$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa File: f3485625-9688-304a-b7ce-39a5f6982850.roa (raw, json) Hash identifier: X8HjYl+TeJWT5WzvPgBSeV6btVGcLrG2KapF73zcEiM= Subject key identifier: 99:C0:76:48:63:CB:A6:68:39:6C:2B:0F:4C:28:A5:87:B0:85:0A:F5 Certificate issuer: /CN=1dc67402-ba21-48d8-9973-37169338b194 Certificate serial: 010D0C9F43285849F44A5C9621569A720A378E80 Authority key identifier: CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 396982 IP address blocks: 216.114.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5c:96:21:56:9a:72:0a:37:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc67402-ba21-48d8-9973-37169338b194 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=c0fcef3c-4793-467c-a566-98ef43091edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:33:0f:41:30:7b:de:24:18:b5:f4:78:78:a9: 57:68:2b:ed:2b:3c:43:1b:38:c6:83:fe:ff:8c:1a: 92:d4:1d:a9:ce:0b:a1:04:b9:41:59:73:3c:5e:4d: 5b:6f:37:2e:2d:b3:b6:7e:30:db:4a:49:86:11:b2: 73:52:ca:d7:a1:fc:39:b5:9a:b8:55:e0:3b:23:d9: 37:65:a8:67:09:1c:55:b4:28:1e:ed:cf:7b:10:0e: 6f:39:d2:96:3a:84:7b:88:54:18:0d:bb:8b:a3:7d: 9a:bb:62:3b:80:1f:db:9c:0f:c5:59:a4:ae:0c:45: ba:06:68:1a:43:ad:cf:23:52:89:51:c7:e2:b8:2a: 3f:ed:32:fd:2a:49:b6:c6:b2:33:66:13:a3:85:73: c9:01:26:3a:83:93:71:f2:9f:d8:c0:36:95:a6:43: a5:26:98:47:9b:db:7a:6e:63:68:d7:77:06:a4:5d: 0f:21:cc:7c:be:5e:74:ab:5b:00:c7:8f:7d:2e:04: 7c:49:29:77:11:4f:ab:8b:6c:34:73:44:05:cc:b7: 52:ab:16:ca:64:e1:bf:c9:47:00:3e:2f:d7:5d:51: 53:e7:98:c0:b4:9d:ee:5f:67:c3:a8:fc:c1:42:e0: 7b:b7:5c:51:7a:f8:7d:03:49:e5:aa:b4:ad:b8:4b: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C0:76:48:63:CB:A6:68:39:6C:2B:0F:4C:28:A5:87:B0:85:0A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl X509v3 Authority Key Identifier: keyid:CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer sbgp-ipAddrBlock: critical IPv4: 216.114.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6e:37:79:ab:e9:ef:d9:71:ef:4d:d1:da:78:78:98:f7:09: 97:ca:47:37:00:8b:e0:5d:94:fc:9e:5d:5d:fc:34:37:4b:ea: 58:07:a3:f9:6a:c7:e3:29:03:2a:45:77:cb:13:34:90:2e:ce: e5:fc:2e:fa:9d:97:66:e9:5c:c1:c5:c5:52:db:65:a3:96:70: b8:85:f6:c2:ee:98:2e:8d:4f:17:83:22:b2:fe:40:5b:47:8b: be:5c:6d:b3:06:57:03:5f:da:92:6a:60:45:11:2f:1b:46:22: da:a4:7d:f5:ac:60:49:28:d8:e2:5a:9c:5a:dd:ef:16:5d:9b: dc:cf:2e:58:67:ac:60:96:36:ce:b3:09:77:6d:4a:c9:88:a7: 2f:d4:78:02:0d:44:a7:11:a3:10:61:12:a8:b4:74:a4:4a:11: 70:76:db:79:51:1a:03:eb:08:bb:ef:18:aa:92:5e:58:50:f3: 93:a1:c6:41:87:8a:f1:46:6d:a5:8d:ff:08:a4:0e:8a:d6:0c: 35:a2:27:80:80:5a:a7:f3:47:57:6f:59:60:db:e9:cb:98:ab: 10:5b:8f:38:51:36:70:40:ed:2d:51:a5:c8:71:81:94:99:cd: 08:d2:91:c3:eb:f4:a0:d8:1a:a5:0b:b4:76:32:e0:8e:3e:53: 81:af:3f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SlyWIVaacgo3joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRjNjc0MDItYmEyMS00OGQ4LTk5NzMtMzcxNjkzMzhi MTk0MB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk YzBmY2VmM2MtNDc5My00NjdjLWE1NjYtOThlZjQzMDkxZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DMPQTB73iQYtfR4eKlXaCvtKzxDGzjGg/7/ jBqS1B2pzguhBLlBWXM8Xk1bbzcuLbO2fjDbSkmGEbJzUsrXofw5tZq4VeA7I9k3 ZahnCRxVtCge7c97EA5vOdKWOoR7iFQYDbuLo32au2I7gB/bnA/FWaSuDEW6Bmga Q63PI1KJUcfiuCo/7TL9Kkm2xrIzZhOjhXPJASY6g5Nx8p/YwDaVpkOlJphHm9t6 bmNo13cGpF0PIcx8vl50q1sAx499LgR8SSl3EU+ri2w0c0QFzLdSqxbKZOG/yUcA Pi/XXVFT55jAtJ3uX2fDqPzBQuB7t1xRevh9A0nlqrStuEt7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnAdkhjy6ZoOWwrD0wopYewhQr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZGM2 NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2OTMzOGIxOTQvZjM0ODU2MjUtOTY4OC0z MDRhLWI3Y2UtMzlhNWY2OTgyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWRjNjc0MDItYmEyMS00OGQ4LTk5 NzMtMzcxNjkzMzhiMTk0LzFkYzY3NDAyLWJhMjEtNDhkOC05OTczLTM3MTY5MzM4 YjE5NC5jcmwwHwYDVR0jBBgwFoAUz+GVb+Ct3hVywh/PA4W5u4cIHcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZGM2NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2 OTMzOGIxOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9uN3mr6e/Zce9N0dp4eJj3CZfKRzcAi+BdlPyeXV38NDdL6lgHo/lq x+MpAypFd8sTNJAuzuX8Lvqdl2bpXMHFxVLbZaOWcLiF9sLumC6NTxeDIrL+QFtH i75cbbMGVwNf2pJqYEURLxtGItqkffWsYEko2OJanFrd7xZdm9zPLlhnrGCWNs6z CXdtSsmIpy/UeAINRKcRoxBhEqi0dKRKEXB223lRGgPrCLvvGKqSXlhQ85OhxkGH ivFGbaWN/wikDorWDDWiJ4CAWqfzR1dvWWDb6cuYqxBbjzhRNnBA7S1RpchxgZSZ zQjSkcPr9KDYGqULtHYy4I4+U4GvP4g= -----END CERTIFICATE-----Generated at Thu Jun 5 19:22:28 2025 by rpki-client