$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa File: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (raw, json) Hash identifier: 0+G2DjO35VLmB8IZTSquuZ9REqf/FC1ZwnwabeRy83A= Subject key identifier: CA:51:16:94:AB:7B:B2:58:1A:ED:84:12:A1:E5:5E:7F:B9:F0:B0:2F Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F43285849DF5A75224FA4C0F6DDAE68C0 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 2734 IP address blocks: 208.64.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:75:22:4f:a4:c0:f6:dd:ae:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=37afacd4-1067-4316-bd35-2a0388f76500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:b5:ae:63:c1:b3:d9:5b:e7:3a:82:c7:14: 86:92:13:ab:58:ea:4b:74:c4:f0:a7:ad:09:c3:51: 78:a6:f2:ea:a1:57:a5:25:79:c9:4f:d2:4d:dc:3f: 63:3c:9d:c5:a4:f2:23:2d:45:e3:d5:45:b6:17:fc: bb:4e:60:b1:90:45:e1:bb:e6:de:3d:43:92:e6:a7: 81:1b:0b:9b:1b:a2:71:ce:73:46:09:e7:fc:11:70: 90:d0:35:5e:15:6d:68:a9:2a:81:c2:33:ae:b3:e4: 35:a3:a6:4a:fe:30:c8:a0:f1:3d:b4:ba:96:da:b1: 5b:aa:b8:e1:65:d1:29:22:df:8f:65:13:a2:4b:21: 22:29:63:2d:89:a8:70:d4:cd:a1:71:61:01:e5:a3: 10:98:98:2c:59:29:be:1f:b1:2b:18:2c:c8:83:f0: c9:42:f3:8f:6e:85:a1:12:55:1c:33:31:fe:e7:38: 5c:d2:59:2e:ca:27:26:3c:4c:22:ba:cd:4e:6d:f1: c3:3d:48:c4:5c:1b:3c:89:30:0f:9b:d7:ad:24:72: ef:dd:7f:94:4d:b6:72:23:7a:08:1b:78:18:e7:bb: b7:fa:34:c2:48:52:90:c3:fd:ab:9f:b4:4f:ae:dc: de:3d:6b:75:3d:f5:95:8d:c1:8b:8e:fc:61:28:9f: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:51:16:94:AB:7B:B2:58:1A:ED:84:12:A1:E5:5E:7F:B9:F0:B0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ed:6d:3b:d0:c3:db:8e:b1:c6:29:79:92:97:3b:95:18:5d: 18:1a:9e:28:02:83:af:1b:51:31:92:a9:c1:0f:bc:68:70:af: d0:c3:e8:38:13:01:a9:98:27:b7:63:73:c8:84:12:9a:94:9d: 20:b2:e7:68:e2:5b:a6:c8:c2:8c:72:d6:b1:15:b4:6c:4b:7d: 41:6e:89:57:60:e2:61:18:fb:ce:19:0e:f1:24:24:0a:f1:17: 16:6d:18:48:37:aa:37:f7:80:66:8c:b9:84:b3:01:7a:c0:50: 5c:4c:5b:64:e6:e5:48:61:9f:cb:46:f8:ba:66:89:bd:2a:89: f7:5d:ca:90:80:09:6b:9f:e6:16:c8:9c:08:b1:e3:cc:75:41: db:5c:7b:9b:ed:44:23:e5:ba:71:6d:ac:d6:23:03:4e:84:0f: 20:c4:1f:6e:0e:b1:ea:6f:0d:f9:01:15:d4:75:f4:fe:3b:99: 96:2a:25:a8:b6:8c:c1:d5:70:49:ec:f5:40:63:e5:4f:d3:59: 8f:4e:4d:97:b9:cc:23:88:84:f5:35:41:1c:d0:46:9e:42:ba: dc:b7:c7:95:cf:1a:f3:53:cb:23:f7:a7:55:99:7e:31:8c:be: 9a:3d:b1:70:0b:63:35:1c:fb:35:5d:56:a3:cc:58:d1:23:6a: f0:68:51:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnUiT6TA9t2uaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzdhZmFjZDQtMTA2Ny00MzE2LWJkMzUtMmEwMzg4Zjc2NTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt61rmPBs9lb5zqCxxSGkhOrWOpLdMTwp60J w1F4pvLqoVelJXnJT9JN3D9jPJ3FpPIjLUXj1UW2F/y7TmCxkEXhu+bePUOS5qeB GwubG6JxznNGCef8EXCQ0DVeFW1oqSqBwjOus+Q1o6ZK/jDIoPE9tLqW2rFbqrjh ZdEpIt+PZROiSyEiKWMtiahw1M2hcWEB5aMQmJgsWSm+H7ErGCzIg/DJQvOPboWh ElUcMzH+5zhc0lkuyicmPEwius1ObfHDPUjEXBs8iTAPm9etJHLv3X+UTbZyI3oI G3gY57u3+jTCSFKQw/2rn7RPrtzePWt1PfWVjcGLjvxhKJ/cSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpRFpSre7JYGu2EEqHlXn+58LAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2U4ZmYzNWEtZWJiZC0z Njk5LTk3YzktYzgwYmQ0YmUyMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADztbTvQw9uOscYpeZKXO5UYXRganigCg68bUTGSqcEPvGhwr9DD6DgT AamYJ7djc8iEEpqUnSCy52jiW6bIwoxy1rEVtGxLfUFuiVdg4mEY+84ZDvEkJArx FxZtGEg3qjf3gGaMuYSzAXrAUFxMW2Tm5Uhhn8tG+Lpmib0qifddypCACWuf5hbI nAix48x1Qdtce5vtRCPlunFtrNYjA06EDyDEH24OsepvDfkBFdR19P47mZYqJai2 jMHVcEns9UBj5U/TWY9OTZe5zCOIhPU1QRzQRp5Cuty3x5XPGvNTyyP3p1WZfjGM vpo9sXALYzUc+zVdVqPMWNEjavBoUVc= -----END CERTIFICATE-----Generated at Mon Jun 30 14:01:52 2025 by rpki-client