$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa File: 52b589e8-99f0-3b48-9395-f5736678ef4d.roa (raw, json) Hash identifier: KPOLBnayT1oMb+CCmlaW0Ue9rqUxkMA/LRPbCVq0vq0= Subject key identifier: 37:6C:C3:EA:37:F6:F8:9C:00:10:DD:B0:C9:5D:01:D2:3C:89:93:41 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD475984A1452270DE780 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 394708 IP address blocks: 216.255.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d4:75:98:4a:14:52:27:0d:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=4dbb71a1-055e-4026-8f9f-6e657b91ab16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:85:dc:f8:48:f9:23:f2:ca:02:3b:a3:a7: f1:ff:6e:6a:f9:29:a9:86:7c:77:b8:6c:b7:42:b1: 14:0c:67:ca:f7:7c:e9:49:b0:b8:6a:6c:a6:f5:98: 27:1c:e4:c9:c1:d9:ee:55:a1:7e:b6:18:f9:4c:70: bc:10:44:4d:88:48:fc:9a:05:13:30:1b:c7:06:3f: f8:39:cc:c6:64:1d:f2:a6:d7:06:96:bd:79:77:d8: 5d:fe:49:73:8e:4f:71:c8:5c:d8:29:17:bd:b9:42: 34:cf:ef:19:8e:25:af:5d:0d:11:f9:b2:1a:8c:ef: 1a:b1:d8:6b:bd:e7:52:e0:0b:db:90:b5:e9:00:49: 23:cf:8f:c9:56:24:ef:b4:9a:fb:bb:60:2b:1d:3c: 67:c0:71:6e:57:dd:49:f1:eb:16:c2:54:b3:ec:db: c2:c5:54:27:77:06:6c:66:6f:9e:9b:e3:9c:46:e4: 53:6e:02:36:92:6f:04:1e:0b:8c:88:88:14:35:ac: ad:71:3c:78:e9:f3:f9:d9:5e:cf:5e:bc:4d:cd:20: 3b:33:cc:6e:e9:e9:97:39:1b:c6:9b:c3:1c:a5:67: c2:87:4f:8a:ce:ce:8c:73:c3:8a:d2:19:af:7c:86: b2:fa:10:1d:18:e5:52:d7:e4:3e:d8:68:dc:ab:8d: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6C:C3:EA:37:F6:F8:9C:00:10:DD:B0:C9:5D:01:D2:3C:89:93:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:70:84:aa:ab:fb:51:43:b2:c0:03:c5:e1:99:16:20:17:c0: 54:37:7c:14:c7:41:7c:38:4b:64:6a:90:56:5f:37:b9:43:65: ed:4f:c4:9b:ce:92:86:f5:9c:00:ba:de:11:67:22:52:b7:23: 01:b0:bd:30:2f:97:aa:46:fc:ca:4b:78:a4:14:5d:0d:74:39: cf:26:1d:22:15:e4:90:ab:5c:85:47:c3:f6:50:da:3f:be:73: 97:f3:de:75:1e:89:3d:72:c2:d9:05:4e:15:a0:df:8c:21:6d: 77:03:a4:cc:b1:d2:84:07:e6:1f:49:08:38:25:a5:a1:55:19: 88:47:5b:e3:d2:5f:0b:80:0d:a8:7a:d8:93:91:4e:e3:1f:26: c6:84:f0:53:8b:60:0f:fd:f8:4c:f0:5e:a8:24:a7:b0:b4:02: 3a:75:86:70:10:d8:b4:1e:ee:3f:9e:cc:45:ae:33:47:38:92: fd:fe:70:2a:07:7b:aa:26:e3:07:db:60:24:5f:39:cb:02:a8: 42:bc:c5:c9:6f:b5:ab:48:46:fc:bf:05:81:85:af:21:7b:bb: 95:c8:b1:9c:c0:bf:7a:b2:02:e8:c7:dc:6a:cd:d7:6c:ad:53: 9e:f6:b7:a5:2d:b3:5c:1e:0b:ec:3c:ca:c2:32:cc:f8:26:c1: 30:59:29:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539R1mEoUUicN54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NGRiYjcxYTEtMDU1ZS00MDI2LThmOWYtNmU2NTdiOTFhYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQeF3PhI+SPyygI7o6fx/25q+Smphnx3uGy3 QrEUDGfK93zpSbC4amym9ZgnHOTJwdnuVaF+thj5THC8EERNiEj8mgUTMBvHBj/4 OczGZB3yptcGlr15d9hd/klzjk9xyFzYKRe9uUI0z+8ZjiWvXQ0R+bIajO8asdhr vedS4AvbkLXpAEkjz4/JViTvtJr7u2ArHTxnwHFuV91J8esWwlSz7NvCxVQndwZs Zm+em+OcRuRTbgI2km8EHguMiIgUNaytcTx46fP52V7PXrxNzSA7M8xu6emXORvG m8McpWfCh0+Kzs6Mc8OK0hmvfIay+hAdGOVS1+Q+2Gjcq41KWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdsw+o39vicABDdsMldAdI8iZNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNTJiNTg5ZTgtOTlmMC0z YjQ4LTkzOTUtZjU3MzY2NzhlZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtwhKqr+1FDssADxeGZFiAXwFQ3fBTHQXw4S2RqkFZfN7lDZe1PxJvO kob1nAC63hFnIlK3IwGwvTAvl6pG/MpLeKQUXQ10Oc8mHSIV5JCrXIVHw/ZQ2j++ c5fz3nUeiT1ywtkFThWg34whbXcDpMyx0oQH5h9JCDglpaFVGYhHW+PSXwuADah6 2JORTuMfJsaE8FOLYA/9+EzwXqgkp7C0Ajp1hnAQ2LQe7j+ezEWuM0c4kv3+cCoH e6om4wfbYCRfOcsCqEK8xclvtatIRvy/BYGFryF7u5XIsZzAv3qyAujH3GrN12yt U572t6Uts1weC+w8ysIyzPgmwTBZKVI= -----END CERTIFICATE-----Generated at Mon Jun 30 18:19:35 2025 by rpki-client