$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa File: 3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa (raw, json) Hash identifier: Y6q4ojSqn6r7mLiLZCstVPfvdyrZ+LI6zY6NEL7l87Q= Subject key identifier: 8A:3F:BA:FF:4F:11:4F:2D:AA:5E:25:70:8F:64:E6:FF:25:DF:61:95 Certificate issuer: /CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Certificate serial: 010D0C9F4328584A07D529F9972B9534AFA5CF40 Authority key identifier: 77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 3561 IP address blocks: 204.239.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:29:f9:97:2b:95:34:af:a5:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=98ae3656-72b6-4dc3-9124-cad7f5c1ddc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:98:59:f6:07:2a:ff:4a:61:be:2b:96:51:82: 4d:31:b4:39:bd:73:22:25:56:93:c9:22:19:a6:43: d3:49:44:76:aa:4b:be:44:d2:d3:59:c3:0a:87:92: 64:bf:61:f6:fd:a4:05:01:95:99:4b:63:1e:b6:05: b8:3d:bb:f4:67:28:c4:c9:03:b6:be:2a:a2:b7:5c: e1:0b:ec:db:7f:93:55:80:d9:19:3b:28:8a:6a:eb: f6:a9:d3:ad:71:98:12:a9:88:5c:dc:8a:c9:58:51: 23:6d:71:74:58:8d:98:16:2c:a2:43:bc:14:2d:b9: 79:5c:be:f3:53:08:33:40:1d:9f:f2:67:fc:3a:fc: 2d:e5:38:f2:5b:12:2e:4e:62:82:78:d6:f8:22:1a: 87:8a:9b:bd:ae:f1:57:49:88:7d:1f:8f:27:54:44: d6:e1:27:5a:85:25:1d:ec:e5:e4:22:13:70:7b:e5: 9d:5f:03:55:f9:f1:73:4d:bc:c4:16:55:b2:fe:25: 39:64:2e:37:8e:f5:53:70:f8:ad:73:04:3a:1e:61: e8:e6:1a:88:4d:0a:1a:53:31:e0:55:bf:32:06:0d: 31:1d:96:33:96:79:d6:88:26:6e:52:1a:f0:69:44: 01:af:1e:3a:17:b4:06:0f:18:a7:50:2f:58:87:44: 1d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3F:BA:FF:4F:11:4F:2D:AA:5E:25:70:8F:64:E6:FF:25:DF:61:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl X509v3 Authority Key Identifier: keyid:77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer sbgp-ipAddrBlock: critical IPv4: 204.239.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1a:22:c4:81:7e:84:c5:d7:ab:71:4f:14:12:50:a8:b7:82: 83:c4:b5:0d:4a:67:9c:51:15:c1:37:74:91:f5:9f:30:99:f6: 88:29:9a:5e:6f:dc:b7:b0:fa:c3:8f:e4:84:ce:a9:e5:56:3d: 0f:e6:b0:b8:0f:ce:11:ce:3d:61:96:07:54:1d:85:8a:17:06: ec:d9:0e:5e:9e:04:f9:d7:bd:47:a7:12:27:1c:39:60:5e:41: f4:30:95:63:21:cd:90:51:96:1d:3e:e9:f9:77:b0:bd:bc:f3: de:d1:93:7f:80:c7:31:ef:8b:0f:20:68:c7:22:dd:33:16:79: 19:1a:46:f9:8e:3b:39:b2:22:e7:ce:1d:2f:2b:1b:12:5e:e2: e9:98:d0:27:00:c6:4d:ec:7f:04:fe:52:7c:e2:ac:cb:14:46: 04:80:09:fa:54:32:fe:ef:13:12:3e:5d:fe:c5:b4:60:2b:37: 2f:60:c0:38:10:30:ea:19:d0:cf:fb:05:a3:6e:1d:73:89:2a: e9:4e:f4:80:3d:5d:50:a2:fa:83:f3:d5:8e:9f:87:5c:47:0c: c8:7f:49:09:47:f1:3b:c2:29:5c:4b:aa:75:bb:94:29:fc:57: 3c:ed:ef:0a:9b:14:26:c9:95:20:0f:19:9f:1b:05:e4:07:c5: 04:30:83:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1Sn5lyuVNK+lz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjNmFiOWEtNTEwMy00Y2Y4LWI0YTItYzMwNDUyOTJj NWQ3MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OThhZTM2NTYtNzJiNi00ZGMzLTkxMjQtY2FkN2Y1YzFkZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjphZ9gcq/0phviuWUYJNMbQ5vXMiJVaTySIZ pkPTSUR2qku+RNLTWcMKh5Jkv2H2/aQFAZWZS2MetgW4Pbv0ZyjEyQO2viqit1zh C+zbf5NVgNkZOyiKauv2qdOtcZgSqYhc3IrJWFEjbXF0WI2YFiyiQ7wULbl5XL7z UwgzQB2f8mf8Ovwt5TjyWxIuTmKCeNb4IhqHipu9rvFXSYh9H48nVETW4SdahSUd 7OXkIhNwe+WdXwNV+fFzTbzEFlWy/iU5ZC43jvVTcPitcwQ6HmHo5hqITQoaUzHg Vb8yBg0xHZYzlnnWiCZuUhrwaUQBrx46F7QGDxinUC9Yh0Qd8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo/uv9PEU8tql4lcI9k5v8l32GVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2 YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0NTI5MmM1ZDcvM2UwNmMxM2EtODdjNC0z NmQxLTg5YmUtM2NmNWRhNWM1MDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2JjNmFiOWEtNTEwMy00Y2Y4LWI0 YTItYzMwNDUyOTJjNWQ3LzdiYzZhYjlhLTUxMDMtNGNmOC1iNGEyLWMzMDQ1Mjky YzVkNy5jcmwwHwYDVR0jBBgwFoAUd9zSI3qHWLw27LDC4sX+govOm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0 NTI5MmM1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMaIsSBfoTF16txTxQSUKi3goPEtQ1KZ5xRFcE3dJH1nzCZ9ogpml5v 3Lew+sOP5ITOqeVWPQ/msLgPzhHOPWGWB1QdhYoXBuzZDl6eBPnXvUenEiccOWBe QfQwlWMhzZBRlh0+6fl3sL28897Rk3+AxzHviw8gaMci3TMWeRkaRvmOOzmyIufO HS8rGxJe4umY0CcAxk3sfwT+UnzirMsURgSACfpUMv7vExI+Xf7FtGArNy9gwDgQ MOoZ0M/7BaNuHXOJKulO9IA9XVCi+oPz1Y6fh1xHDMh/SQlH8TvCKVxLqnW7lCn8 Vzzt7wqbFCbJlSAPGZ8bBeQHxQQwgxU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:16 2025 by rpki-client