$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa File: 3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa (raw, json) Hash identifier: O/g2Rrga82suPAqISqQSdhnh1pl/qACHkOxGYu22qQA= Subject key identifier: E0:7E:58:A0:55:22:2B:2F:C1:E2:46:24:A9:DE:9F:A9:3F:48:C3:E5 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584A6F208090BE49611FE9369300 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 52129 IP address blocks: 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:80:90:be:49:61:1f:e9:36:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=3dd07c30-72e9-4fe3-ad43-5fb1bb57887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:dc:ee:11:11:c7:68:8f:8b:78:36:d3:f0: 29:ab:10:e6:27:ed:d7:a9:bb:a2:99:bb:b7:79:bb: 6b:38:6b:17:4e:d0:4f:6e:9c:c0:6e:5b:14:05:a4: 3f:0a:0b:b9:58:fa:17:c7:bd:25:e6:ad:6e:c0:5b: e2:01:f6:1a:1c:e8:7b:e8:ae:6e:ac:d2:51:39:dc: 69:16:ff:96:b3:02:f4:1a:34:69:a2:f7:c7:cb:4b: f6:4c:27:45:c9:56:6c:cc:0e:76:29:a3:7a:f7:b1: 10:27:66:a0:59:be:03:09:bb:44:15:1e:c7:58:51: b2:f2:a6:0f:7b:8e:5c:ca:21:9f:3c:0c:b5:f2:5c: 3d:07:be:88:af:86:fb:f9:65:10:74:ce:1a:d1:09: 08:0f:fb:d2:5b:f5:e8:09:10:45:75:e2:9f:d8:b0: 09:eb:89:be:51:a4:08:ab:6d:b8:f5:ea:76:20:df: 63:03:7d:74:b4:2e:17:e6:d5:88:ee:b6:fc:a8:f9: c4:c7:56:94:d4:da:d7:52:03:c4:06:05:7d:3e:16: 01:24:dc:da:5f:4e:13:cb:75:8e:eb:78:f9:0e:3b: 84:77:71:11:64:df:15:6a:71:a0:62:2a:d7:96:1a: 52:39:11:d9:fa:3a:ef:ef:89:64:f6:d0:45:49:18: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:58:A0:55:22:2B:2F:C1:E2:46:24:A9:DE:9F:A9:3F:48:C3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9e:2c:83:97:8f:b2:0e:33:ac:3a:20:ec:55:97:72:ae:ad: 2a:64:b9:10:9e:16:36:ba:fc:6b:f8:5b:bb:03:d6:96:52:92: 01:84:c3:7b:ef:3a:e0:f8:75:71:51:54:df:6b:29:c2:2d:e1: a1:2f:b0:db:d3:48:4b:89:0f:8d:ef:af:14:a1:30:63:b5:2f: 6b:94:8d:56:b3:13:d4:72:80:31:ac:87:9d:71:d4:75:7a:af: 72:34:6e:38:ad:b7:33:dc:1a:04:29:42:dd:36:5d:20:f9:32: f0:7e:ca:4c:07:5f:76:a9:9b:18:91:4d:61:38:39:cd:e0:04: 72:2a:9e:28:d0:dc:bf:1d:cf:3a:9c:c5:ee:6d:c0:4b:dd:ae: 4d:67:c3:2c:53:65:38:a5:79:75:2a:14:ec:bc:ae:3c:d5:b2: 2f:be:3d:7f:37:93:c4:18:2a:ce:f4:5a:4a:1f:22:40:7b:82: 0d:ac:ef:2f:53:ec:cd:c4:7e:78:d0:19:c2:50:e0:d3:09:c2: f9:d3:0d:b1:04:74:b8:b8:40:d8:7e:b5:fe:df:b8:4a:4f:68: a9:45:9a:49:9a:99:f4:7f:a0:15:ca:d7:df:64:0c:c1:3c:e3: 44:8b:62:17:aa:01:82:68:31:31:a6:d9:e2:97:f3:ce:8c:66: ba:4d:db:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIICQvklhH+k2kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk M2RkMDdjMzAtNzJlOS00ZmUzLWFkNDMtNWZiMWJiNTc4ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaLc7hERx2iPi3g20/ApqxDmJ+3Xqbuimbu3 ebtrOGsXTtBPbpzAblsUBaQ/Cgu5WPoXx70l5q1uwFviAfYaHOh76K5urNJROdxp Fv+WswL0GjRpovfHy0v2TCdFyVZszA52KaN697EQJ2agWb4DCbtEFR7HWFGy8qYP e45cyiGfPAy18lw9B76Ir4b7+WUQdM4a0QkID/vSW/XoCRBFdeKf2LAJ64m+UaQI q2249ep2IN9jA310tC4X5tWI7rb8qPnEx1aU1NrXUgPEBgV9PhYBJNzaX04Ty3WO 63j5DjuEd3ERZN8VanGgYirXlhpSORHZ+jrv74lk9tBFSRhtgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB+WKBVIisvweJGJKnen6k/SMPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvM2ViMjMwZWEtM2FjMC0z Nzk2LTg1YjctOTJhYTRiOTRjZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyeLIOXj7IOM6w6IOxVl3KurSpkuRCeFja6/Gv4W7sD1pZSkgGEw3vv OuD4dXFRVN9rKcIt4aEvsNvTSEuJD43vrxShMGO1L2uUjVazE9RygDGsh51x1HV6 r3I0bjittzPcGgQpQt02XSD5MvB+ykwHX3apmxiRTWE4Oc3gBHIqnijQ3L8dzzqc xe5twEvdrk1nwyxTZTileXUqFOy8rjzVsi++PX83k8QYKs70WkofIkB7gg2s7y9T 7M3EfnjQGcJQ4NMJwvnTDbEEdLi4QNh+tf7fuEpPaKlFmkmamfR/oBXK199kDME8 40SLYheqAYJoMTGm2eKX886MZrpN260= -----END CERTIFICATE-----Generated at Wed Jul 9 19:13:48 2025 by rpki-client