$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa File: b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa (raw, json) Hash identifier: U7J0d9qwEjSA41J1TwG+YPMhRZefX24ZW+c92PPnOOg= Subject key identifier: 3B:C2:C6:65:13:DB:F2:28:F2:78:3A:BB:E9:0B:66:72:BB:BD:DF:2B Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584A14656CE29B90C2F07AA89880 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 396905 IP address blocks: 216.226.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:6c:e2:9b:90:c2:f0:7a:a8:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=ec560037-9525-4a16-89a6-3beda8d1a776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:4c:1d:97:03:55:ec:20:fd:c5:c7:66:4a: 0a:da:d1:55:a4:09:26:05:af:33:c2:00:f3:e2:17: 2d:70:a6:89:02:a9:ac:04:31:7f:9d:1c:0a:6b:91: 1f:c1:b1:de:4e:a0:e8:70:c9:06:a4:ce:dc:6a:db: 6e:90:56:c4:b9:02:3a:9d:41:92:2b:4f:cb:57:b3: 16:0d:30:9b:b1:b5:ea:ee:bb:3d:bd:d7:82:4c:3a: 65:55:1a:1e:b6:98:ad:51:e2:4f:43:17:8f:e3:25: b6:de:9c:d1:d6:43:1d:2f:86:14:7a:5c:5c:20:99: 23:06:63:89:3b:52:e4:ea:75:5b:28:a1:d3:7e:8f: 96:02:52:3b:c6:2e:b4:67:98:18:29:44:cf:f8:8b: ff:96:48:7c:3d:b8:05:d8:88:f1:d7:96:47:94:d5: 31:d6:db:5d:0d:0d:84:ec:b5:d9:62:d7:c1:89:40: 32:a6:ae:0a:b7:35:56:4a:d6:af:66:09:7d:ad:30: 98:a2:27:96:b7:21:78:28:9c:35:e4:16:3d:a6:6d: 6a:93:69:b1:e5:38:eb:88:ed:40:b6:0f:64:93:0c: 8e:c1:e1:29:c3:34:e2:3b:15:b4:5d:c3:7b:29:24: c8:4b:c6:c8:48:f0:4f:41:df:a8:eb:34:bf:de:43: 05:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:C6:65:13:DB:F2:28:F2:78:3A:BB:E9:0B:66:72:BB:BD:DF:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 216.226.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a5:0a:9c:6f:c6:f9:74:83:3f:0e:d5:c0:30:76:fc:33:1a: 7f:3b:de:e4:dd:2d:68:e3:6a:08:39:d4:22:d9:d4:8b:a2:5b: 8d:4e:2b:f2:f9:79:03:ec:93:34:ce:d7:70:d4:c4:0f:65:4d: b5:65:9b:55:20:1c:5b:51:64:99:bc:57:02:3a:ce:16:48:4f: 00:b5:e8:ac:89:4b:ec:98:2b:0b:3c:78:5f:fd:91:b8:fc:7e: 96:50:89:f7:68:6f:f9:96:4f:20:30:14:4a:7d:32:c1:f6:73: d4:ec:75:08:2c:c5:9b:66:32:fb:02:27:46:47:cf:4d:3e:0c: bf:1e:76:cf:9a:3e:97:76:60:af:2c:b5:e7:53:ad:0b:36:4d: 09:bd:8a:89:e5:96:e5:ae:eb:70:1f:f4:a2:56:4c:46:70:5a: fc:7f:23:99:06:6f:93:f0:e7:c6:fe:9f:ce:8d:dc:ac:e1:20: 6c:f6:9d:0a:42:86:eb:30:53:7e:99:96:63:43:a0:64:42:7e: 16:e9:e4:58:70:a5:30:30:97:9f:34:57:ba:0c:3c:37:22:d3: 4f:78:b6:47:ce:9c:32:2e:4a:85:54:c0:f1:6d:97:18:38:ac: 59:9e:82:f6:11:4e:df:c6:88:b7:90:6a:42:7a:94:08:74:89: 10:cf:98:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWzim5DC8HqomIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWM1NjAwMzctOTUyNS00YTE2LTg5YTYtM2JlZGE4ZDFhNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzdMHZcDVewg/cXHZkoK2tFVpAkmBa8zwgDz 4hctcKaJAqmsBDF/nRwKa5EfwbHeTqDocMkGpM7cattukFbEuQI6nUGSK0/LV7MW DTCbsbXq7rs9vdeCTDplVRoetpitUeJPQxeP4yW23pzR1kMdL4YUelxcIJkjBmOJ O1Lk6nVbKKHTfo+WAlI7xi60Z5gYKUTP+Iv/lkh8PbgF2Ijx15ZHlNUx1ttdDQ2E 7LXZYtfBiUAypq4KtzVWStavZgl9rTCYoieWtyF4KJw15BY9pm1qk2mx5TjriO1A tg9kkwyOweEpwzTiOxW0XcN7KSTIS8bISPBPQd+o6zS/3kMFwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvCxmUT2/Io8ng6u+kLZnK7vd8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvYjMzZjhiM2MtNWQxNC0z NjM0LThmZjktMWZkYmI2MDY3MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISlCpxvxvl0gz8O1cAwdvwzGn873uTdLWjjagg51CLZ1IuiW41OK/L5 eQPskzTO13DUxA9lTbVlm1UgHFtRZJm8VwI6zhZITwC16KyJS+yYKws8eF/9kbj8 fpZQifdob/mWTyAwFEp9MsH2c9TsdQgsxZtmMvsCJ0ZHz00+DL8eds+aPpd2YK8s tedTrQs2TQm9ionlluWu63Af9KJWTEZwWvx/I5kGb5Pw58b+n86N3KzhIGz2nQpC huswU36ZlmNDoGRCfhbp5FhwpTAwl580V7oMPDci0094tkfOnDIuSoVUwPFtlxg4 rFmegvYRTt/GiLeQakJ6lAh0iRDPmMk= -----END CERTIFICATE-----Generated at Mon Jun 30 02:20:45 2025 by rpki-client