$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa File: 2d388d51-a371-39d1-bf5a-73549a9917de.roa (raw, json) Hash identifier: 9A1RUKskmNomGxyfAzf2tZXFBjxDjcacdFwZErIuqN8= Subject key identifier: B2:FA:3F:F9:CC:F1:14:EB:A4:0F:31:DC:9C:8F:C1:9B:21:56:81:9F Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584A5765D3A649E1F4A1C4273128 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 23528 IP address blocks: 168.203.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d3:a6:49:e1:f4:a1:c4:27:31:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=17936a33-0d05-499a-98ec-ec70b886fb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:72:c5:13:0c:8a:5e:d0:0f:22:88:da:99: dd:a3:93:d1:06:16:35:5e:ef:6b:23:f6:d3:67:26: 30:8f:30:95:04:ee:e8:42:69:c4:37:a0:a3:72:d6: 81:46:3a:ae:0b:16:8f:c6:1c:c5:12:02:ec:ff:5f: e8:f2:bc:d2:88:61:26:f5:11:c3:7d:97:a6:52:0a: af:2f:2e:68:8f:33:58:69:ee:6f:c0:15:e4:6d:0f: 04:d3:cf:fa:07:34:b2:11:5a:e7:72:a5:99:60:a3: 00:bb:2a:50:e5:18:4e:61:70:4e:92:33:6d:89:98: bb:58:bb:f7:2d:b7:21:87:73:25:0c:2d:51:30:70: b9:d9:38:d1:cb:da:71:c0:15:7b:8c:6f:bc:93:cb: 7b:8d:43:f6:31:af:f9:c7:65:52:c9:24:55:fb:70: 7e:3e:bc:e5:9e:fb:19:be:e8:4f:f1:8b:3b:b4:2a: c0:41:38:cd:2f:f4:5b:ab:df:67:67:71:b7:db:d6: d5:36:2e:5a:7f:2f:7f:1b:08:f2:de:34:ea:71:53: 2d:98:22:07:b1:ec:63:e7:de:8e:1b:9c:6e:db:ac: ff:e3:7f:59:db:2c:be:e5:a2:0c:ac:bd:65:be:c3: 3b:b7:66:31:31:f5:2d:bc:29:02:97:ae:1e:da:9c: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FA:3F:F9:CC:F1:14:EB:A4:0F:31:DC:9C:8F:C1:9B:21:56:81:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ac:d7:9e:0f:34:40:37:7f:c5:9e:23:81:63:fd:44:31:99: 27:6c:31:16:dc:9d:2e:30:c4:16:eb:96:03:a7:60:c9:19:6c: 20:f7:e6:b5:13:15:c4:75:42:d4:d2:8d:08:72:00:e9:cc:9b: 5f:00:1a:91:05:2a:18:d0:0f:2f:d4:10:88:8c:bf:85:f5:db: 10:ee:0d:48:68:20:7c:00:7c:ef:be:8c:d0:77:ef:b3:cd:b0: 66:e0:88:5f:fd:07:34:9c:b2:1e:95:bd:6a:10:0b:f6:14:40: 64:24:18:0a:a3:be:28:43:74:68:d9:df:e6:b0:17:17:9a:4f: de:83:51:66:3f:a2:36:37:ff:63:b8:3d:d3:72:83:41:02:cb: ca:23:c6:1c:5f:43:26:e9:f5:7a:d3:13:3e:e3:1b:bf:b3:49: 94:f0:03:d2:43:74:72:ec:dd:e6:db:2e:ee:24:93:87:d4:35: 4a:b9:db:db:f4:a4:5c:12:94:7e:88:a4:3e:1a:19:78:e2:37: 0e:99:30:66:d5:6b:3a:ed:aa:d5:74:32:d9:d3:40:96:ec:7b: 8b:13:99:bd:c1:7b:ce:0a:37:b0:e7:c9:1d:09:4d:9f:5b:37: 0f:af:b1:75:cc:27:12:7e:53:b8:5e:2e:2d:25:4f:a7:47:e5: 88:a9:0d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdOmSeH0ocQnMSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MTc5MzZhMzMtMGQwNS00OTlhLTk4ZWMtZWM3MGI4ODZmYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoRyxRMMil7QDyKI2pndo5PRBhY1Xu9rI/bT ZyYwjzCVBO7oQmnEN6CjctaBRjquCxaPxhzFEgLs/1/o8rzSiGEm9RHDfZemUgqv Ly5ojzNYae5vwBXkbQ8E08/6BzSyEVrncqWZYKMAuypQ5RhOYXBOkjNtiZi7WLv3 Lbchh3MlDC1RMHC52TjRy9pxwBV7jG+8k8t7jUP2Ma/5x2VSySRV+3B+PrzlnvsZ vuhP8Ys7tCrAQTjNL/Rbq99nZ3G329bVNi5afy9/Gwjy3jTqcVMtmCIHsexj596O G5xu26z/439Z2yy+5aIMrL1lvsM7t2YxMfUtvCkCl64e2pyfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL6P/nM8RTrpA8x3JyPwZshVoGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvMmQzODhkNTEtYTM3MS0z OWQxLWJmNWEtNzM1NDlhOTkxN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEes154PNEA3f8WeI4Fj/UQxmSdsMRbcnS4wxBbrlgOnYMkZbCD35rUT FcR1QtTSjQhyAOnMm18AGpEFKhjQDy/UEIiMv4X12xDuDUhoIHwAfO++jNB377PN sGbgiF/9BzScsh6VvWoQC/YUQGQkGAqjvihDdGjZ3+awFxeaT96DUWY/ojY3/2O4 PdNyg0ECy8ojxhxfQybp9XrTEz7jG7+zSZTwA9JDdHLs3ebbLu4kk4fUNUq529v0 pFwSlH6IpD4aGXjiNw6ZMGbVazrtqtV0MtnTQJbse4sTmb3Be84KN7DnyR0JTZ9b Nw+vsXXMJxJ+U7heLi0lT6dH5YipDc4= -----END CERTIFICATE-----Generated at Mon Jun 30 16:11:46 2025 by rpki-client