$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2f3a8a0d-c39e-3f30-8e6e-aa0bb2a6f588.roa File: 2f3a8a0d-c39e-3f30-8e6e-aa0bb2a6f588.roa (raw, json) Hash identifier: YFoQdzcHHbCOtn48hpEFKk9NNC5jiNRUuWp9YVCuqJs= Subject key identifier: F2:EE:AA:6A:55:48:6C:60:9C:0D:C4:0F:22:A8:30:BC:45:C3:4E:68 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584A0484843CB3277FF99E067EC0 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2f3a8a0d-c39e-3f30-8e6e-aa0bb2a6f588.roa Signing time: Thu 29 May 2025 20:31:00 +0000 ROA not before: Thu 29 May 2025 20:31:00 +0000 ROA not after: Wed 27 Aug 2025 20:31:00 +0000 asID: 32806 IP address blocks: 74.113.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:04:84:84:3c:b3:27:7f:f9:9e:06:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: May 29 20:31:00 2025 GMT Not After : Aug 27 20:31:00 2025 GMT Subject: CN=96ec61dc-685e-4f4d-8ec0-9d8e69dc8ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:4d:cb:1a:cd:9b:b2:60:8b:4c:de:2f:1e: 2b:d1:a3:35:66:fe:f7:79:3c:66:62:7e:9e:8c:ab: d6:ff:fc:d0:6e:73:c1:eb:d2:20:ba:dc:f6:80:44: 25:bb:c3:c6:35:52:1c:25:76:c9:f8:5a:89:42:90: 45:89:37:f8:49:7c:88:56:14:1a:a6:fb:54:b8:dd: 3e:50:e2:fd:6f:6e:4c:14:b9:4d:19:f1:3b:38:4d: f8:bf:e2:e1:25:6f:a2:6c:f3:2f:07:5b:82:39:72: 70:19:80:32:ff:18:df:39:ce:e0:0b:43:6f:12:c9: b1:81:4c:f9:78:3f:92:91:ab:0b:da:70:93:41:1f: d7:d9:19:35:1c:ba:a7:3a:4d:fa:d9:48:7e:ac:a7: 50:5f:81:d9:22:ad:51:ab:c7:fe:c4:69:50:00:c1: 2a:8a:f8:fc:61:5d:3e:eb:21:d3:b4:1b:7b:bf:fa: ab:ad:4f:de:b5:e4:d4:5e:b8:e5:cc:20:e9:25:38: 7e:30:4c:52:ac:06:79:e4:b0:34:29:25:6b:e1:ff: bc:7f:f5:80:2c:a2:55:b1:b2:91:79:7e:58:b9:85: 19:e8:b3:2d:02:47:d0:37:fa:1b:47:44:2a:a1:d6: b0:30:8e:7e:d3:ed:55:f1:88:81:18:2c:2e:10:10: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EE:AA:6A:55:48:6C:60:9C:0D:C4:0F:22:A8:30:BC:45:C3:4E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2f3a8a0d-c39e-3f30-8e6e-aa0bb2a6f588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 74.113.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b9:4c:4d:9b:18:d8:c5:a7:08:a2:f3:dd:21:c5:ea:57:f9: 3e:ba:1e:45:77:b1:ce:92:e1:d5:49:ac:f9:7d:60:36:9f:31: 67:96:f9:d8:50:7d:59:b2:c3:89:a1:3a:d9:c3:a2:ce:b7:8b: 9c:f5:08:e2:aa:fa:e9:f8:17:02:73:da:c7:c1:1b:c7:5e:58: ff:72:b1:0e:48:d9:d4:7b:4a:1d:a8:d7:bf:fb:86:cd:33:5a: 8a:2f:48:c2:3d:15:48:38:53:cd:f9:1e:74:4d:ed:d9:51:2c: 07:24:68:37:98:55:a7:4f:33:52:1b:90:0e:4f:3a:12:8d:33: 75:f6:f7:f8:31:7f:6a:79:6f:b6:77:6f:a0:be:f3:1e:f8:2b: 1b:85:9e:11:af:d6:db:46:60:2f:6a:90:ca:c1:d3:47:66:bb: 02:17:e6:fe:1a:4f:ba:e4:e3:62:b0:ed:e8:19:d0:8c:35:74: 8e:b5:28:04:c4:8f:ad:47:24:a3:31:02:55:ff:5f:7e:d7:f1: 50:3a:eb:46:e6:0d:c1:81:d1:b4:97:3f:c8:a2:7a:71:f1:7d: a2:08:52:b9:43:0c:c3:83:58:4b:ac:29:17:1a:89:91:f9:77: 38:fd:e9:db:1e:74:4d:8b:f9:7f:0a:b0:9a:01:31:97:16:91: a9:15:db:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoEhIQ8syd/+Z4GfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDUyOTIwMzEwMFoXDTI1MDgyNzIwMzEwMFowLzEtMCsGA1UEAxMk OTZlYzYxZGMtNjg1ZS00ZjRkLThlYzAtOWQ4ZTY5ZGM4ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjRNyxrNm7Jgi0zeLx4r0aM1Zv73eTxmYn6e jKvW//zQbnPB69Igutz2gEQlu8PGNVIcJXbJ+FqJQpBFiTf4SXyIVhQapvtUuN0+ UOL9b25MFLlNGfE7OE34v+LhJW+ibPMvB1uCOXJwGYAy/xjfOc7gC0NvEsmxgUz5 eD+SkasL2nCTQR/X2Rk1HLqnOk362Uh+rKdQX4HZIq1Rq8f+xGlQAMEqivj8YV0+ 6yHTtBt7v/qrrU/eteTUXrjlzCDpJTh+MExSrAZ55LA0KSVr4f+8f/WALKJVsbKR eX5YuYUZ6LMtAkfQN/obR0QqodawMI5+0+1V8YiBGCwuEBDb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLuqmpVSGxgnA3EDyKoMLxFw05oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMmYzYThhMGQtYzM5ZS0z ZjMwLThlNmUtYWEwYmIyYTZmNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi5TE2bGNjFpwii890hxepX+T66HkV3sc6S4dVJrPl9YDafMWeW+dhQ fVmyw4mhOtnDos63i5z1COKq+un4FwJz2sfBG8deWP9ysQ5I2dR7Sh2o17/7hs0z WoovSMI9FUg4U835HnRN7dlRLAckaDeYVadPM1IbkA5POhKNM3X29/gxf2p5b7Z3 b6C+8x74KxuFnhGv1ttGYC9qkMrB00dmuwIX5v4aT7rk42Kw7egZ0Iw1dI61KATE j61HJKMxAlX/X37X8VA660bmDcGB0bSXP8iienHxfaIIUrlDDMODWEusKRcaiZH5 dzj96dsedE2L+X8KsJoBMZcWkakV28M= -----END CERTIFICATE-----Generated at Fri Jun 6 23:45:21 2025 by rpki-client