$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/5d145b87-618b-39b9-97aa-e4fae7498f78.roa File: 5d145b87-618b-39b9-97aa-e4fae7498f78.roa (raw, json) Hash identifier: u8XCtzA59/csX9vhOrj5Y3xW/Gr0wkwUWMYFhRtFpIU= Subject key identifier: 29:1C:0C:6B:69:5B:E5:31:27:B0:53:55:8A:AE:D8:B9:49:A7:91:98 Certificate issuer: /CN=a58b4d13-3bf0-4acc-bfd4-aedce2f866bf Certificate serial: 010D0C9F4328584A374ADEF27C4FFA705BB113A0 Authority key identifier: A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/5d145b87-618b-39b9-97aa-e4fae7498f78.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 14070 IP address blocks: 208.85.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:de:f2:7c:4f:fa:70:5b:b1:13:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58b4d13-3bf0-4acc-bfd4-aedce2f866bf Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=ffb5d85f-d944-4770-a140-302b285df105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:de:8d:12:2a:8c:bb:e2:c0:e5:47:88:57: 38:9d:0c:d6:b2:9c:c5:f3:ad:b2:1c:76:64:0c:a2: 96:56:ce:82:e0:b4:fb:d6:95:48:a5:01:9c:22:46: 33:03:8c:b2:0f:e8:b9:b1:95:7b:f3:10:ad:f4:2a: 8f:61:24:22:a6:77:d6:57:56:e8:44:e9:ca:9b:06: 59:ab:5e:f4:95:51:f9:4b:ba:de:40:2e:b4:58:ce: 2d:93:9a:61:bc:ca:db:f4:66:cc:06:e0:03:47:9c: 03:79:03:34:5a:82:4c:60:2e:9e:a9:b2:b9:e8:a8: ba:13:15:46:68:20:6f:9a:7b:02:78:ae:4b:4c:be: 19:5d:e3:b5:bb:4e:3f:65:40:a6:67:ab:1a:0b:3b: ab:86:5a:28:30:9c:49:82:31:fd:51:94:ab:96:0d: 6b:b8:28:03:58:5f:cb:bd:95:33:f9:30:c5:e6:e2: 3f:07:ec:c6:2b:bc:d0:9e:36:d2:26:42:a0:ec:a2: e4:87:3b:8d:a7:21:60:5c:00:16:bd:4a:9d:69:bd: d6:98:b4:d2:06:6c:d9:b3:22:26:75:0e:f9:1e:ef: 69:ae:cc:44:2a:77:1e:f6:57:3e:24:4e:17:bc:fc: 8d:96:01:00:41:89:9d:56:59:a7:9e:be:1d:1e:41: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1C:0C:6B:69:5B:E5:31:27:B0:53:55:8A:AE:D8:B9:49:A7:91:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/5d145b87-618b-39b9-97aa-e4fae7498f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.crl X509v3 Authority Key Identifier: keyid:A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer sbgp-ipAddrBlock: critical IPv4: 208.85.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0f:5e:8c:6d:8b:15:48:6f:fe:4e:7c:9e:1f:90:bf:86:71: 36:e9:61:d2:cb:01:31:ea:99:bb:33:b4:2b:f7:6d:ee:f8:44: 72:fb:b9:74:e3:08:95:e5:75:4d:1d:cc:af:0e:cd:3a:1c:6b: d9:ac:6b:df:21:15:1a:27:ab:09:9c:03:ea:0c:a9:81:9f:be: d2:d0:b5:54:04:97:19:eb:69:be:40:39:75:51:4c:da:dc:f6: 65:22:dd:13:b3:b7:8c:e6:c5:04:a1:0d:6f:20:a2:f8:6b:a7: b6:29:22:d2:45:70:94:ed:39:90:51:42:a8:44:89:b9:32:fc: 5c:0b:2d:a1:71:00:72:ee:9d:df:b7:43:e4:df:4f:16:06:b1: 78:c4:93:7a:80:82:ae:ff:17:c7:fa:83:83:38:18:d5:02:b3: eb:60:9f:1d:23:b5:30:e8:d2:4d:d0:19:38:37:04:09:ee:d9: 25:42:11:6b:00:47:7c:df:88:4e:de:f0:da:c2:7c:d8:7e:a6: 96:04:d3:58:4b:5b:6e:34:47:af:0f:ff:ec:f6:c6:f3:e5:94: d7:34:05:10:d6:0d:15:04:2c:b7:ec:b5:c5:4b:f2:a3:79:41: bf:f5:c1:22:3a:37:19:68:74:f5:e5:69:9f:c3:f7:4f:4f:be: a0:f2:1b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3St7yfE/6cFuxE6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4YjRkMTMtM2JmMC00YWNjLWJmZDQtYWVkY2UyZjg2 NmJmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZmZiNWQ4NWYtZDk0NC00NzcwLWExNDAtMzAyYjI4NWRmMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwvejRIqjLviwOVHiFc4nQzWspzF862yHHZk DKKWVs6C4LT71pVIpQGcIkYzA4yyD+i5sZV78xCt9CqPYSQipnfWV1boROnKmwZZ q170lVH5S7reQC60WM4tk5phvMrb9GbMBuADR5wDeQM0WoJMYC6eqbK56Ki6ExVG aCBvmnsCeK5LTL4ZXeO1u04/ZUCmZ6saCzurhlooMJxJgjH9UZSrlg1ruCgDWF/L vZUz+TDF5uI/B+zGK7zQnjbSJkKg7KLkhzuNpyFgXAAWvUqdab3WmLTSBmzZsyIm dQ75Hu9prsxEKnce9lc+JE4XvPyNlgEAQYmdVlmnnr4dHkF/mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkcDGtpW+UxJ7BTVYqu2LlJp5GYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNThi NGQxMy0zYmYwLTRhY2MtYmZkNC1hZWRjZTJmODY2YmYvNWQxNDViODctNjE4Yi0z OWI5LTk3YWEtZTRmYWU3NDk4Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU4YjRkMTMtM2JmMC00YWNjLWJm ZDQtYWVkY2UyZjg2NmJmL2E1OGI0ZDEzLTNiZjAtNGFjYy1iZmQ0LWFlZGNlMmY4 NjZiZi5jcmwwHwYDVR0jBBgwFoAUpl0W7eQgeLEmxCuBiDzYApYUfKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNThiNGQxMy0zYmYwLTRhY2MtYmZkNC1hZWRj ZTJmODY2YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsPXoxtixVIb/5OfJ4fkL+GcTbpYdLLATHqmbsztCv3be74RHL7uXTj CJXldU0dzK8OzToca9msa98hFRonqwmcA+oMqYGfvtLQtVQElxnrab5AOXVRTNrc 9mUi3ROzt4zmxQShDW8govhrp7YpItJFcJTtOZBRQqhEibky/FwLLaFxAHLund+3 Q+TfTxYGsXjEk3qAgq7/F8f6g4M4GNUCs+tgnx0jtTDo0k3QGTg3BAnu2SVCEWsA R3zfiE7e8NrCfNh+ppYE01hLW240R68P/+z2xvPllNc0BRDWDRUELLfstcVL8qN5 Qb/1wSI6NxlodPXlaZ/D909PvqDyGwE= -----END CERTIFICATE-----Generated at Mon Jun 30 11:56:27 2025 by rpki-client