$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa File: c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa (raw, json) Hash identifier: 72kMFOgiBgS48sout+etDgeNiH+Nrtekm33Iusm6GHg= Subject key identifier: 77:6D:13:67:50:87:6A:56:3B:1B:2B:99:CA:5B:0C:18:D7:3B:65:65 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A4F38FE5AE8CADEA728EAFF00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa Signing time: Wed 25 Jun 2025 14:44:27 +0000 ROA not before: Wed 25 Jun 2025 14:44:27 +0000 ROA not after: Tue 23 Sep 2025 14:44:27 +0000 asID: 3949 IP address blocks: 128.242.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:38:fe:5a:e8:ca:de:a7:28:ea:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 25 14:44:27 2025 GMT Not After : Sep 23 14:44:27 2025 GMT Subject: CN=6344b321-e8b9-45d4-941e-a8322617a49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:b0:63:66:65:4e:26:89:a7:0c:39:8c:85: ee:68:3d:c1:75:ca:6f:ba:23:98:58:59:dc:8d:28: bb:1c:1f:8e:f5:bb:4e:92:4d:b7:3e:f0:5e:2a:78: 7d:32:61:f0:be:3e:34:9d:38:ae:25:e6:3f:93:81: 90:9b:d4:ed:89:5d:f0:4e:68:f6:f0:e6:1e:3b:9a: 8e:8a:af:00:e7:7d:c0:e1:2a:65:66:8c:9a:81:56: d2:8e:2c:fc:db:07:04:ab:45:48:b7:20:b7:e1:b6: cb:a8:db:99:ff:68:a0:a4:94:3b:44:ce:0c:e5:70: ad:62:86:14:fe:dc:70:1f:d5:99:61:f4:a8:83:7a: 78:bf:90:16:83:58:94:39:90:87:67:8b:ac:8a:96: 0a:5b:e9:75:75:1f:f2:8f:23:15:6d:82:7e:ee:65: 87:9f:40:f7:31:2d:26:88:d7:85:70:41:b9:29:43: 9a:fe:f4:70:1b:1d:2a:81:5f:20:f2:2a:19:e1:2b: 90:f5:b5:16:c2:20:ab:bf:67:8a:85:4c:3e:1c:b2: 11:e6:ed:25:24:80:d4:e5:40:06:b8:55:c6:1c:0a: 69:a2:f0:5a:3c:a7:86:68:65:64:60:25:94:73:3d: d5:d0:81:6b:1c:dd:fb:eb:ff:51:ea:d7:f6:dc:e2: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6D:13:67:50:87:6A:56:3B:1B:2B:99:CA:5B:0C:18:D7:3B:65:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:48:71:fa:31:55:30:5d:1c:84:f5:86:fd:7f:4b:b2:46:37: 29:4b:c3:14:06:3d:b6:77:52:5d:cc:c3:99:d7:38:9d:51:b6: 67:8b:ae:ef:f6:fb:1f:83:09:b5:e1:ec:5e:22:82:92:0a:e2: a3:43:fa:8b:62:1d:24:64:99:2a:92:83:f1:bb:bb:be:b7:34: c4:77:95:27:4a:ef:09:53:fe:9b:9f:bb:0d:86:32:c9:58:c6: e2:2d:3e:f6:44:18:35:d8:4d:0f:93:b2:29:13:62:d4:8d:a4: 36:6d:c5:ee:d7:5d:7a:92:7a:a1:a7:cf:88:ab:db:79:93:c2: 7b:66:fc:24:e0:36:c3:dd:1c:0e:b6:4e:3d:0e:36:c5:59:0a: 8c:39:26:1d:c0:55:d0:1b:52:8f:a2:da:01:8c:c4:61:28:93: 7b:ea:d5:9c:ff:62:70:4c:ab:42:d0:2f:b9:66:2b:8f:7e:93: f6:f9:0a:24:b2:2f:5f:a8:ed:eb:1e:f6:72:b6:de:7f:af:de: 7a:10:7f:28:84:ae:1d:52:dd:52:43:f0:92:02:11:5a:ef:86: d1:99:91:d5:87:cd:2b:c6:27:20:21:c0:a7:c4:00:e6:78:d5: 40:8c:82:16:85:ff:f9:c1:e8:e0:33:15:bc:fb:c4:a0:4b:46: 32:6e:a7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPOP5a6Mrepyjq/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYyNTE0NDQyN1oXDTI1MDkyMzE0NDQyN1owLzEtMCsGA1UEAxMk NjM0NGIzMjEtZThiOS00NWQ0LTk0MWUtYTgzMjI2MTdhNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zewY2ZlTiaJpww5jIXuaD3BdcpvuiOYWFnc jSi7HB+O9btOkk23PvBeKnh9MmHwvj40nTiuJeY/k4GQm9TtiV3wTmj28OYeO5qO iq8A533A4SplZoyagVbSjiz82wcEq0VItyC34bbLqNuZ/2igpJQ7RM4M5XCtYoYU /txwH9WZYfSog3p4v5AWg1iUOZCHZ4usipYKW+l1dR/yjyMVbYJ+7mWHn0D3MS0m iNeFcEG5KUOa/vRwGx0qgV8g8ioZ4SuQ9bUWwiCrv2eKhUw+HLIR5u0lJIDU5UAG uFXGHAppovBaPKeGaGVkYCWUcz3V0IFrHN376/9R6tf23OIX7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdtE2dQh2pWOxsrmcpbDBjXO2VlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzhhNzBmMjEtNWFiYS0z YmU1LWFmMGMtZDhhOTdhYWFlYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxIcfoxVTBdHIT1hv1/S7JGNylLwxQGPbZ3Ul3Mw5nXOJ1RtmeLru/2 +x+DCbXh7F4igpIK4qND+otiHSRkmSqSg/G7u763NMR3lSdK7wlT/pufuw2GMslY xuItPvZEGDXYTQ+TsikTYtSNpDZtxe7XXXqSeqGnz4ir23mTwntm/CTgNsPdHA62 Tj0ONsVZCow5Jh3AVdAbUo+i2gGMxGEok3vq1Zz/YnBMq0LQL7lmK49+k/b5CiSy L1+o7ese9nK23n+v3noQfyiErh1S3VJD8JICEVrvhtGZkdWHzSvGJyAhwKfEAOZ4 1UCMghaF//nB6OAzFbz7xKBLRjJup1k= -----END CERTIFICATE-----Generated at Sun Jun 29 12:36:40 2025 by rpki-client