$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa File: a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa (raw, json) Hash identifier: mL82N2t7Ugx6kbDwOG6I01b/t7Lsb5stbWaN5thkBhA= Subject key identifier: 0E:A1:3D:F4:42:4C:2E:CF:32:19:62:B7:A9:8B:5D:D7:11:17:2B:39 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849F17FB7D06F07A19438F65680 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 394111 IP address blocks: 206.72.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b7:d0:6f:07:a1:94:38:f6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=9950992e-d7bf-4476-8264-9cee8313e7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:29:d7:6b:13:61:6c:eb:9a:f8:86:42:91:f8: 9c:0c:52:b4:02:e9:f3:7d:06:b3:24:67:66:b6:be: c8:f9:2b:16:21:13:13:e7:3a:ab:30:22:b9:24:31: 23:23:c3:8e:35:a5:83:85:65:17:7a:76:de:14:c1: 21:ac:58:9c:c6:a0:d6:cb:5c:7a:c7:a6:49:c5:75: dc:50:37:6f:48:13:c4:d0:dd:05:a6:c4:73:9a:67: f9:d4:75:52:20:cd:7e:89:85:63:8a:05:c8:31:d9: 76:e1:71:b0:fe:31:71:5f:32:7e:e2:9f:ef:fb:49: db:d9:f5:b3:b2:37:42:6e:53:fa:ca:c2:f3:67:0c: 9a:4a:ba:50:ac:50:da:1d:92:89:d7:6b:39:fe:de: dc:0a:99:3a:92:bb:c4:75:ab:41:9e:d5:40:cb:c5: 9a:13:e8:4d:73:6d:af:47:bd:4d:6b:fc:e9:69:4a: dc:81:88:29:a4:43:1c:ed:cb:a4:7b:d7:05:3a:c5: 9d:50:87:13:13:e2:95:fb:0f:1e:a4:d7:90:6c:aa: 5d:d7:bb:4c:7a:76:cf:46:46:74:ec:1b:da:74:fc: 56:65:2b:9a:14:f7:a7:41:d7:bd:5a:91:18:54:eb: 6b:ec:f9:36:9c:bd:35:c9:1f:a4:a8:8d:75:08:cc: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A1:3D:F4:42:4C:2E:CF:32:19:62:B7:A9:8B:5D:D7:11:17:2B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 206.72.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:44:f0:cd:8b:11:c3:53:88:60:01:3b:19:ac:fa:ee:56:e6: 5b:11:1e:18:c4:2c:a1:0e:a3:21:07:bf:2c:e8:2c:db:44:5b: 64:5f:b6:6b:7b:20:3e:df:70:62:ef:76:14:66:a3:51:e8:6b: 0a:47:2a:9c:cd:b0:a1:af:4a:ef:fd:f0:f7:26:b2:ee:52:de: ad:c1:f8:f2:eb:d3:8e:59:ee:27:9c:a5:06:46:47:ff:f1:9e: e1:dd:46:99:6f:bd:d9:c3:c4:1c:8a:5d:b5:31:01:60:7b:13: e9:da:c4:66:72:b4:ef:f9:34:41:34:a2:e0:35:15:9d:55:56: 72:fa:d3:72:ae:91:57:7a:38:11:c9:a1:85:31:e1:10:b2:7d: e2:93:25:94:8d:d4:5c:ab:fc:c0:f2:dc:59:92:f7:cd:5b:fc: 69:1d:3a:01:ff:a4:51:da:2b:58:fc:12:0b:71:95:5e:27:a6: f1:0a:38:23:7f:98:45:f0:b7:c9:db:0d:87:62:f8:75:ba:25: 9f:a9:d2:9e:79:1f:bf:90:55:1c:12:39:b2:8a:bf:ba:4b:b4: eb:d9:07:b0:d0:6c:53:82:ec:e1:b3:a0:0e:54:71:22:03:30: 2f:4e:25:bf:97:8a:32:b2:a3:34:d0:00:5c:bd:c3:19:4c:d5: c1:78:23:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7fQbwehlDj2VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OTk1MDk5MmUtZDdiZi00NDc2LTgyNjQtOWNlZTgzMTNlN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSnXaxNhbOua+IZCkficDFK0AunzfQazJGdm tr7I+SsWIRMT5zqrMCK5JDEjI8OONaWDhWUXenbeFMEhrFicxqDWy1x6x6ZJxXXc UDdvSBPE0N0FpsRzmmf51HVSIM1+iYVjigXIMdl24XGw/jFxXzJ+4p/v+0nb2fWz sjdCblP6ysLzZwyaSrpQrFDaHZKJ12s5/t7cCpk6krvEdatBntVAy8WaE+hNc22v R71Na/zpaUrcgYgppEMc7cuke9cFOsWdUIcTE+KV+w8epNeQbKpd17tMenbPRkZ0 7BvadPxWZSuaFPenQde9WpEYVOtr7Pk2nL01yR+kqI11CMyk1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6hPfRCTC7PMhlit6mLXdcRFys5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYTQ2M2NkYmMtZjAyYS0z ZjljLWE4MjQtOWMzZTU3ZWY5OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZE8M2LEcNTiGABOxms+u5W5lsRHhjELKEOoyEHvyzoLNtEW2Rftmt7 ID7fcGLvdhRmo1HoawpHKpzNsKGvSu/98Pcmsu5S3q3B+PLr045Z7iecpQZGR//x nuHdRplvvdnDxByKXbUxAWB7E+naxGZytO/5NEE0ouA1FZ1VVnL603KukVd6OBHJ oYUx4RCyfeKTJZSN1Fyr/MDy3FmS981b/GkdOgH/pFHaK1j8EgtxlV4npvEKOCN/ mEXwt8nbDYdi+HW6JZ+p0p55H7+QVRwSObKKv7pLtOvZB7DQbFOC7OGzoA5UcSID MC9OJb+XijKyozTQAFy9wxlM1cF4I9s= -----END CERTIFICATE-----Generated at Tue Jul 1 19:22:01 2025 by rpki-client