$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa File: 6436fe84-15d0-3af0-956b-b3cb8a063158.roa (raw, json) Hash identifier: gaUauj0jdwpskYO3viEn/de6Gpr8MN588G7V3Vp+A9Y= Subject key identifier: CA:1E:C9:28:E9:89:C9:5F:76:59:F9:CF:68:65:8F:35:BE:A8:B2:69 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A58CB05FEE8ADB95428E19A80 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398420 IP address blocks: 216.246.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:05:fe:e8:ad:b9:54:28:e1:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=401ed6b8-9184-4ec4-824d-4fce460318c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:e2:b1:77:75:2f:d1:74:d5:3e:b3:56:7f: c4:03:9e:48:6e:ef:93:11:30:94:35:af:99:be:19: 95:19:11:6a:79:dc:67:09:55:64:50:94:30:d0:4a: 11:36:b0:17:bf:54:3a:c7:16:a8:8a:98:bb:86:95: 3f:46:69:fd:7a:ab:0d:53:90:d7:bf:a4:74:c1:35: 46:19:02:3d:31:a6:b2:48:30:03:4f:43:22:81:41: 8a:9c:ec:ca:16:5e:77:42:34:22:ab:8e:24:d5:8e: b1:9d:69:ff:6f:20:82:8c:e3:b5:84:cf:53:14:24: 2c:2f:eb:3f:17:a6:50:bc:bb:08:c1:dc:d1:27:33: 5b:03:fa:b1:be:69:c6:47:d4:a3:4c:07:72:07:c2: 5e:0c:42:f8:cf:e6:52:6c:ea:a2:51:e5:86:6e:02: 93:99:03:fe:1d:a3:ae:20:50:87:2e:60:05:a7:ae: 11:23:12:6a:ca:e2:bd:ed:0e:4a:00:1b:b3:bf:4c: 2b:1c:d6:ca:39:e4:b6:7b:48:a0:bd:38:62:ad:9e: 4b:f9:37:6a:b8:06:76:5f:c2:f7:e2:3d:90:25:9c: c1:6c:34:1b:6e:0e:38:d9:84:24:35:72:cc:6a:4b: e7:c5:6a:03:97:1d:e0:67:fc:f2:c2:f2:a7:ae:6d: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:C9:28:E9:89:C9:5F:76:59:F9:CF:68:65:8F:35:BE:A8:B2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:89:1b:40:15:84:4f:a8:d1:8e:23:04:8b:94:0f:48:a2:87: d4:04:41:16:bb:5f:17:5b:8b:89:73:be:d7:06:2c:fd:98:30: fd:c2:99:67:0d:48:ed:0f:13:b1:b1:14:b1:42:22:9b:46:71: 88:c8:9d:d2:00:00:ee:fd:b9:66:71:6b:43:35:b2:0d:3a:ed: 98:d4:d2:ee:e8:a4:13:98:4d:56:41:d6:bd:97:e2:6c:35:84: ec:32:27:2e:d2:d6:e3:78:d3:60:d0:e3:63:11:2c:f8:45:b0: 9a:41:3d:a9:a5:51:9c:4f:0a:e3:24:f3:53:2a:be:04:8c:51: 28:34:5d:ea:1a:2a:53:67:16:31:2a:20:c4:36:79:2b:81:dd: e9:5c:eb:8d:28:35:f3:c8:d9:cb:2b:a5:7e:36:c4:7a:6f:5e: 8d:83:b3:c5:a7:07:ad:34:31:ca:b0:57:15:c4:cf:0e:48:19: be:4c:46:53:c8:dd:59:3c:5b:9d:34:38:ff:5c:2b:fd:fe:2d: 35:6e:c9:f1:c7:75:79:c2:71:79:6e:e3:48:f9:14:8a:d3:90: 3e:c7:8e:3a:a7:2f:15:eb:1d:2e:4a:12:b2:84:22:43:78:cf: 54:cd:54:b0:33:aa:51:90:7e:5e:2b:15:f7:42:b5:d4:5c:c2: e2:7e:80:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywX+6K25VCjhmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk NDAxZWQ2YjgtOTE4NC00ZWM0LTgyNGQtNGZjZTQ2MDMxOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcXisXd1L9F01T6zVn/EA55Ibu+TETCUNa+Z vhmVGRFqedxnCVVkUJQw0EoRNrAXv1Q6xxaoipi7hpU/Rmn9eqsNU5DXv6R0wTVG GQI9MaaySDADT0MigUGKnOzKFl53QjQiq44k1Y6xnWn/byCCjOO1hM9TFCQsL+s/ F6ZQvLsIwdzRJzNbA/qxvmnGR9SjTAdyB8JeDEL4z+ZSbOqiUeWGbgKTmQP+HaOu IFCHLmAFp64RIxJqyuK97Q5KABuzv0wrHNbKOeS2e0igvThirZ5L+TdquAZ2X8L3 4j2QJZzBbDQbbg442YQkNXLMakvnxWoDlx3gZ/zywvKnrm0yRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoeySjpiclfdln5z2hljzW+qLJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNjQzNmZlODQtMTVkMC0z YWYwLTk1NmItYjNjYjhhMDYzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByJG0AVhE+o0Y4jBIuUD0iih9QEQRa7Xxdbi4lzvtcGLP2YMP3CmWcN SO0PE7GxFLFCIptGcYjIndIAAO79uWZxa0M1sg067ZjU0u7opBOYTVZB1r2X4mw1 hOwyJy7S1uN402DQ42MRLPhFsJpBPamlUZxPCuMk81MqvgSMUSg0XeoaKlNnFjEq IMQ2eSuB3elc640oNfPI2csrpX42xHpvXo2Ds8WnB600McqwVxXEzw5IGb5MRlPI 3Vk8W500OP9cK/3+LTVuyfHHdXnCcXlu40j5FIrTkD7HjjqnLxXrHS5KErKEIkN4 z1TNVLAzqlGQfl4rFfdCtdRcwuJ+gDY= -----END CERTIFICATE-----Generated at Sat Jul 5 01:29:45 2025 by rpki-client