$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa File: a59a4b39-5f64-366e-8310-41f56bd1475a.roa (raw, json) Hash identifier: z3fKzai7T2O8ClIKz/SMm9KsEbWPa3HWej1bz2HsyZA= Subject key identifier: D8:F0:26:DF:E1:D2:35:80:C6:F4:EB:68:2D:3E:A8:EA:A9:7F:C2:93 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A42757D8FE35D65A5B8E4BDF0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 36222 IP address blocks: 128.241.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:7d:8f:e3:5d:65:a5:b8:e4:bd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=22814ce7-25e8-4118-8efd-70476971c508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:c4:d7:94:10:63:75:dd:45:ac:66:69:88: 36:fd:3b:f3:14:e6:dc:ae:9b:58:01:86:80:0c:d4: d7:fb:1d:99:29:b6:b1:c2:83:86:d6:b2:43:9a:d8: 00:8c:f5:f5:7d:de:37:a1:c2:ae:17:83:b8:9d:a5: 33:44:37:cc:f3:93:a9:e4:77:84:4c:9a:33:36:fa: d3:37:ec:d9:46:db:b7:c5:24:40:18:b8:dc:98:2e: 5e:65:65:83:49:9f:27:c2:1f:5d:65:d9:5f:bc:66: c7:40:0b:cc:8f:b1:7c:52:cf:c1:54:cb:dc:a0:bc: 4e:be:3c:f6:dc:15:02:89:dc:0e:6c:25:be:26:73: 7b:13:e7:4b:58:c1:af:90:09:dd:2b:a9:8d:ba:c6: 7c:41:45:06:c9:74:fb:20:ee:8e:c7:07:95:4e:e9: c6:22:69:c6:96:6d:98:fb:17:5c:75:24:58:01:d4: 39:58:be:62:e7:a5:6a:98:5f:69:b7:60:a3:da:03: 8d:3b:c3:d3:cb:b9:4c:50:15:ff:be:98:fa:02:76: 82:9e:a6:af:d9:9f:da:c3:17:f0:99:8b:7e:df:29: 01:16:52:3e:98:59:54:4c:00:0e:92:d9:a2:04:66: 6f:70:e2:41:6b:32:c6:90:fa:ca:13:68:bb:f7:6f: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F0:26:DF:E1:D2:35:80:C6:F4:EB:68:2D:3E:A8:EA:A9:7F:C2:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8a:03:47:be:30:ee:36:7b:14:c5:d2:a5:b2:3b:3c:d8:57: cb:f5:3c:39:1e:01:74:74:11:aa:5c:ef:e0:c8:bd:51:a6:a9: 89:f4:e1:11:d0:0b:87:1d:ab:8d:47:a1:b1:ed:53:49:97:d6: a6:89:65:c8:61:24:52:01:fa:0e:ea:e3:8c:4b:61:6a:26:1e: fe:63:b9:0e:58:67:36:8c:6c:19:61:c8:9b:6d:7b:3f:b7:70: df:f3:ec:b4:e0:3b:ff:94:02:c4:fb:b2:f3:f2:f0:0c:2e:29: 26:77:b4:46:3a:61:42:a8:2b:b9:d1:55:53:6a:22:d6:17:c0: ec:52:e9:a3:b8:78:de:fa:7a:7f:32:66:17:57:8f:fd:4d:b0: b3:68:2c:03:cc:9f:7f:20:78:80:57:cb:20:23:6c:fe:e1:89: 54:72:4b:9f:6c:80:5a:50:14:ac:69:d0:f0:26:0e:da:77:47: 94:1b:5a:52:85:26:b6:36:fe:c8:53:37:53:15:f8:1e:b2:e5: 50:ba:b3:ad:32:c0:df:8a:47:58:56:24:dd:57:00:13:2a:72: 42:09:6b:4f:5a:9a:bf:97:33:31:cd:8e:4d:24:32:a1:09:b9: 36:81:8e:9a:b3:80:ba:30:48:a1:98:ad:c2:2d:6b:ac:13:9c: c1:59:33:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdX2P411lpbjkvfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MjI4MTRjZTctMjVlOC00MTE4LThlZmQtNzA0NzY5NzFjNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/XE15QQY3XdRaxmaYg2/TvzFObcrptYAYaA DNTX+x2ZKbaxwoOG1rJDmtgAjPX1fd43ocKuF4O4naUzRDfM85Op5HeETJozNvrT N+zZRtu3xSRAGLjcmC5eZWWDSZ8nwh9dZdlfvGbHQAvMj7F8Us/BVMvcoLxOvjz2 3BUCidwObCW+JnN7E+dLWMGvkAndK6mNusZ8QUUGyXT7IO6OxweVTunGImnGlm2Y +xdcdSRYAdQ5WL5i56VqmF9pt2Cj2gONO8PTy7lMUBX/vpj6AnaCnqav2Z/awxfw mYt+3ykBFlI+mFlUTAAOktmiBGZvcOJBazLGkPrKE2i7929uJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjwJt/h0jWAxvTraC0+qOqpf8KTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTU5YTRiMzktNWY2NC0z NjZlLTgzMTAtNDFmNTZiZDE0NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgPHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmKA0e+MO42exTF0qWyOzzYV8v1PDkeAXR0Eapc7+DIvVGmqYn04RHQ C4cdq41HobHtU0mX1qaJZchhJFIB+g7q44xLYWomHv5juQ5YZzaMbBlhyJttez+3 cN/z7LTgO/+UAsT7svPy8AwuKSZ3tEY6YUKoK7nRVVNqItYXwOxS6aO4eN76en8y ZhdXj/1NsLNoLAPMn38geIBXyyAjbP7hiVRyS59sgFpQFKxp0PAmDtp3R5QbWlKF JrY2/shTN1MV+B6y5VC6s60ywN+KR1hWJN1XABMqckIJa09amr+XMzHNjk0kMqEJ uTaBjpqzgLowSKGYrcIta6wTnMFZMxs= -----END CERTIFICATE-----Generated at Sun Jun 29 13:24:11 2025 by rpki-client