$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa File: c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa (raw, json) Hash identifier: qPP/70VYNUq3mbf+uaTLcl44ryvjXK0NX1uXLuEt4kA= Subject key identifier: C1:BE:B9:B8:0E:3E:86:95:D2:68:6D:21:59:5E:C2:BA:C3:87:60:F4 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285849FCAA6F4E687843114E3C3190 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 134.224.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:6f:4e:68:78:43:11:4e:3c:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=8e7434db-a699-4de5-8d59-83a50dcde25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3d:e9:59:2e:9c:b0:ba:f7:c5:81:55:c5:4c: 13:6f:48:90:6e:bb:58:fc:60:06:ad:c2:21:7b:ba: aa:2f:81:38:3e:ca:e3:e0:f2:fe:e4:cf:f1:cd:b5: f6:38:4c:b4:6c:31:2f:15:e6:6d:58:ca:aa:c1:87: a8:b8:05:89:c2:35:64:07:29:ed:53:ae:77:7e:85: 84:5e:d4:f6:02:08:db:8a:d6:d2:80:1f:9e:f7:c1: 21:97:94:16:b9:62:54:51:8c:8a:ea:a8:22:5a:3e: d5:69:75:b0:0d:ea:c3:c9:3b:ce:19:ac:1a:2e:72: 27:e0:48:bf:fc:db:6b:64:a4:9f:af:70:f1:7c:21: 19:78:a7:db:14:ed:35:31:58:b6:04:08:02:3c:47: d9:5e:8e:5b:91:20:a3:dd:73:e6:2f:a1:a8:69:b5: c3:6a:1e:9f:59:2e:2f:51:e9:52:8f:fd:38:23:0a: 69:90:fe:6c:d8:a5:1e:72:c9:98:b0:55:88:c0:3e: d9:6d:99:20:46:4f:05:3d:c9:b8:44:63:90:7f:9f: 4b:ce:42:46:3c:ea:9d:f7:a8:44:e6:cb:72:b2:c2: 64:aa:1a:e9:88:e9:fe:94:5f:ee:c6:78:93:02:a4: d1:27:55:ac:f8:70:ff:d4:8e:b3:3b:77:09:8e:56: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BE:B9:B8:0E:3E:86:95:D2:68:6D:21:59:5E:C2:BA:C3:87:60:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7f:8c:15:bf:9a:b5:7c:ce:f3:ad:88:be:37:1c:f1:69:ae: b1:81:2f:c4:c7:e4:9b:d8:72:f9:8c:c3:b1:39:e1:40:41:03: 68:a4:3f:38:39:ef:ea:a3:36:ac:c5:f5:c6:5d:87:93:db:2c: ae:17:98:9d:b1:4e:be:a7:d3:38:d5:f8:e8:13:b8:bb:39:5d: 38:ce:fd:2f:3d:2a:5f:40:69:18:11:91:8d:9b:61:85:d6:b0: 0c:5c:22:ae:61:5a:c4:4c:11:17:d7:75:af:96:6e:06:15:31: 6a:2e:de:11:3a:5d:38:56:a4:74:60:5a:99:bb:9c:d0:08:ae: 3d:f3:80:29:3a:b2:a1:24:ed:3d:a8:10:5e:0e:13:1a:66:c2: db:e0:bd:39:8d:94:cc:37:7f:79:3c:1d:19:c6:6b:f2:08:2c: 4e:68:b1:15:87:c1:52:4b:d7:47:bd:61:a7:ac:8b:ce:70:5c: 89:30:9e:1d:27:a1:ff:e1:8b:88:88:06:ae:da:09:63:9d:c0: 00:38:cd:1e:17:55:92:c7:05:92:7d:93:4d:d5:32:ec:82:2b: 12:a6:11:3d:e1:e9:12:d0:52:39:1e:02:11:50:7c:24:24:07: 93:9d:ce:9f:3c:58:70:09:9d:84:37:b2:31:ac:ae:d2:8f:41: d3:29:22:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qm9OaHhDEU48MZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OGU3NDM0ZGItYTY5OS00ZGU1LThkNTktODNhNTBkY2RlMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z3pWS6csLr3xYFVxUwTb0iQbrtY/GAGrcIh e7qqL4E4Psrj4PL+5M/xzbX2OEy0bDEvFeZtWMqqwYeouAWJwjVkByntU653foWE XtT2AgjbitbSgB+e98Ehl5QWuWJUUYyK6qgiWj7VaXWwDerDyTvOGawaLnIn4Ei/ /NtrZKSfr3DxfCEZeKfbFO01MVi2BAgCPEfZXo5bkSCj3XPmL6GoabXDah6fWS4v UelSj/04IwppkP5s2KUecsmYsFWIwD7ZbZkgRk8FPcm4RGOQf59LzkJGPOqd96hE 5styssJkqhrpiOn+lF/uxniTAqTRJ1Ws+HD/1I6zO3cJjlb/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG+ubgOPoaV0mhtIVlewrrDh2D0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzJjZGFmNWItZDFjZS0z MDc2LWI5MjAtNDg4YWFhNWEyOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChuD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV/jBW/mrV8zvOtiL43HPFprrGBL8TH5JvYcvmMw7E54UBBA2ikPzg5 7+qjNqzF9cZdh5PbLK4XmJ2xTr6n0zjV+OgTuLs5XTjO/S89Kl9AaRgRkY2bYYXW sAxcIq5hWsRMERfXda+WbgYVMWou3hE6XThWpHRgWpm7nNAIrj3zgCk6sqEk7T2o EF4OExpmwtvgvTmNlMw3f3k8HRnGa/IILE5osRWHwVJL10e9Yaesi85wXIkwnh0n of/hi4iIBq7aCWOdwAA4zR4XVZLHBZJ9k03VMuyCKxKmET3h6RLQUjkeAhFQfCQk B5Odzp88WHAJnYQ3sjGsrtKPQdMpIt0= -----END CERTIFICATE-----Generated at Sat Jun 7 11:53:21 2025 by rpki-client