$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa File: 48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa (raw, json) Hash identifier: PhA3XW2X+fQJspcCGtimBx7mVBq+bSoFdM4dFNk9MZM= Subject key identifier: 55:46:07:5B:84:E3:B0:A8:32:2E:D2:6C:39:60:AB:3C:DE:2E:3E:98 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A6C55E1FDC798D19684FE1280 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 401415 IP address blocks: 216.249.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:e1:fd:c7:98:d1:96:84:fe:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=96cf9196-b0bb-417d-9044-ec3f1d28271a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:5f:10:5b:36:92:64:11:20:a4:98:b6:36: 13:0a:98:77:09:a7:7c:f2:a4:e8:28:d9:dd:e5:64: 98:9c:bd:15:25:5f:c6:91:52:33:89:db:a6:c9:07: 90:b5:98:a0:29:18:92:8f:c8:51:b5:5a:a5:6c:af: a5:dc:65:2d:7e:d6:0f:d7:ff:f5:54:61:ac:26:1a: 30:5e:51:e8:6d:8b:2b:e0:5f:49:65:d4:c9:61:6f: 09:f5:19:24:da:4b:78:a2:86:5b:1b:79:b6:b7:4b: c1:9a:6a:62:6e:13:53:1a:19:9a:21:9f:1e:f4:83: 4d:fb:b3:68:6b:74:26:7e:4a:5b:2f:72:9e:e0:45: 4e:60:24:b1:10:fa:f3:d3:e0:5a:84:a6:9d:3b:11: c0:f2:cf:c5:c4:81:d4:8b:55:36:c2:b6:af:c3:fc: cf:36:b8:95:55:2c:be:24:ca:48:81:ee:4f:cf:91: e7:87:24:c9:1f:5f:96:bb:e1:c1:fb:0c:c3:49:0e: 0a:1f:6b:90:96:c1:9f:02:ec:84:4c:5b:16:87:f4: be:2e:83:e5:3d:59:7b:3e:a0:cd:4d:96:c8:0c:7e: d5:92:dd:9f:00:d6:ac:99:cc:4a:7e:54:18:c5:99: ef:dd:87:75:17:80:81:71:e7:78:47:47:c9:18:f7: 9f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:46:07:5B:84:E3:B0:A8:32:2E:D2:6C:39:60:AB:3C:DE:2E:3E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:60:bd:28:f9:53:f9:c3:87:49:43:28:04:ca:b0:67:c5:67: 8c:dc:9e:89:98:89:35:ee:bc:e4:a2:6a:9f:bf:73:d5:32:0d: 1c:9f:b9:ef:63:79:1f:73:96:73:01:76:5c:a9:6c:a7:21:5b: 94:c6:ff:2d:c8:a3:d6:5c:b6:63:55:74:59:36:94:23:35:09: 95:a7:60:7e:cf:1d:d2:7e:24:a5:a5:78:a3:1a:f2:db:1f:88: f8:9f:42:88:96:57:d5:8d:11:6f:52:ba:6a:8b:f4:2c:3f:2a: 8a:8e:3f:cb:26:65:6b:95:b6:de:0e:f8:b2:44:71:a9:5e:02: ca:5b:ee:45:56:22:a6:24:a3:67:37:5b:9b:90:d4:a9:8a:2f: 33:19:4e:8e:dd:05:84:a3:ba:b6:c2:17:e7:a0:22:7c:33:55: 41:79:0f:ee:72:58:2c:c7:e7:4e:5d:5a:25:b2:86:f0:f8:ad: cb:03:bd:82:94:a5:93:17:97:1c:c9:3b:03:a1:37:2f:4d:20: 6d:c6:e7:b4:c8:f9:ce:5b:5d:a9:d9:7f:80:9d:71:08:65:90: 55:32:f7:49:cf:d9:c8:a8:48:7e:72:4a:f1:54:fa:d7:05:c3: b3:b0:9e:25:c4:99:eb:ef:ca:94:1c:14:6f:40:15:20:09:d4: fe:d2:88:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeH9x5jRloT+EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OTZjZjkxOTYtYjBiYi00MTdkLTkwNDQtZWMzZjFkMjgyNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdFfEFs2kmQRIKSYtjYTCph3Cad88qToKNnd 5WSYnL0VJV/GkVIzidumyQeQtZigKRiSj8hRtVqlbK+l3GUtftYP1//1VGGsJhow XlHobYsr4F9JZdTJYW8J9Rkk2kt4ooZbG3m2t0vBmmpibhNTGhmaIZ8e9INN+7No a3QmfkpbL3Ke4EVOYCSxEPrz0+BahKadOxHA8s/FxIHUi1U2wravw/zPNriVVSy+ JMpIge5Pz5HnhyTJH1+Wu+HB+wzDSQ4KH2uQlsGfAuyETFsWh/S+LoPlPVl7PqDN TZbIDH7Vkt2fANasmcxKflQYxZnv3Yd1F4CBced4R0fJGPefnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVGB1uE47CoMi7SbDlgqzzeLj6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDhlNmI5YTMtZGI1OS0z N2MxLWIzMzUtZjMzOGY2M2ZmMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFgvSj5U/nDh0lDKATKsGfFZ4zcnomYiTXuvOSiap+/c9UyDRyfue9j eR9zlnMBdlypbKchW5TG/y3Io9ZctmNVdFk2lCM1CZWnYH7PHdJ+JKWleKMa8tsf iPifQoiWV9WNEW9SumqL9Cw/KoqOP8smZWuVtt4O+LJEcaleAspb7kVWIqYko2c3 W5uQ1KmKLzMZTo7dBYSjurbCF+egInwzVUF5D+5yWCzH505dWiWyhvD4rcsDvYKU pZMXlxzJOwOhNy9NIG3G57TI+c5bXanZf4CdcQhlkFUy90nP2cioSH5ySvFU+tcF w7OwniXEmevvypQcFG9AFSAJ1P7SiBg= -----END CERTIFICATE-----Generated at Wed Jul 9 11:26:16 2025 by rpki-client