$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dd0038fd-a4c2-3a59-9086-4ec612213489.roa File: dd0038fd-a4c2-3a59-9086-4ec612213489.roa (raw, json) Hash identifier: RNsCQvuU/Li856X+gI1PdlUjAvyutOhrcB01IVhr/7A= Subject key identifier: A0:F3:C6:0F:20:9B:BE:E3:B1:48:F0:34:72:5C:F7:B0:E1:78:29:A4 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A4DA04FAB931ED27B8A931B20 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dd0038fd-a4c2-3a59-9086-4ec612213489.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 18785 IP address blocks: 216.106.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:4f:ab:93:1e:d2:7b:8a:93:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=aabc8b35-31e3-4ab3-a56e-80f8e5d940ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:58:73:2c:33:35:84:89:22:b9:df:06:f2: 6d:be:aa:11:5c:4c:0f:a2:29:3e:82:e9:e3:ae:7f: 6f:43:39:5f:9c:1b:1e:97:64:80:21:01:f9:ed:41: e8:31:a5:12:d5:8d:14:6d:4d:d2:08:78:c1:50:c3: 1b:98:ea:b9:e4:aa:8b:d3:b3:8c:9b:d0:3d:b0:4a: 6a:39:5c:51:43:73:0f:44:67:86:13:88:14:80:8c: df:9c:99:e5:db:01:cf:f2:4a:bd:75:31:b4:08:ad: 82:f0:dc:b6:f8:50:0f:4e:f3:6e:c0:b2:ac:99:a9: f3:90:1d:c1:63:66:bc:8a:4d:98:7a:7c:55:73:71: af:8f:45:97:a1:a6:4b:e3:2c:ca:ca:52:55:7b:85: f9:4b:30:dd:ab:eb:c8:47:22:ed:aa:c3:09:16:9e: 50:f0:79:58:8a:ab:69:e5:c9:7a:79:d0:f7:2d:1c: 01:a6:82:d4:f4:ff:df:d7:78:34:f6:9c:14:c0:b3: 84:d6:68:ea:04:a9:dc:dd:27:a6:7c:c0:64:0d:87: 78:7f:82:53:26:e7:c8:83:3c:20:38:51:4a:47:cb: 45:21:42:d0:54:09:b1:e0:de:0f:b7:5f:78:4f:0c: 68:ed:7f:48:e7:80:7e:ea:18:c5:e5:4b:26:07:29: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F3:C6:0F:20:9B:BE:E3:B1:48:F0:34:72:5C:F7:B0:E1:78:29:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dd0038fd-a4c2-3a59-9086-4ec612213489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:13:08:13:ff:fa:f9:fe:e9:09:66:f2:d1:0f:c9:ec:79:89: 3d:09:9d:cf:94:20:3f:08:8f:25:4e:77:7b:82:5c:89:42:ab: 67:9d:c0:f0:5d:fe:29:a2:e2:d3:d9:7e:d7:15:5e:f7:1b:4f: ae:2c:20:a2:52:ce:7d:71:24:cd:0d:1c:b7:c3:9c:05:3f:50: 92:55:dc:2a:2c:9c:e7:85:bc:8a:fb:fc:d1:dc:0e:b3:53:22: f0:81:1e:71:4e:a8:05:14:da:33:a5:05:aa:8f:ce:c9:51:55: 6e:a9:8f:b9:0a:09:49:ea:6b:e3:c5:be:c8:78:f1:05:d9:46: dc:f4:45:c3:db:ff:a7:fb:4e:45:07:5d:62:80:e3:ac:23:35: d4:ff:c4:7f:9c:7c:72:fe:22:ee:d4:fa:72:fc:66:86:b0:3b: ab:cb:cb:85:78:f0:e9:82:36:2d:49:d4:96:e2:3f:13:f0:0a: 5e:ce:7b:a6:dd:8d:d8:49:09:85:08:b3:16:b2:e1:4d:fc:60: 11:e0:e7:d4:50:eb:14:5e:08:75:59:aa:3c:44:f1:4f:f4:da: d6:f9:1d:da:99:4f:90:f4:49:68:a8:8f:99:76:d0:f7:98:19: 6c:ff:9f:c2:e6:ff:0d:ba:c8:bf:ba:7b:03:73:d4:d9:28:b6: b8:6b:26:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoE+rkx7Se4qTGyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YWFiYzhiMzUtMzFlMy00YWIzLWE1NmUtODBmOGU1ZDk0MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HdYcywzNYSJIrnfBvJtvqoRXEwPoik+gunj rn9vQzlfnBsel2SAIQH57UHoMaUS1Y0UbU3SCHjBUMMbmOq55KqL07OMm9A9sEpq OVxRQ3MPRGeGE4gUgIzfnJnl2wHP8kq9dTG0CK2C8Ny2+FAPTvNuwLKsmanzkB3B Y2a8ik2YenxVc3Gvj0WXoaZL4yzKylJVe4X5SzDdq+vIRyLtqsMJFp5Q8HlYiqtp 5cl6edD3LRwBpoLU9P/f13g09pwUwLOE1mjqBKnc3SemfMBkDYd4f4JTJufIgzwg OFFKR8tFIULQVAmx4N4Pt194Twxo7X9I54B+6hjF5UsmBym8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDzxg8gm77jsUjwNHJc97DheCmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZGQwMDM4ZmQtYTRjMi0z YTU5LTkwODYtNGVjNjEyMjEzNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkTCBP/+vn+6Qlm8tEPyex5iT0Jnc+UID8IjyVOd3uCXIlCq2edwPBd /imi4tPZftcVXvcbT64sIKJSzn1xJM0NHLfDnAU/UJJV3CosnOeFvIr7/NHcDrNT IvCBHnFOqAUU2jOlBaqPzslRVW6pj7kKCUnqa+PFvsh48QXZRtz0RcPb/6f7TkUH XWKA46wjNdT/xH+cfHL+Iu7U+nL8ZoawO6vLy4V48OmCNi1J1JbiPxPwCl7Oe6bd jdhJCYUIsxay4U38YBHg59RQ6xReCHVZqjxE8U/02tb5HdqZT5D0SWioj5l20PeY GWz/n8Lm/w26yL+6ewNz1NkotrhrJk4= -----END CERTIFICATE-----Generated at Wed Jul 9 11:48:08 2025 by rpki-client