$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa File: 4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa (raw, json) Hash identifier: xdMSKCgb3DODoYn6BgaYhcf5q4cr4UdXnjviCYfPQVM= Subject key identifier: 5E:7E:32:CA:AF:F1:7E:4F:CD:63:CC:59:66:59:40:60:BD:41:52:4B Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F43285849DDF4DD3B1A133FABFF198C40 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa Signing time: Fri 16 May 2025 01:00:46 +0000 ROA not before: Fri 16 May 2025 01:00:46 +0000 ROA not after: Thu 14 Aug 2025 01:00:46 +0000 asID: 14549 IP address blocks: 208.86.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:f4:dd:3b:1a:13:3f:ab:ff:19:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: May 16 01:00:46 2025 GMT Not After : Aug 14 01:00:46 2025 GMT Subject: CN=404ee6c9-a261-4664-9a54-3816ff3176d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:79:54:1f:06:99:6a:dc:46:3b:e5:b4:bd: 2a:d1:c5:0a:a2:57:19:c1:28:43:14:d0:ad:8e:99: 7c:32:17:50:a4:94:8a:e9:9c:4a:5d:8f:ca:e9:d8: 71:a6:0f:f7:97:1b:fd:14:b9:f8:ba:e0:97:a8:af: 46:53:21:32:59:2e:85:de:3f:b7:36:d1:aa:21:ae: 11:be:e6:91:f7:44:3f:e0:a0:7e:a8:01:0b:3e:16: 31:d7:09:f7:8b:68:c6:f8:5a:48:99:de:fc:2f:df: e4:66:c6:45:b4:34:b2:ef:e1:c7:a6:e6:4a:a3:7a: d3:e3:ca:2c:9c:b0:4c:0b:de:a4:a4:04:01:0f:f3: 2f:56:5e:b8:fa:d1:d4:81:38:50:58:1d:b5:bf:ff: 60:43:c0:37:bc:2c:7a:14:21:8a:1b:9a:3c:8b:a7: d0:23:bf:60:ad:1c:8d:ee:dd:b0:6a:3d:5b:c1:56: 32:16:d0:f8:a9:5e:24:f0:f5:df:ac:22:20:0d:74: 15:be:d9:3d:a2:4a:46:a5:b7:b5:9e:7f:5f:b0:54: 1c:12:2b:b3:47:d2:f4:0b:fc:98:a5:32:57:6f:f5: 37:84:80:73:8f:ac:d5:61:16:c1:29:66:4f:7e:d3: 6b:95:c9:5f:75:74:18:53:20:92:b6:f4:18:7a:16: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7E:32:CA:AF:F1:7E:4F:CD:63:CC:59:66:59:40:60:BD:41:52:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 208.86.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4f:08:96:19:29:63:c7:16:b6:04:a4:75:52:42:78:cb:9f: ee:8d:e3:c5:b4:a5:1e:38:35:c7:d0:fb:7b:da:b0:60:31:d7: 77:30:fa:bb:e5:a2:da:b4:49:1b:da:d1:9d:1e:96:e0:f6:5a: 27:37:06:ec:97:56:fa:6b:f3:fb:e6:c7:7b:95:59:d0:67:95: 60:3d:cf:e5:d9:36:e3:da:da:bc:65:a2:ad:8e:38:95:ad:d9: 50:7b:08:b9:c0:a1:6b:7f:54:0b:0a:b7:28:af:8a:2e:54:4e: cb:33:b6:de:41:7f:74:8e:4b:68:09:7a:cf:13:17:4f:5c:a0: 53:43:6e:15:23:b2:3d:f7:d8:ec:0b:94:80:96:1d:2d:e5:1c: 24:d2:ae:50:64:31:b5:f2:21:d5:b1:8c:23:25:76:c6:28:38: 26:7f:4b:bc:02:a0:79:ca:60:66:ed:d7:e2:fa:5b:8c:ae:19: 3d:fc:68:3e:00:9a:31:aa:99:35:ce:3c:7e:b1:f6:f5:5b:d8: bf:25:14:be:f0:3a:98:a3:db:ef:ea:b8:01:02:90:31:99:90: 6e:95:89:f1:ed:60:f7:f2:8d:04:9c:bc:04:7e:5d:ee:45:1c: ed:b3:06:99:cc:48:4f:f6:79:21:24:1f:29:8a:cd:26:d0:ee: f4:11:7e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnd9N07GhM/q/8ZjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk NDA0ZWU2YzktYTI2MS00NjY0LTlhNTQtMzgxNmZmMzE3NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqd5VB8GmWrcRjvltL0q0cUKolcZwShDFNCt jpl8MhdQpJSK6ZxKXY/K6dhxpg/3lxv9FLn4uuCXqK9GUyEyWS6F3j+3NtGqIa4R vuaR90Q/4KB+qAELPhYx1wn3i2jG+FpImd78L9/kZsZFtDSy7+HHpuZKo3rT48os nLBMC96kpAQBD/MvVl64+tHUgThQWB21v/9gQ8A3vCx6FCGKG5o8i6fQI79grRyN 7t2waj1bwVYyFtD4qV4k8PXfrCIgDXQVvtk9okpGpbe1nn9fsFQcEiuzR9L0C/yY pTJXb/U3hIBzj6zVYRbBKWZPftNrlclfdXQYUyCStvQYehbr3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5+Msqv8X5PzWPMWWZZQGC9QVJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvNGNlMTAxZGYtOTFhNy0z YjM2LWJhN2EtNTUxMTJmYzY3ZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApPCJYZKWPHFrYEpHVSQnjLn+6N48W0pR44NcfQ+3vasGAx13cw+rvl otq0SRva0Z0eluD2Wic3BuyXVvpr8/vmx3uVWdBnlWA9z+XZNuPa2rxloq2OOJWt 2VB7CLnAoWt/VAsKtyivii5UTssztt5Bf3SOS2gJes8TF09coFNDbhUjsj332OwL lICWHS3lHCTSrlBkMbXyIdWxjCMldsYoOCZ/S7wCoHnKYGbt1+L6W4yuGT38aD4A mjGqmTXOPH6x9vVb2L8lFL7wOpij2+/quAECkDGZkG6VifHtYPfyjQScvAR+Xe5F HO2zBpnMSE/2eSEkHymKzSbQ7vQRfuc= -----END CERTIFICATE-----Generated at Sun Jun 8 09:02:52 2025 by rpki-client