$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa File: 60ee8622-9109-33d6-910b-dbcc8263baa3.roa (raw, json) Hash identifier: jBYJShfD9cm6sO3/ANCFKWL5+Qy6WGHsYuvJFldu9hs= Subject key identifier: 79:01:23:5E:76:16:77:10:9F:F5:4A:24:D9:9A:E5:EE:42:E9:F2:09 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584A6DBB3CDB7F46A5B0F158C100 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 396112 IP address blocks: 208.40.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3c:db:7f:46:a5:b0:f1:58:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=51dfc4d8-32db-4092-ab4a-48b6f54cdf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:3a:98:99:3a:ef:a0:c3:d0:9c:9d:bb:65: 24:d5:35:2d:42:1b:49:c2:1c:ec:37:60:72:ec:dc: db:66:78:ff:4e:1e:89:dc:09:2a:b8:25:b7:b7:cd: de:41:f9:1c:3a:34:31:b0:40:ef:64:e1:f8:96:19: 17:d8:09:43:35:42:5a:4b:53:19:e6:cb:00:eb:3e: f6:e3:77:9d:bc:49:f0:d6:be:71:19:54:88:d0:70: 1e:77:11:dd:b8:11:ff:4d:6b:9c:81:11:b7:66:ef: ed:dc:02:f0:cb:8d:57:9e:f7:87:be:55:90:1e:e1: f6:3e:dd:e5:59:76:35:14:4d:22:86:ff:61:95:43: 0f:17:64:c5:b1:1d:7d:5e:97:9d:6a:c0:21:28:01: d7:05:3e:34:2e:ae:45:e2:e4:33:e6:dd:2e:9d:b9: 19:43:5f:a0:59:a8:44:5e:86:6a:6c:0b:8e:ba:88: 70:15:9f:6c:d3:bf:a5:ea:96:f4:1d:5a:ad:3a:b4: 7a:00:6a:de:87:c4:be:ff:0c:21:b4:ef:a3:05:31: 4b:e3:1e:f3:2b:46:fa:21:4f:91:b0:9f:1e:bb:6f: 5e:66:33:f9:21:cc:18:c3:7d:17:84:b1:86:12:c4: d5:0d:29:7f:e9:91:69:5e:04:5f:c7:bd:f3:6d:2b: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:01:23:5E:76:16:77:10:9F:F5:4A:24:D9:9A:E5:EE:42:E9:F2:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 208.40.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8f:11:ba:af:b7:cd:fc:c4:5d:17:18:32:33:00:fe:cb:c4: e4:fc:68:d1:a8:82:c4:18:9a:11:f7:90:2d:b3:c8:63:3e:ed: d3:eb:45:17:3a:17:95:21:dd:05:8f:55:47:c1:82:a4:bb:5c: d8:71:44:78:61:34:ac:3f:be:d5:53:7c:bd:f9:41:5f:c2:35: 11:64:f7:2d:c0:ba:48:56:fd:4a:41:59:3c:8c:91:cd:93:cc: a9:fd:fa:9d:1b:a3:b8:01:b9:dc:0c:4a:0e:1d:8a:a6:ee:f3: 28:00:bd:a1:e7:f5:d9:ea:cb:d2:95:c8:43:1c:0b:0c:43:2f: 40:42:9a:81:a8:cf:47:df:d2:d9:42:ed:2c:59:7b:7b:c5:ad: 75:b1:e3:5a:d9:8f:72:f7:c1:97:5e:0e:3e:0e:7b:72:46:34: d6:15:65:d4:d9:1e:23:29:71:ac:3c:46:4e:be:f9:48:d8:1e: 15:bb:1a:72:22:32:17:a3:ab:79:be:ef:09:70:e8:35:ee:1e: 70:e2:e8:60:29:b6:87:89:79:2a:e1:26:85:43:a2:9a:b0:a8: 70:e0:d6:b4:6d:c1:ca:be:1c:56:e3:68:53:04:e6:27:f0:8c: cf:89:a9:df:af:67:1c:b4:c2:9b:43:47:17:6d:78:f2:fe:6e: 12:8e:72:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuzzbf0alsPFYwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NTFkZmM0ZDgtMzJkYi00MDkyLWFiNGEtNDhiNmY1NGNkZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2g6mJk676DD0Jydu2Uk1TUtQhtJwhzsN2By 7NzbZnj/Th6J3AkquCW3t83eQfkcOjQxsEDvZOH4lhkX2AlDNUJaS1MZ5ssA6z72 43edvEnw1r5xGVSI0HAedxHduBH/TWucgRG3Zu/t3ALwy41XnveHvlWQHuH2Pt3l WXY1FE0ihv9hlUMPF2TFsR19XpedasAhKAHXBT40Lq5F4uQz5t0unbkZQ1+gWahE XoZqbAuOuohwFZ9s07+l6pb0HVqtOrR6AGreh8S+/wwhtO+jBTFL4x7zK0b6IU+R sJ8eu29eZjP5IcwYw30XhLGGEsTVDSl/6ZFpXgRfx73zbSvRiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkBI152FncQn/VKJNma5e5C6fIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNjBlZTg2MjItOTEwOS0z M2Q2LTkxMGItZGJjYzgyNjNiYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Cj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqPEbqvt838xF0XGDIzAP7LxOT8aNGogsQYmhH3kC2zyGM+7dPrRRc6 F5Uh3QWPVUfBgqS7XNhxRHhhNKw/vtVTfL35QV/CNRFk9y3AukhW/UpBWTyMkc2T zKn9+p0bo7gBudwMSg4diqbu8ygAvaHn9dnqy9KVyEMcCwxDL0BCmoGoz0ff0tlC 7SxZe3vFrXWx41rZj3L3wZdeDj4Oe3JGNNYVZdTZHiMpcaw8Rk6++UjYHhW7GnIi Mhejq3m+7wlw6DXuHnDi6GAptoeJeSrhJoVDopqwqHDg1rRtwcq+HFbjaFME5ifw jM+Jqd+vZxy0wptDRxdtePL+bhKOciw= -----END CERTIFICATE-----Generated at Sat Jul 12 04:52:08 2025 by rpki-client