$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/d3b206e2-4719-372f-84ed-dd6e8f7c5192.roa File: d3b206e2-4719-372f-84ed-dd6e8f7c5192.roa (raw, json) Hash identifier: CDb0VBS40vxegmyulsNZz9O7mzZiYITcYgX/nZ6O73k= Subject key identifier: 47:3F:9F:62:74:06:C7:93:99:A9:49:F8:53:BA:0A:F7:44:EE:99:F9 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F43285849C904E21B2C1B56FF3AB7DBA0 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/d3b206e2-4719-372f-84ed-dd6e8f7c5192.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 396986 IP address blocks: 130.44.212.0/22 maxlen: 32 147.160.176.0/20 maxlen: 32 192.64.14.0/23 maxlen: 32 199.103.24.0/23 maxlen: 32 2605:340::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e2:1b:2c:1b:56:ff:3a:b7:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=3f589473-c9a0-482a-a9ad-35884a3b6dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:f1:43:ec:6c:e6:03:c3:fa:9e:e3:d0:93: 3a:01:d1:64:9f:a6:3c:24:f1:85:a6:23:ff:59:19: 15:57:b7:9d:fa:ab:1c:a5:99:bc:c8:8c:67:bd:bf: b5:29:93:8e:b5:53:44:00:1e:26:18:6b:5b:ae:35: 12:3b:2a:cb:5d:1b:d5:da:e5:27:61:55:c3:3b:9f: ea:fb:e3:1b:d0:3e:71:9d:a4:87:7d:7e:e6:81:09: c4:92:7e:d0:8c:69:b8:9c:1b:57:ce:fb:2d:ed:31: a0:7c:9e:ad:8f:ed:1b:1d:d0:a8:6f:93:04:80:a2: af:d0:ce:ab:bc:8d:7e:a3:04:25:e8:47:7c:66:99: 67:83:4a:4c:aa:6a:9c:8a:b4:e6:32:d8:62:95:b1: 8d:42:c6:3d:41:0e:70:8b:85:1e:fc:2f:49:75:49: 85:9a:c9:e9:66:7e:50:ad:6e:d5:33:72:c8:8e:c3: b6:0a:65:fb:f0:b8:27:f6:fd:45:99:e2:9d:ac:45: 98:45:82:f4:9b:84:ed:c9:91:b1:15:4e:c4:9a:24: 8b:3b:70:68:79:7b:18:65:b2:71:13:93:ed:e4:fa: 0b:7b:94:a8:c4:55:39:66:8c:2f:a2:13:6b:6f:88: b4:d3:0e:a6:84:b8:08:70:61:e9:12:32:ed:0a:00: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:9F:62:74:06:C7:93:99:A9:49:F8:53:BA:0A:F7:44:EE:99:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/d3b206e2-4719-372f-84ed-dd6e8f7c5192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 130.44.212.0/22 147.160.176.0/20 192.64.14.0/23 199.103.24.0/23 IPv6: 2605:340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:69:8c:e8:e7:db:cd:04:5c:18:91:f8:cb:3e:0c:48:0f:f2: 3d:4b:4b:d5:0a:51:6d:65:dc:e3:33:3d:df:45:d0:c8:a0:04: ba:57:93:60:c9:98:8f:c3:5e:6c:11:9a:41:ea:c0:f7:7f:10: 52:f7:99:29:e7:40:95:23:50:fb:93:6b:80:29:a0:92:36:4a: 43:01:29:45:60:bf:90:14:d4:11:cd:fc:d1:dc:03:ef:cf:09: 08:c0:45:31:04:0c:bc:66:64:ef:6c:6b:80:84:44:a4:7b:fe: c5:42:7f:55:ab:92:c1:26:3b:bb:36:93:1d:0c:86:8f:e5:41: 36:18:97:95:30:b6:55:52:6e:49:b9:d4:67:db:d4:2e:66:30: fe:9c:94:96:87:25:0d:89:d2:ee:21:d8:e7:db:03:2a:8c:da: 2b:1a:a0:f3:31:83:3d:f7:0f:44:79:41:c1:1c:f7:0a:02:5e: 4e:0f:09:e5:d0:13:cf:ea:36:11:23:7f:83:09:16:e9:7c:f3: 73:84:0a:bc:bb:4b:73:95:b1:f2:81:d5:df:43:51:e6:09:0c: e0:80:22:a9:d6:2f:9e:1f:51:a1:c6:e2:be:25:c0:76:4b:c4: 2c:e5:9d:76:d0:ac:2e:c3:32:c5:88:d8:8d:55:47:ab:96:3b: f2:58:39:0f -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEnJBOIbLBtW/zq326AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk M2Y1ODk0NzMtYzlhMC00ODJhLWE5YWQtMzU4ODRhM2I2ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN3xQ+xs5gPD+p7j0JM6AdFkn6Y8JPGFpiP/ WRkVV7ed+qscpZm8yIxnvb+1KZOOtVNEAB4mGGtbrjUSOyrLXRvV2uUnYVXDO5/q ++Mb0D5xnaSHfX7mgQnEkn7QjGm4nBtXzvst7TGgfJ6tj+0bHdCob5MEgKKv0M6r vI1+owQl6Ed8Zplng0pMqmqcirTmMthilbGNQsY9QQ5wi4Ue/C9JdUmFmsnpZn5Q rW7VM3LIjsO2CmX78Lgn9v1FmeKdrEWYRYL0m4TtyZGxFU7EmiSLO3BoeXsYZbJx E5Pt5PoLe5SoxFU5ZowvohNrb4i00w6mhLgIcGHpEjLtCgDmBwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFEc/n2J0BseTmalJ+FO6CvdE7pn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvZDNiMjA2ZTItNDcxOS0z NzJmLTg0ZWQtZGQ2ZThmN2M1MTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCgizUAwQE k6CwAwQBwEAOAwQBx2cYMA0EAgACMAcDBQAmBQNAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIhpjOjn280E XBiR+Ms+DEgP8j1LS9UKUW1l3OMzPd9F0MigBLpXk2DJmI/DXmwRmkHqwPd/EFL3 mSnnQJUjUPuTa4ApoJI2SkMBKUVgv5AU1BHN/NHcA+/PCQjARTEEDLxmZO9sa4CE RKR7/sVCf1WrksEmO7s2kx0Mho/lQTYYl5UwtlVSbkm51Gfb1C5mMP6clJaHJQ2J 0u4h2OfbAyqM2isaoPMxgz33D0R5QcEc9woCXk4PCeXQE8/qNhEjf4MJFul883OE Cry7S3OVsfKB1d9DUeYJDOCAIqnWL54fUaHG4r4lwHZLxCzlnXbQrC7DMsWI2I1V R6uWO/JYOQ8= -----END CERTIFICATE-----Generated at Sat Jun 7 22:55:56 2025 by rpki-client