$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa File: 4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa (raw, json) Hash identifier: geiZ7tJDGv5/JBzs8faOTmwKUDTFA0mk8nmgsvlrB9I= Subject key identifier: 73:24:57:81:06:18:DB:6E:F8:2F:44:FC:90:96:AC:C0:46:C2:FC:A6 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F43285849CE9A61F3236FB9B3C554BD80 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7018 IP address blocks: 208.52.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:61:f3:23:6f:b9:b3:c5:54:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=ce28986c-c71a-466e-8887-f2a3bb132a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:29:de:58:ba:b0:89:94:39:84:25:54:92: a5:65:66:5b:39:8c:ff:ec:30:a7:db:66:ae:3a:30: 8c:a5:14:5b:16:6e:87:14:51:aa:5a:56:66:5e:bc: 0f:03:ac:65:c3:e8:32:cf:58:9c:22:02:b3:cc:12: c1:7f:79:eb:96:92:ed:a5:62:aa:f0:5e:d1:fb:e3: 85:07:37:6b:4e:00:7b:df:26:65:63:55:65:31:de: ec:1d:54:ba:09:19:31:83:54:11:02:97:e3:4a:b5: 35:ad:8a:61:a6:c4:69:e4:af:56:23:8b:a8:9d:c5: f7:25:af:40:d4:42:97:e2:02:38:6a:13:8c:74:e1: 0e:73:27:a7:dc:93:02:5c:ca:1e:04:ab:41:b5:fa: 75:b1:c1:47:fd:f1:48:15:f7:86:96:06:51:ab:bd: 1f:f2:af:6d:6e:8a:fb:5c:c1:8f:2e:8d:e2:c5:0b: 14:72:a1:b7:31:0c:5f:7d:07:91:e9:83:0a:d8:7d: 60:51:49:f6:c1:3e:79:7d:82:72:76:12:44:8d:24: 88:f5:77:b8:2c:83:6c:b3:90:45:dc:bc:73:2d:af: c9:d0:97:ea:69:c9:85:2b:05:35:56:64:eb:25:49: a8:df:c4:4b:73:4d:85:4a:89:a8:57:9a:b8:07:23: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:57:81:06:18:DB:6E:F8:2F:44:FC:90:96:AC:C0:46:C2:FC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 208.52.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:02:65:ca:da:14:a3:a6:00:79:05:56:2c:eb:a5:5f:29:b3: e6:01:34:d9:4d:dd:55:bf:13:10:1b:c0:4d:f1:ad:f9:c7:2c: 6c:3c:42:c5:65:5f:8f:0d:b9:dc:18:90:75:27:e4:fe:5d:eb: 2e:65:8a:94:a4:b3:de:af:fe:c7:05:ab:76:3c:9b:14:d0:6e: 92:fc:06:b2:32:35:16:2f:ef:3c:fe:cc:72:6c:a4:c5:ac:ef: 82:d3:d2:e6:af:3a:b3:06:96:42:2d:45:1d:0b:d7:be:17:27: 5f:02:63:6d:28:41:6b:81:13:6c:54:b6:5f:6f:a0:24:f7:2c: 03:02:5a:a5:fa:a9:83:13:7f:5e:16:16:43:ba:e8:ef:e5:4d: 22:ed:e5:41:ed:a6:88:02:69:cc:64:71:dc:3c:a8:3d:36:ac: 84:be:93:da:8b:4c:29:b9:21:66:c8:3f:98:f5:64:43:65:18: ac:37:0a:cb:5c:7c:91:fb:64:34:5a:b1:d4:07:a2:97:f6:58: 8c:2f:07:88:7f:d5:ea:e0:33:c4:8c:a9:07:b8:0f:2c:a4:01: db:b1:8a:d4:d1:3f:61:f6:33:97:09:f8:25:59:a9:21:b5:16: 63:7f:20:87:23:c4:75:f5:95:7e:f2:72:65:aa:a0:c1:24:fd: d1:37:ba:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmHzI2+5s8VUvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Y2UyODk4NmMtYzcxYS00NjZlLTg4ODctZjJhM2JiMTMyYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1cp3li6sImUOYQlVJKlZWZbOYz/7DCn22au OjCMpRRbFm6HFFGqWlZmXrwPA6xlw+gyz1icIgKzzBLBf3nrlpLtpWKq8F7R++OF BzdrTgB73yZlY1VlMd7sHVS6CRkxg1QRApfjSrU1rYphpsRp5K9WI4uoncX3Ja9A 1EKX4gI4ahOMdOEOcyen3JMCXMoeBKtBtfp1scFH/fFIFfeGlgZRq70f8q9tbor7 XMGPLo3ixQsUcqG3MQxffQeR6YMK2H1gUUn2wT55fYJydhJEjSSI9Xe4LINss5BF 3LxzLa/J0JfqacmFKwU1VmTrJUmo38RLc02FSomoV5q4ByORAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMkV4EGGNtu+C9E/JCWrMBGwvymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvNGE4YjJjMDktN2UzNS0z ZGU0LWIxMGQtNGIzY2EwMWZlYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABICZcraFKOmAHkFVizrpV8ps+YBNNlN3VW/ExAbwE3xrfnHLGw8QsVl X48NudwYkHUn5P5d6y5lipSks96v/scFq3Y8mxTQbpL8BrIyNRYv7zz+zHJspMWs 74LT0uavOrMGlkItRR0L174XJ18CY20oQWuBE2xUtl9voCT3LAMCWqX6qYMTf14W FkO66O/lTSLt5UHtpogCacxkcdw8qD02rIS+k9qLTCm5IWbIP5j1ZENlGKw3Cstc fJH7ZDRasdQHopf2WIwvB4h/1ergM8SMqQe4DyykAduxitTRP2H2M5cJ+CVZqSG1 FmN/IIcjxHX1lX7ycmWqoMEk/dE3umE= -----END CERTIFICATE-----Generated at Sat Jun 7 17:25:30 2025 by rpki-client