$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa File: f912ae62-732c-3124-96ce-77eea87e00a5.roa (raw, json) Hash identifier: FmmDQ/I4F6uVicxN9R1hvJB2APxvTguDR565FdFLu7k= Subject key identifier: A5:85:CB:07:4C:66:B9:A0:F7:2C:D9:99:8B:78:DB:B8:82:94:5F:0D Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F4328584A0C055C0B1655F921A0DA1500 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 398125 IP address blocks: 208.71.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5c:0b:16:55:f9:21:a0:da:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=9a516461-6daa-4f72-ac0c-7fbb7fbc0200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:98:8e:8f:4a:7c:bb:1d:1a:9e:a4:8a:05: d2:b1:6c:e2:1f:cf:07:19:63:63:7f:1a:da:9d:c9: 48:51:42:2b:cd:54:1d:22:7f:a7:15:17:37:07:00: d3:b4:77:22:67:64:a7:f9:13:dc:23:c5:ff:79:c5: 95:78:f6:1a:65:17:90:bd:1b:ad:bf:36:cf:49:ea: 8b:66:b2:d8:4e:eb:13:ff:73:db:4d:54:98:ec:73: 0c:37:17:68:df:a5:8d:30:93:d6:8d:91:df:84:d2: 3f:aa:69:b6:68:a8:0d:8b:b3:3d:10:1f:5e:00:80: 0b:bb:e6:3b:71:6c:76:8d:a4:c6:fb:08:ef:cc:b1: fc:7b:22:cd:1d:4b:76:5b:da:d5:76:fc:96:eb:77: 66:d8:9d:82:24:19:b8:33:6d:9d:93:e9:db:60:6a: f5:e7:9a:a0:f6:a8:59:32:6d:2d:aa:2e:46:1d:d2: 29:df:2f:55:04:c9:cb:9b:25:80:10:95:9f:dd:82: 26:8a:2b:6a:07:6a:47:8f:a2:d1:e5:cb:70:d1:3d: de:56:0e:c5:7c:0b:e0:9a:ba:80:f1:36:12:99:6a: 42:54:88:8c:12:73:75:1e:37:24:37:40:30:ad:ba: ca:39:d8:cd:73:c0:5d:3a:df:0b:a2:94:ae:22:cf: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:85:CB:07:4C:66:B9:A0:F7:2C:D9:99:8B:78:DB:B8:82:94:5F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c7:d6:a3:75:20:06:c9:b9:b1:7b:35:9c:ae:a9:65:75:35: d1:77:52:b1:d6:86:38:ac:b8:07:b8:20:13:5e:79:e9:74:65: 6f:38:63:70:4e:3c:c5:2f:40:85:b0:0b:1d:fd:2e:77:2d:92: 88:95:bb:62:1d:3e:30:88:78:18:50:f3:aa:fa:c9:4b:17:86: 10:b8:81:c1:30:f4:e1:fc:55:1d:04:a1:b0:9b:49:43:8e:12: 6f:15:af:20:b6:19:fb:e3:eb:b7:7a:a4:26:83:a2:f0:01:4a: ae:64:19:0e:67:87:77:32:04:45:15:bd:8f:7d:99:fb:14:82: 5a:f6:54:dc:07:4d:73:71:7d:cf:ca:99:4e:27:9c:ea:02:86: 1f:f2:76:1c:9f:ff:7c:34:8d:2c:1d:6b:ac:98:4e:fc:ff:3a: 1e:a0:18:33:d6:79:30:fa:cb:6b:15:32:5d:cf:b4:4a:20:a3: 78:10:1f:31:f5:27:7c:40:97:12:8c:35:77:55:50:85:5d:b9: ce:60:1e:0d:6a:58:ec:07:5b:68:d4:3c:55:ee:bb:01:3c:ea: ce:97:c4:68:67:9a:d7:f2:59:01:82:3b:9a:10:57:18:42:66: 27:0d:d5:3e:8b:b5:89:a1:aa:36:48:93:c4:2b:76:20:d5:07: 1f:e7:f7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVwLFlX5IaDaFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OWE1MTY0NjEtNmRhYS00ZjcyLWFjMGMtN2ZiYjdmYmMwMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7uYjo9KfLsdGp6kigXSsWziH88HGWNjfxra nclIUUIrzVQdIn+nFRc3BwDTtHciZ2Sn+RPcI8X/ecWVePYaZReQvRutvzbPSeqL ZrLYTusT/3PbTVSY7HMMNxdo36WNMJPWjZHfhNI/qmm2aKgNi7M9EB9eAIALu+Y7 cWx2jaTG+wjvzLH8eyLNHUt2W9rVdvyW63dm2J2CJBm4M22dk+nbYGr155qg9qhZ Mm0tqi5GHdIp3y9VBMnLmyWAEJWf3YImiitqB2pHj6LR5ctw0T3eVg7FfAvgmrqA 8TYSmWpCVIiMEnN1HjckN0AwrbrKOdjNc8BdOt8LopSuIs+KiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWFywdMZrmg9yzZmYt427iClF8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvZjkxMmFlNjItNzMyYy0z MTI0LTk2Y2UtNzdlZWE4N2UwMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLH1qN1IAbJubF7NZyuqWV1NdF3UrHWhjisuAe4IBNeeel0ZW84Y3BO PMUvQIWwCx39LnctkoiVu2IdPjCIeBhQ86r6yUsXhhC4gcEw9OH8VR0EobCbSUOO Em8VryC2Gfvj67d6pCaDovABSq5kGQ5nh3cyBEUVvY99mfsUglr2VNwHTXNxfc/K mU4nnOoChh/ydhyf/3w0jSwda6yYTvz/Oh6gGDPWeTD6y2sVMl3PtEogo3gQHzH1 J3xAlxKMNXdVUIVduc5gHg1qWOwHW2jUPFXuuwE86s6XxGhnmtfyWQGCO5oQVxhC ZicN1T6LtYmhqjZIk8QrdiDVBx/n99Y= -----END CERTIFICATE-----Generated at Tue Jul 1 19:38:33 2025 by rpki-client