$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aeae9ff8-da94-363f-835c-3e5b156d62d2.roa File: aeae9ff8-da94-363f-835c-3e5b156d62d2.roa (raw, json) Hash identifier: 0wH7MoibJ77/ETqrYo/VJaLg5AKF5WM2nmD+L/k1MEc= Subject key identifier: 9C:C3:75:DA:62:91:61:07:84:A8:00:22:87:EC:80:62:B9:6F:B7:B8 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A4DA03C619CFB2800F4F46E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aeae9ff8-da94-363f-835c-3e5b156d62d2.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 18785 IP address blocks: 208.53.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:3c:61:9c:fb:28:00:f4:f4:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=bb50f8f2-54c1-48ed-888b-e98eee8a7cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:0c:02:2a:47:98:f0:de:44:7a:00:50:a0: 57:b7:90:b1:9e:c1:ff:7d:d7:69:8b:dd:a1:47:74: 25:e9:5e:6c:be:eb:e8:71:a5:4a:96:5d:ce:54:9d: 59:6e:81:ac:d8:5a:42:6e:46:fe:1a:3c:4e:82:22: 45:d8:c4:1b:32:61:d9:8f:0d:35:8e:cb:95:db:a7: 15:0d:97:48:58:24:9a:5b:25:a5:2f:a6:23:42:6a: 23:ea:b9:8d:c7:1e:ad:58:72:49:e4:21:65:2a:9c: 77:68:82:0f:23:c8:40:7f:b6:c1:1f:eb:e2:14:3f: 21:10:9e:4b:02:ae:3e:93:bc:30:fc:1a:de:dc:17: 2b:5a:3f:41:8c:59:00:c9:43:6e:ee:c1:75:10:64: 91:24:9d:33:3d:0f:06:e9:14:13:45:11:79:ff:8d: 95:cc:78:00:b6:79:50:b0:97:31:fb:4b:fe:01:dd: bb:44:13:4f:5a:ec:30:de:b9:53:d8:0c:c9:b3:39: e9:e4:80:df:47:e0:cb:f8:be:b4:e3:07:57:6a:e9: 82:50:b0:11:12:20:5b:21:67:4d:de:6b:db:16:52: 0f:d2:39:61:72:f3:d4:97:70:94:3d:7a:09:d3:7b: b9:c1:5f:18:d8:7c:8c:61:ea:b3:54:64:d9:d6:d6: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:75:DA:62:91:61:07:84:A8:00:22:87:EC:80:62:B9:6F:B7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aeae9ff8-da94-363f-835c-3e5b156d62d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8f:17:2d:f3:c4:1e:61:53:bf:1c:cf:a1:29:fb:c0:2c:32: c3:f9:ff:d1:1b:cf:81:de:03:ff:1d:3e:4c:ec:0d:71:2f:82: 86:38:d5:7a:53:9f:10:02:ec:db:84:38:0f:3d:ca:c6:93:14: b2:6c:b3:fe:fd:f8:fa:c9:f0:19:a1:07:af:2e:0c:0f:7d:a1: 63:94:df:3a:a7:8c:dd:98:47:5f:75:c1:02:f9:cd:14:08:5b: dc:8b:e3:0c:9c:31:67:bb:98:2a:28:fc:4b:32:51:92:6d:e2: f3:6a:e8:fe:0c:fb:3a:c9:51:5a:b5:61:67:53:43:6b:de:a5: 16:6f:d8:65:0c:99:74:39:b6:a5:bc:0a:ed:3f:cb:2a:e9:b8: 3d:57:2d:2a:e7:7a:02:e1:20:9b:16:f3:e5:bb:65:2a:86:49: db:6f:e0:71:0c:20:3a:45:e0:0a:81:56:82:67:90:94:90:4a: 03:a4:54:ea:a6:c6:7e:ad:87:c1:0a:dc:7a:04:35:6f:df:a6: 6e:32:50:9b:26:b8:9f:75:44:7e:e0:2a:6a:3c:21:ca:ec:76: a5:03:0c:27:aa:9b:a4:8a:dd:49:cb:4e:27:16:1c:72:a7:44: e1:b9:ba:2f:6f:03:44:5c:7c:87:1c:04:7a:8a:b7:cb:e3:09: 51:01:a3:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoDxhnPsoAPT0boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YmI1MGY4ZjItNTRjMS00OGVkLTg4OGItZTk4ZWVlOGE3Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIwMAipHmPDeRHoAUKBXt5CxnsH/fddpi92h R3Ql6V5svuvocaVKll3OVJ1ZboGs2FpCbkb+GjxOgiJF2MQbMmHZjw01jsuV26cV DZdIWCSaWyWlL6YjQmoj6rmNxx6tWHJJ5CFlKpx3aIIPI8hAf7bBH+viFD8hEJ5L Aq4+k7ww/Bre3BcrWj9BjFkAyUNu7sF1EGSRJJ0zPQ8G6RQTRRF5/42VzHgAtnlQ sJcx+0v+Ad27RBNPWuww3rlT2AzJsznp5IDfR+DL+L604wdXaumCULAREiBbIWdN 3mvbFlIP0jlhcvPUl3CUPXoJ03u5wV8Y2HyMYeqzVGTZ1tbWKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzDddpikWEHhKgAIofsgGK5b7e4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWVhZTlmZjgtZGE5NC0z NjNmLTgzNWMtM2U1YjE1NmQ2MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaPFy3zxB5hU78cz6Ep+8AsMsP5/9Ebz4HeA/8dPkzsDXEvgoY41XpT nxAC7NuEOA89ysaTFLJss/79+PrJ8BmhB68uDA99oWOU3zqnjN2YR191wQL5zRQI W9yL4wycMWe7mCoo/EsyUZJt4vNq6P4M+zrJUVq1YWdTQ2vepRZv2GUMmXQ5tqW8 Cu0/yyrpuD1XLSrnegLhIJsW8+W7ZSqGSdtv4HEMIDpF4AqBVoJnkJSQSgOkVOqm xn6th8EK3HoENW/fpm4yUJsmuJ91RH7gKmo8IcrsdqUDDCeqm6SK3UnLTicWHHKn ROG5ui9vA0RcfIccBHqKt8vjCVEBoy0= -----END CERTIFICATE-----Generated at Wed Jul 9 11:25:11 2025 by rpki-client