$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa File: dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json) Hash identifier: QJLvJzNQlBosCTjzhF144BMc9p7xKpPTDLa1TKAm2p0= Subject key identifier: 56:8F:84:DA:10:89:19:8A:AA:AC:80:5F:5B:8B:57:D2:FF:17:79:60 Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F43285849D594EC08C562EBD347C685E0 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 134.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ec:08:c5:62:eb:d3:47:c6:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=52a8e1cb-2754-4f5e-9054-ef43a8bde3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:a2:d9:f5:c2:58:01:16:2e:61:cc:99:90: 0b:79:c6:df:6a:ea:bf:79:03:aa:5a:94:2e:66:a0: 06:55:60:97:7f:8c:49:d1:a2:ef:66:98:24:d8:7f: bb:fd:1d:20:3d:42:5d:0b:a4:ac:93:1c:d8:43:ec: f6:11:07:ff:00:6a:2f:a8:02:ac:a8:5c:e6:81:77: ae:b9:69:55:ce:68:cd:68:c4:28:9b:f9:72:1a:b6: ba:27:e8:67:36:d9:36:c6:5b:d1:b8:dc:63:21:16: b0:a9:d2:45:bb:fd:df:27:7e:d9:01:fa:a4:c6:e7: f2:6b:ff:8c:f8:67:f1:67:de:6c:ca:d1:a0:2f:1f: 50:58:43:20:c6:80:c8:0c:d6:d2:2a:c9:50:ea:a9: b2:ed:67:4c:b0:e5:ad:c3:d2:8a:f6:33:f6:5a:37: 42:65:10:e5:a1:54:a5:94:59:8f:1b:bb:44:02:76: 43:1b:6c:0c:11:58:c7:6a:43:8c:e3:69:d0:df:fe: 0b:91:e2:f8:0f:f5:85:b4:69:6d:bd:3d:9a:74:05: 44:06:2d:2e:9d:13:ec:50:68:f8:11:99:a7:48:a9: 13:7a:80:51:32:bf:43:c7:2c:b1:87:3a:ae:01:38: 2e:1e:a7:fa:e3:ad:4f:c0:ad:d8:21:dd:e5:73:4e: 5f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:84:DA:10:89:19:8A:AA:AC:80:5F:5B:8B:57:D2:FF:17:79:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7c:63:c6:03:2f:95:54:8d:ca:15:36:53:7e:c6:9f:f3:78: 1b:31:a1:ab:93:3b:08:cb:97:dd:26:09:03:ea:78:72:2f:1b: 4b:2b:28:57:fe:56:bb:f3:43:e3:1c:6d:b0:56:b5:79:42:19: 69:e6:76:bd:21:52:a3:dd:33:a4:8b:13:95:85:dd:13:62:c5: 40:b2:e3:7a:d8:d8:c9:bc:4b:b2:93:9e:65:81:dc:f0:7b:d2: 3e:93:0c:ce:16:d5:3e:6d:88:fb:dd:89:54:cf:91:65:5b:d8: cf:c6:7f:52:6b:ce:38:46:67:22:0a:ab:1f:d3:9a:c1:25:4d: 26:9f:5b:da:f1:07:6e:b2:3a:04:88:4b:14:3f:3d:b7:bf:1a: 4a:c8:4e:78:db:4c:89:d6:ef:f5:64:9c:45:c0:42:f1:ed:8f: 54:37:50:a4:d1:80:e4:5e:bd:3e:ad:1a:c9:6a:0a:e0:17:73: 3b:34:2d:e2:30:14:b1:e1:35:08:df:e3:c8:82:9d:ee:30:99: 01:d2:35:7b:8f:21:a0:99:d8:7a:e3:fd:63:6a:07:dd:21:d1: f0:79:cc:06:73:53:63:eb:f7:46:2d:13:86:e0:44:a2:e6:ac: 0d:f4:cb:e6:1f:9f:0c:5c:89:e7:3c:b1:ad:24:e3:88:0b:dd: b6:ae:d8:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOwIxWLr00fGheAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NTJhOGUxY2ItMjc1NC00ZjVlLTkwNTQtZWY0M2E4YmRlM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSGi2fXCWAEWLmHMmZALecbfauq/eQOqWpQu ZqAGVWCXf4xJ0aLvZpgk2H+7/R0gPUJdC6SskxzYQ+z2EQf/AGovqAKsqFzmgXeu uWlVzmjNaMQom/lyGra6J+hnNtk2xlvRuNxjIRawqdJFu/3fJ37ZAfqkxufya/+M +GfxZ95sytGgLx9QWEMgxoDIDNbSKslQ6qmy7WdMsOWtw9KK9jP2WjdCZRDloVSl lFmPG7tEAnZDG2wMEVjHakOM42nQ3/4LkeL4D/WFtGltvT2adAVEBi0unRPsUGj4 EZmnSKkTeoBRMr9DxyyxhzquATguHqf6461PwK3YId3lc05f4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaPhNoQiRmKqqyAX1uLV9L/F3lgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvZGMyZjg3MjMtMWEyNS0z YmIzLThhYjEtYjI1NjYyYmExYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl8Y8YDL5VUjcoVNlN+xp/zeBsxoauTOwjLl90mCQPqeHIvG0srKFf+ VrvzQ+McbbBWtXlCGWnmdr0hUqPdM6SLE5WF3RNixUCy43rY2Mm8S7KTnmWB3PB7 0j6TDM4W1T5tiPvdiVTPkWVb2M/Gf1JrzjhGZyIKqx/TmsElTSafW9rxB26yOgSI SxQ/Pbe/GkrITnjbTInW7/VknEXAQvHtj1Q3UKTRgORevT6tGslqCuAXczs0LeIw FLHhNQjf48iCne4wmQHSNXuPIaCZ2Hrj/WNqB90h0fB5zAZzU2Pr90YtE4bgRKLm rA30y+Yfnwxciec8sa0k44gL3bau2Ns= -----END CERTIFICATE-----Generated at Mon Jun 2 16:49:08 2025 by rpki-client