$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa File: c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (raw, json) Hash identifier: mMFUdQ8o0R3w7i/v9ql4x+LTXkcJq0sCR8ZaUGya6TI= Subject key identifier: A2:72:08:51:80:A2:F4:26:28:A7:2A:62:C1:7D:B6:96:ED:E5:5D:4C Certificate issuer: /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Certificate serial: 010D0C9F43285849FF75195D39BC17220B602080 Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 398803 IP address blocks: 136.175.44.0/22 maxlen: 24 2602:fd08::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:19:5d:39:bc:17:22:0b:60:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=e2b8479f-a0dd-43b7-9411-501d1cb9d593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:91:03:7b:24:11:d9:cf:65:2a:29:db:fb: 9c:bc:68:8c:95:a4:b6:e6:99:96:4f:16:c2:fa:45: 1c:76:e1:df:3c:8f:45:02:bc:1b:01:d0:b5:74:3a: 04:1a:25:a7:88:a0:89:e2:00:68:fb:28:70:79:b8: 56:2d:a4:04:b8:18:9f:7c:e2:fa:9d:a2:55:3e:c4: 77:3a:d0:85:44:c7:e0:20:2d:49:d1:ad:50:c9:29: ad:7c:7c:d6:8c:6e:04:34:0c:61:41:9a:f7:55:7a: 44:c1:4d:58:6d:8d:e7:ea:d0:5e:3e:60:20:6b:56: 52:79:5c:66:af:59:a6:82:b0:d1:cd:bc:f1:03:98: fa:0b:80:db:1b:34:49:55:8e:a2:2c:78:83:0a:96: 66:cb:a2:d3:b3:92:93:05:17:08:6e:fc:4c:74:2a: 17:8e:e8:49:21:82:4f:c0:18:90:62:e2:58:1a:22: 85:e1:c0:28:a3:4b:b3:95:92:7a:c8:55:60:dd:56: ac:8e:22:92:e9:a4:36:7b:62:40:15:d5:99:aa:7e: 81:41:bf:8a:83:59:fa:39:5f:67:22:aa:22:87:51: 75:66:8f:17:c1:50:d5:c1:2b:dc:ba:4f:bf:82:fa: 8c:e6:03:eb:5c:ad:4b:62:6a:e3:e5:ca:42:d9:ba: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:72:08:51:80:A2:F4:26:28:A7:2A:62:C1:7D:B6:96:ED:E5:5D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl X509v3 Authority Key Identifier: keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer sbgp-ipAddrBlock: critical IPv4: 136.175.44.0/22 IPv6: 2602:fd08::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:be:9c:c2:c6:d8:89:85:b4:4d:00:83:63:30:3d:c1:7e:4b: 22:42:78:85:56:2c:1f:b5:57:e9:4d:ae:e7:4a:7c:e1:f3:ef: 35:ca:9e:91:41:90:87:76:f4:84:9b:e9:16:81:74:3d:58:74: 63:73:c6:1f:3b:84:6e:45:7d:56:bb:99:df:ac:ff:36:bd:91: f5:10:df:3b:63:33:84:af:35:5a:7c:9e:75:73:05:90:7d:f6: c2:95:d4:b5:67:d2:77:d1:71:12:12:c7:1b:25:22:f6:34:ae: cb:b7:13:d2:52:9d:42:68:b6:04:36:a8:46:7c:b6:51:74:11: aa:4b:db:b8:65:32:21:7e:ed:4b:96:d9:dc:37:5f:ff:cf:0f: 4c:8e:38:ef:d8:06:37:38:a5:e0:af:50:99:50:c6:ef:ff:a8: 65:af:62:26:1e:36:5e:82:c5:a6:07:99:c1:1f:40:86:3f:b3: b7:b2:30:7d:d9:7c:06:ce:dd:8e:6f:7f:f1:f3:86:38:6f:2b: f9:34:63:10:45:22:68:d8:81:2c:bc:b6:f3:82:08:54:42:a2: 42:3c:a2:56:6b:2c:69:6a:78:e5:ae:c3:2c:a4:b9:3b:8b:9c: 1a:02:01:71:2c:87:47:87:c4:ee:a0:f5:d0:b2:c6:03:54:e7: 0e:07:6a:08 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEn/dRldObwXIgtgIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFkMDg2OTItN2RlMS00OTczLWI3YWUtNWEwMzk3ZTZi NjBjMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZTJiODQ3OWYtYTBkZC00M2I3LTk0MTEtNTAxZDFjYjlkNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNCRA3skEdnPZSop2/ucvGiMlaS25pmWTxbC +kUcduHfPI9FArwbAdC1dDoEGiWniKCJ4gBo+yhwebhWLaQEuBiffOL6naJVPsR3 OtCFRMfgIC1J0a1QySmtfHzWjG4ENAxhQZr3VXpEwU1YbY3n6tBePmAga1ZSeVxm r1mmgrDRzbzxA5j6C4DbGzRJVY6iLHiDCpZmy6LTs5KTBRcIbvxMdCoXjuhJIYJP wBiQYuJYGiKF4cAoo0uzlZJ6yFVg3VasjiKS6aQ2e2JAFdWZqn6BQb+Kg1n6OV9n Iqoih1F1Zo8XwVDVwSvcuk+/gvqM5gPrXK1LYmrj5cpC2bp/qwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKJyCFGAovQmKKcqYsF9tpbt5V1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MWQw ODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAzOTdlNmI2MGMvYzNjZmJhYmItNDA1NS0z ZDhmLTg3ZTktMzM5YTIyZjQ2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzFkMDg2OTItN2RlMS00OTczLWI3 YWUtNWEwMzk3ZTZiNjBjLzcxZDA4NjkyLTdkZTEtNDk3My1iN2FlLTVhMDM5N2U2 YjYwYy5jcmwwHwYDVR0jBBgwFoAUsY6RxJzyR2i+Iqp+7ZLAkU6999swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MWQwODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAz OTdlNmI2MGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCiK8sMA4E AgACMAgDBgQmAv0IADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvvpzCxtiJhbRNAINjMD3BfksiQniFViwf tVfpTa7nSnzh8+81yp6RQZCHdvSEm+kWgXQ9WHRjc8YfO4RuRX1Wu5nfrP82vZH1 EN87YzOErzVafJ51cwWQffbCldS1Z9J30XESEscbJSL2NK7LtxPSUp1CaLYENqhG fLZRdBGqS9u4ZTIhfu1LltncN1//zw9Mjjjv2AY3OKXgr1CZUMbv/6hlr2ImHjZe gsWmB5nBH0CGP7O3sjB92XwGzt2Ob3/x84Y4byv5NGMQRSJo2IEsvLbzgghUQqJC PKJWayxpanjlrsMspLk7i5waAgFxLIdHh8TuoPXQssYDVOcOB2oI -----END CERTIFICATE-----Generated at Wed Jul 2 10:57:08 2025 by rpki-client