:89:ba:31: 11:c5:39:54:35:56:0c:ce:c7:79:ff:3a:a0:c7:2d:33:b1:0d: 10:0b:16:c1:03:fa:e6:91:91:60:30:69:9d:d6:42:f4:b6:45: 55:91:22:bd:a6:2e:1a:c1:b8:db:f3:70:5c:87:f7:16:f3:9f: 22:04:55:4a:ec:a5:c1:97:bc:ff:6d:29:36:9a:e1:9c:ed:c9: 50:d5:6f:b9:44:66:1c:f1:e0:ad:c5:24:5f:e7:e5:34:20:b4: 51:63:2d:5b:2e:ed:05:4b:1a:91:54:df:6c:53:09:a1:10:19: 58:ae:9d:64:44:38:a9:b5:a1:89:bb:44:8a:9a:d8:f1:33:5d: 9f:d7:25:06:d5:f5:5a:9a:62:74:63:ed:53:ec:94:8c:b0:01: 5a:43:36:b4:b3:77:42:40:27:14:6d:b2:0e:5e:ae:dd:9f:4c: 38:3f:0b:bf:6c:10:3f:a2:d3:ce:d2:1e:39:ab:bb:3f:0b:82: 10:f5:52:56:59:f6:2b:5f:56:ff:90:41:83:74:99:bb:10:63: da:26:d4:72:61:2d:1f:90:62:67:b7:6c:77:e1:67:a2:d3:c7: 3e:f8:16:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnOyxEmyqRMtOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NmFhMjk1MzQtN2FhMC00NDVmLThlZjMtOThiMzk4ZjYyY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2QVWORCpwvv2pTGC2deoJfkWkR4MXG68UYH +W8yqiwDm5aXBLyuQwUloUrTArcl2EBVG5imPzlxYJ0oxI3Yo/cueKHyD4Jl635I gao+/TNn9Bu7dZZxxcduLdK5MuFyRIHn+1cvmSpYhcVfzhgxiAco1cbmdlPvynwo wQ54I4chzEeM2xs++rtZFsPikYqSkQteal8OIucKcLNfaO9QIyjYQRXpNCRNkhEC f9WODRSfaO/929XLx6g9bYEIPvi1nA3jlbq55vcvgFSlCBRF4cd4dZznYwx9k+Kx XGD6s2XOHG0sf49Yu9HLcgD03Y6TKOBPLTGAhCsJuqlFg5rO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO/H0hwEY2AXcrd8hd5r1yfQDS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNmMyOWQ5YWQtNGFmMi0z NDljLThkOWQtYWExMWM1M2FhNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdJsrdT6uYgGFZNK+AGwBCaBNliFskznppvDBA3MPt/p4m6MRHFOVQ1 VgzOx3n/OqDHLTOxDRALFsED+uaRkWAwaZ3WQvS2RVWRIr2mLhrBuNvzcFyH9xbz nyIEVUrspcGXvP9tKTaa4ZztyVDVb7lEZhzx4K3FJF/n5TQgtFFjLVsu7QVLGpFU 32xTCaEQGViunWREOKm1oYm7RIqa2PEzXZ/XJQbV9VqaYnRj7VPslIywAVpDNrSz d0JAJxRtsg5ert2fTDg/C79sED+i087SHjmruz8LghD1UlZZ9itfVv+QQYN0mbsQ Y9om1HJhLR+QYme3bHfhZ6LTxz74Fq8= -----END CERTIFICATE-----Generated at Sat Jun 7 23:02:28 2025 by rpki-client