$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa File: 002d8448-bfd2-3f15-9758-645ea14a426b.roa (raw, json) Hash identifier: 8tTWEiLTleS4Mn3cpnu5lilg3wab9FGvG8ubvpSOrzw= Subject key identifier: F6:75:BA:EB:DE:62:56:BE:AE:63:D9:5D:A4:E5:25:91:FC:E3:D6:E8 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A4DA0529D1D0D6160857B4080 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 18785 IP address blocks: 216.106.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:52:9d:1d:0d:61:60:85:7b:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=102b88f0-4d9b-4bfe-a17f-ee5164f717d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:1c:26:b7:c5:7a:ad:ba:ca:f9:42:6d:d2: ff:1e:37:fd:d1:9d:c6:61:36:c3:c1:f1:ba:05:0d: cf:36:0b:19:d8:d3:a7:af:25:c8:7a:17:39:0a:ec: 4a:c3:5a:10:6b:72:f6:27:79:c8:0c:05:00:1c:cd: 2f:36:05:c2:3c:80:1e:2a:d3:07:8b:b8:a9:35:fc: 4b:4b:fe:16:d0:88:be:83:95:0d:b5:87:87:b5:4c: 4b:d6:b9:50:e5:73:23:f3:98:57:d0:04:aa:46:b6: b5:53:a0:b7:61:17:f0:02:bf:b8:7e:63:85:43:bd: bf:d4:7d:bd:c9:13:40:94:00:15:e5:bf:70:68:52: 88:24:a6:f2:ca:de:35:69:65:84:df:45:d9:88:69: f4:f3:ef:32:a3:1e:5a:29:65:cc:50:0e:9a:73:41: 56:0a:3f:b3:e4:f0:8a:1d:89:54:78:8f:a6:39:74: dd:c6:26:6c:63:84:9d:14:b6:12:18:21:d4:7c:dc: 3c:b6:dc:f4:c5:13:a4:6d:3b:db:b8:7d:0d:68:5b: d2:6e:7f:09:d1:4a:a6:37:42:3b:be:0e:b4:c4:c0: 6c:c2:eb:bf:03:f4:60:3e:f1:81:72:1f:e5:79:c7: c8:b2:aa:b8:0a:26:70:b3:70:b1:b9:93:4c:03:f6: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:75:BA:EB:DE:62:56:BE:AE:63:D9:5D:A4:E5:25:91:FC:E3:D6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:fb:0b:c7:4d:f3:d1:dd:0c:19:83:22:35:5a:2f:4a:63:b7: 6b:28:d9:e5:fd:5f:2a:cb:17:96:71:6f:e0:79:84:22:d4:d1: bd:4f:17:f3:2b:64:02:03:3b:39:bb:60:0b:bb:97:bd:bd:a1: d1:00:5a:cc:c5:19:14:e6:01:a0:e2:39:bd:90:8f:5d:90:59: f3:0b:40:fe:d6:16:4b:74:2b:04:89:64:4e:1c:b5:c5:71:44: 24:cd:d7:20:24:62:63:e3:40:cb:2b:b6:63:31:4d:39:44:2f: 9d:35:3a:4c:7f:cf:33:fb:a7:2c:c0:ae:2d:19:27:2f:ca:e4: 67:e4:d0:ac:aa:db:3b:2d:96:5b:27:a0:91:61:ff:78:09:a0: b1:33:b0:3a:df:57:93:a8:2f:72:09:29:01:7e:99:39:57:eb: b7:3e:30:82:13:57:bf:5a:16:85:89:73:dc:7f:79:e4:54:b2: 14:d4:1a:a1:be:73:1f:18:57:41:80:81:79:d6:be:48:42:2a: 17:2d:7c:05:6e:77:2a:79:83:15:c9:bf:20:03:b0:a6:44:28: 76:73:12:9d:a4:8d:e2:2c:fa:08:99:f2:96:7f:c1:16:30:8f: ac:22:44:09:d9:10:43:1d:fc:22:aa:6f:02:c5:ff:e4:40:78: b2:85:71:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoFKdHQ1hYIV7QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk MTAyYjg4ZjAtNGQ5Yi00YmZlLWExN2YtZWU1MTY0ZjcxN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9YcJrfFeq26yvlCbdL/Hjf90Z3GYTbDwfG6 BQ3PNgsZ2NOnryXIehc5CuxKw1oQa3L2J3nIDAUAHM0vNgXCPIAeKtMHi7ipNfxL S/4W0Ii+g5UNtYeHtUxL1rlQ5XMj85hX0ASqRra1U6C3YRfwAr+4fmOFQ72/1H29 yRNAlAAV5b9waFKIJKbyyt41aWWE30XZiGn08+8yox5aKWXMUA6ac0FWCj+z5PCK HYlUeI+mOXTdxiZsY4SdFLYSGCHUfNw8ttz0xROkbTvbuH0NaFvSbn8J0UqmN0I7 vg60xMBswuu/A/RgPvGBch/lecfIsqq4CiZws3CxuZNMA/YzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ1uuveYla+rmPZXaTlJZH849boMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDAyZDg0NDgtYmZkMi0z ZjE1LTk3NTgtNjQ1ZWExNGE0MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Gr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMP7C8dN89HdDBmDIjVaL0pjt2so2eX9XyrLF5Zxb+B5hCLU0b1PF/Mr ZAIDOzm7YAu7l729odEAWszFGRTmAaDiOb2Qj12QWfMLQP7WFkt0KwSJZE4ctcVx RCTN1yAkYmPjQMsrtmMxTTlEL501Okx/zzP7pyzAri0ZJy/K5Gfk0Kyq2zstllsn oJFh/3gJoLEzsDrfV5OoL3IJKQF+mTlX67c+MIITV79aFoWJc9x/eeRUshTUGqG+ cx8YV0GAgXnWvkhCKhctfAVudyp5gxXJvyADsKZEKHZzEp2kjeIs+giZ8pZ/wRYw j6wiRAnZEEMd/CKqbwLF/+RAeLKFcdI= -----END CERTIFICATE-----Generated at Wed Jul 9 11:48:10 2025 by rpki-client