$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fec126fe-9e75-39ad-b561-88de195a4ec0.roa File: fec126fe-9e75-39ad-b561-88de195a4ec0.roa (raw, json) Hash identifier: dtfF7BJ1ZNW/Gmz/8wrSmhDsUqnf//GkzsfPQqXkYIM= Subject key identifier: 77:2D:82:A2:B2:3E:29:3F:61:B8:D3:F8:2E:2F:53:29:0D:FD:0A:77 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849EEB4FD70C92893530E96CC00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fec126fe-9e75-39ad-b561-88de195a4ec0.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 174 IP address blocks: 216.227.132.0/23 maxlen: 23 216.227.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b4:fd:70:c9:28:93:53:0e:96:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=3f9d2304-862d-4d6a-ac14-dbd5982fca76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:43:f9:5e:fa:ff:ff:9f:8f:7b:d1:c0:ad: b0:10:7f:6c:69:82:aa:c7:ef:8a:f2:b2:2e:d3:46: df:4d:5a:e4:7f:e0:0a:a7:81:02:12:af:47:a4:6b: 68:50:8f:ff:fb:3c:5b:bf:49:42:34:a8:03:ad:18: 14:4d:89:e3:fe:0c:e8:c8:92:4c:ba:f2:36:99:f6: 8f:76:b0:6e:c7:19:b9:a6:c6:6a:63:42:5f:1a:a8: c9:55:e3:fc:f1:e5:e5:87:d4:7f:d4:57:01:bc:8b: 74:8c:12:2f:e5:b3:91:bf:20:83:8e:50:fb:34:58: 53:a2:23:e7:95:f4:3d:09:26:ff:be:15:ab:f4:1b: d3:9d:ba:7b:9a:2d:d4:a4:37:e6:4f:8c:e1:75:38: 8a:0f:17:5a:6e:c7:2a:96:50:88:d8:02:2b:2f:ac: b7:31:d6:6f:2d:23:f3:99:e6:aa:82:d7:80:aa:87: 25:27:56:43:80:6f:db:d6:83:70:fc:eb:d0:b5:4c: c4:4f:3c:1a:be:7d:e5:e5:68:b9:36:7a:2a:28:a8: ab:8e:ad:01:33:3e:a5:27:47:9d:4b:ac:ee:d8:57: 93:ea:70:31:f2:eb:e0:d4:fb:af:2c:14:b2:5f:87: 43:b1:9f:18:9b:3e:e8:1a:8e:19:75:ea:21:0e:12: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:82:A2:B2:3E:29:3F:61:B8:D3:F8:2E:2F:53:29:0D:FD:0A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fec126fe-9e75-39ad-b561-88de195a4ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:90:7d:9d:51:5b:d7:90:1e:83:19:3c:65:74:9b:72:a2:2d: e0:d0:fe:fd:40:c5:36:bb:2b:18:a5:7c:16:4c:06:8e:7f:19: 83:53:82:8c:a1:c6:43:00:22:49:f7:6d:ac:c5:54:79:31:5b: 2e:a5:47:6b:15:39:0b:93:6f:33:1e:eb:f2:60:80:13:02:f3: 10:f1:ff:20:1a:27:3a:ac:5e:44:8c:ff:c1:8c:fe:b0:4f:69: 90:af:01:90:c5:f8:ca:09:45:74:b6:ad:95:4c:06:7a:51:8c: d3:8b:75:22:80:fd:7e:39:28:81:95:56:02:89:6a:a0:0a:64: fc:da:2d:f4:0e:08:20:3b:e8:64:50:2d:9d:ac:f3:17:c0:00: 53:d4:70:c8:50:e1:aa:fc:38:6a:05:0c:a7:41:80:f3:fb:af: e8:40:2c:4b:28:35:a0:cd:25:27:89:b6:3a:fa:47:d5:a0:63: c0:0f:50:69:7b:ee:69:87:f0:45:b3:dd:c1:57:4e:ab:b6:ab: 5b:cc:bf:b1:bb:a5:f7:91:39:51:e5:46:c8:f6:2e:5b:4d:8e: 8c:7c:d2:d9:34:ed:3c:c7:71:97:b3:13:f9:5e:d5:c4:24:1b: 39:e3:1e:ce:fe:13:dc:bc:75:e9:5b:7b:38:0c:f5:2b:4d:97: fd:a9:05:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutP1wySiTUw6WzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk M2Y5ZDIzMDQtODYyZC00ZDZhLWFjMTQtZGJkNTk4MmZjYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbdD+V76//+fj3vRwK2wEH9saYKqx++K8rIu 00bfTVrkf+AKp4ECEq9HpGtoUI//+zxbv0lCNKgDrRgUTYnj/gzoyJJMuvI2mfaP drBuxxm5psZqY0JfGqjJVeP88eXlh9R/1FcBvIt0jBIv5bORvyCDjlD7NFhToiPn lfQ9CSb/vhWr9BvTnbp7mi3UpDfmT4zhdTiKDxdabscqllCI2AIrL6y3MdZvLSPz meaqgteAqoclJ1ZDgG/b1oNw/OvQtUzETzwavn3l5Wi5NnoqKKirjq0BMz6lJ0ed S6zu2FeT6nAx8uvg1PuvLBSyX4dDsZ8Ymz7oGo4ZdeohDhIW8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHctgqKyPik/YbjT+C4vUykN/Qp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZmVjMTI2ZmUtOWU3NS0z OWFkLWI1NjEtODhkZTE5NWE0ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqQfZ1RW9eQHoMZPGV0m3KiLeDQ/v1AxTa7KxilfBZMBo5/GYNTgoyh xkMAIkn3bazFVHkxWy6lR2sVOQuTbzMe6/JggBMC8xDx/yAaJzqsXkSM/8GM/rBP aZCvAZDF+MoJRXS2rZVMBnpRjNOLdSKA/X45KIGVVgKJaqAKZPzaLfQOCCA76GRQ LZ2s8xfAAFPUcMhQ4ar8OGoFDKdBgPP7r+hALEsoNaDNJSeJtjr6R9WgY8APUGl7 7mmH8EWz3cFXTqu2q1vMv7G7pfeROVHlRsj2LltNjox80tk07TzHcZezE/le1cQk GznjHs7+E9y8delbezgM9StNl/2pBdU= -----END CERTIFICATE-----Generated at Fri Jun 6 11:29:18 2025 by rpki-client