$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa File: 2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa (raw, json) Hash identifier: QuatqIWhblOiKol98IttTU1H77NYiZrTsNrMOf0CBPs= Subject key identifier: E4:80:95:14:B1:E6:DF:2B:B3:A3:E7:1D:D4:AB:C2:A5:DC:C4:09:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F87AA070C147EF40D8039400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 216.108.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:a0:70:c1:47:ef:40:d8:03:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=4c3f3e85-7a0f-40a1-9280-f9d9c9311307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:02:88:d9:ce:10:38:5c:06:50:4f:99:59: a2:f2:13:95:4f:78:63:08:28:c1:a2:9d:98:e5:e9: 2f:1b:ab:5c:51:bf:14:e6:2e:f8:0a:ae:3b:d1:ee: 82:75:5b:d7:d0:c1:27:3a:34:ef:47:55:a9:d7:53: a8:ac:88:02:f3:82:f2:0e:d7:41:54:24:e2:1c:b6: f5:68:a0:56:5f:5b:a4:1d:8c:f6:c8:03:4d:01:23: d8:27:a3:1d:7b:e0:13:33:83:39:35:8f:92:f3:10: be:f6:5e:6f:bf:e9:fa:b1:8a:00:e0:9c:04:2a:7c: 05:72:f3:64:7c:e1:a1:eb:73:e5:6d:22:00:2d:a5: 93:12:36:b0:5e:8f:04:c2:ac:63:62:3f:1a:90:b9: d9:4d:ed:76:47:1f:08:c0:c6:b8:93:ac:99:6a:af: 17:9f:bc:b2:6e:b1:0a:98:b5:c8:88:e5:30:51:4a: 7e:05:50:db:83:51:7e:7d:ef:7f:42:47:6c:32:39: 84:ae:96:c4:c2:52:a2:a3:b1:e7:a7:cd:c6:c7:82: e5:3a:69:68:a5:0e:07:50:4c:b2:36:bd:09:a7:29: 27:b7:62:3f:45:23:d5:63:38:75:e9:cd:42:57:6c: 7c:9b:03:6c:58:4e:22:6d:a6:d8:ac:d4:e3:dd:ef: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:95:14:B1:E6:DF:2B:B3:A3:E7:1D:D4:AB:C2:A5:DC:C4:09:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:62:fc:6a:d8:26:ad:20:42:87:fb:71:3f:96:ff:08:e2:be: ab:75:3f:84:b5:75:6f:2b:de:77:54:40:8c:29:8b:b4:d4:e5: 88:18:ae:ff:01:d4:8c:77:15:5b:c7:b9:47:39:c7:02:6c:c3: 04:e7:fe:dd:45:c4:15:06:0f:40:72:f3:81:1b:16:87:e1:9a: c7:a7:c0:f8:4f:b3:14:b6:17:3c:86:50:eb:a4:ed:8e:9e:21: 19:85:9a:fc:32:76:61:08:21:13:36:d2:d8:af:de:09:51:8c: 55:92:5d:90:42:65:72:b4:1b:78:e1:67:1a:d0:a0:c8:dc:45: b6:50:25:86:a8:7e:44:14:1a:10:d0:5d:25:54:de:e6:2d:d4: 04:4a:a4:26:9a:0a:1f:94:dd:80:db:ef:2e:aa:5a:0e:8a:c8: 7f:0c:81:26:6b:94:7f:bf:6f:43:e1:9f:54:e8:eb:f6:cf:ea: 87:18:f6:c8:cd:43:fc:00:b4:d1:96:9e:06:d2:24:71:ff:d5: ff:9e:5c:6e:30:25:72:42:5e:3d:03:4c:9a:aa:13:42:8b:fd: 39:85:31:f9:c4:d5:d9:4a:fa:a6:90:15:4f:9f:55:ed:63:c2: 82:e8:8b:b9:57:96:37:ea:c2:d5:0b:97:24:9c:32:26:1b:df: b8:53:37:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eqBwwUfvQNgDlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NGMzZjNlODUtN2EwZi00MGExLTkyODAtZjlkOWM5MzExMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzcCiNnOEDhcBlBPmVmi8hOVT3hjCCjBop2Y 5ekvG6tcUb8U5i74Cq470e6CdVvX0MEnOjTvR1Wp11OorIgC84LyDtdBVCTiHLb1 aKBWX1ukHYz2yANNASPYJ6Mde+ATM4M5NY+S8xC+9l5vv+n6sYoA4JwEKnwFcvNk fOGh63PlbSIALaWTEjawXo8EwqxjYj8akLnZTe12Rx8IwMa4k6yZaq8Xn7yybrEK mLXIiOUwUUp+BVDbg1F+fe9/QkdsMjmErpbEwlKio7Hnp83Gx4LlOmlopQ4HUEyy Nr0Jpyknt2I/RSPVYzh16c1CV2x8mwNsWE4ibabYrNTj3e9UDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSAlRSx5t8rs6PnHdSrwqXcxAk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmU0YWFjY2YtZjhkMS0z ODQ2LWIzODAtYzkyOGZmODVkY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBi/GrYJq0gQof7cT+W/wjivqt1P4S1dW8r3ndUQIwpi7TU5YgYrv8B 1Ix3FVvHuUc5xwJswwTn/t1FxBUGD0By84EbFofhmsenwPhPsxS2FzyGUOuk7Y6e IRmFmvwydmEIIRM20tiv3glRjFWSXZBCZXK0G3jhZxrQoMjcRbZQJYaofkQUGhDQ XSVU3uYt1ARKpCaaCh+U3YDb7y6qWg6KyH8MgSZrlH+/b0Phn1To6/bP6ocY9sjN Q/wAtNGWngbSJHH/1f+eXG4wJXJCXj0DTJqqE0KL/TmFMfnE1dlK+qaQFU+fVe1j woLoi7lXljfqwtULlyScMiYb37hTNwE= -----END CERTIFICATE-----Generated at Sun Jun 29 23:07:25 2025 by rpki-client