$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa File: b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa (raw, json) Hash identifier: T0hvgvr8kKE5+c5zEPvT0rizz0BzEOoSBiZE16My3H8= Subject key identifier: 0C:7D:55:62:4E:16:9C:6A:55:0B:AB:C6:60:F5:79:0D:66:DE:39:C9 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F43285849F2E533A9E4D358BA48D54C80 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 40501 IP address blocks: 216.235.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:33:a9:e4:d3:58:ba:48:d5:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=3ca891d6-c52a-4c0c-94b4-8539aab4df1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e5:41:05:20:08:e8:87:a4:ff:55:6d:23:af: 78:0c:0e:7c:a3:f0:18:28:34:3d:38:77:d4:c8:65: f2:fd:1e:c9:d9:bb:76:04:a2:9e:6f:99:4c:40:a7: 01:40:51:b8:ba:56:63:84:54:a5:82:65:0d:d0:4e: 90:95:37:13:b2:bb:ce:39:58:31:ac:f6:19:1f:82: d3:46:f8:fa:6c:3b:e6:f6:c9:2d:83:97:c9:af:5e: 33:76:db:4c:79:ed:fd:a2:5b:d3:6b:05:00:9c:fd: 56:df:13:23:9d:9f:54:49:86:36:3e:40:26:f8:46: ed:17:82:07:14:ab:b1:b4:4f:25:47:85:86:6b:e7: 96:f3:ca:16:54:5d:72:ab:e9:fe:a7:40:59:03:1b: 6a:31:b3:3e:b3:5a:6b:b1:f7:5d:d8:89:2d:5d:c4: c4:5e:98:72:62:ef:5f:d1:d4:b4:db:71:e6:1e:d5: 1a:43:0e:70:99:73:a8:08:0c:be:da:d2:a0:13:a0: 61:39:38:e9:10:6b:81:71:c9:e7:6b:b5:6b:b7:e7: 94:5e:f2:18:77:4c:20:15:0a:67:14:92:5e:7d:ae: 10:aa:74:c1:63:05:24:8f:4d:4c:d8:5f:c2:a6:80: c8:ff:fb:c3:1d:90:d5:4c:69:28:c7:9a:7d:a2:77: 06:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7D:55:62:4E:16:9C:6A:55:0B:AB:C6:60:F5:79:0D:66:DE:39:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:89:21:d7:19:31:8f:46:de:34:05:a3:04:dc:33:e3:61:fe: 48:cf:e5:42:be:18:ca:2d:26:46:b2:9b:57:30:d1:56:05:ff: 62:ef:38:93:b8:1b:ef:26:07:0c:2d:08:c4:db:57:20:30:02: 9d:91:c1:e4:8c:3b:e7:2f:a8:ee:0e:6c:e0:32:55:89:6e:18: 27:80:23:03:5e:60:07:65:c5:51:d0:fb:e9:b2:c7:50:5a:95: 74:bf:5c:49:d0:60:d8:97:1a:a5:79:22:a9:0d:a6:8b:ec:39: 48:ce:36:11:63:8e:5a:01:e9:23:67:16:13:87:68:3d:e2:c8: bb:fc:2a:8f:b8:70:9d:e0:28:eb:8d:af:87:11:d3:f0:1b:92: fc:2b:c2:0e:fe:de:62:85:34:e1:fd:8b:49:c6:b6:82:02:8c: f5:05:f9:de:3f:5e:de:6b:bb:5e:fb:85:a0:9b:1f:ef:60:43: f6:ca:a0:eb:a8:7e:7a:e3:f0:5c:50:b7:00:74:ae:2c:6c:8c: 09:43:00:18:89:df:ec:63:c0:06:17:24:c0:98:12:db:c4:7f: e9:67:09:96:76:79:7c:7b:da:be:76:3c:89:f0:5b:43:21:e1: 56:1d:ba:14:c5:e3:e9:02:69:be:74:df:65:a6:d2:e2:b0:98: 3d:a6:93:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TOp5NNYukjVTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk M2NhODkxZDYtYzUyYS00YzBjLTk0YjQtODUzOWFhYjRkZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OVBBSAI6Iek/1VtI694DA58o/AYKDQ9OHfU yGXy/R7J2bt2BKKeb5lMQKcBQFG4ulZjhFSlgmUN0E6QlTcTsrvOOVgxrPYZH4LT Rvj6bDvm9sktg5fJr14zdttMee39olvTawUAnP1W3xMjnZ9USYY2PkAm+EbtF4IH FKuxtE8lR4WGa+eW88oWVF1yq+n+p0BZAxtqMbM+s1prsfdd2IktXcTEXphyYu9f 0dS023HmHtUaQw5wmXOoCAy+2tKgE6BhOTjpEGuBccnna7Vrt+eUXvIYd0wgFQpn FJJefa4QqnTBYwUkj01M2F/CpoDI//vDHZDVTGkox5p9oncGmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx9VWJOFpxqVQurxmD1eQ1m3jnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvYjZlY2NmZDAtZmJjNC0z N2NkLWI4ZWEtZjMzYTAzYjdjNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OteMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICJIdcZMY9G3jQFowTcM+Nh/kjP5UK+GMotJkaym1cw0VYF/2LvOJO4 G+8mBwwtCMTbVyAwAp2RweSMO+cvqO4ObOAyVYluGCeAIwNeYAdlxVHQ++myx1Ba lXS/XEnQYNiXGqV5IqkNpovsOUjONhFjjloB6SNnFhOHaD3iyLv8Ko+4cJ3gKOuN r4cR0/Abkvwrwg7+3mKFNOH9i0nGtoICjPUF+d4/Xt5ru177haCbH+9gQ/bKoOuo fnrj8FxQtwB0rixsjAlDABiJ3+xjwAYXJMCYEtvEf+lnCZZ2eXx72r52PInwW0Mh 4VYduhTF4+kCab5032Wm0uKwmD2mk88= -----END CERTIFICATE-----Generated at Sun Jun 8 14:45:50 2025 by rpki-client