$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa File: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json) Hash identifier: p2yGNO8VaEcJc2hx3FfKtwLIaiwc71NxivlobEFbddA= Subject key identifier: 38:2C:30:CD:7F:9F:A7:4A:D3:5B:F8:19:FC:3A:75:F8:73:6D:0B:44 Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F43285849FE0FEFDC72DEBA898CB80E80 Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 395019 IP address blocks: 208.76.208.0/22 maxlen: 22 2602:fbfd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ef:dc:72:de:ba:89:8c:b8:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=ec8bb20f-0e13-4c6b-9c84-ad358992a3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:c6:30:b4:f1:24:8d:01:14:a3:b1:97:d5: 17:c4:d5:70:b7:f7:81:84:69:50:7c:12:a7:92:77: e5:62:52:e2:58:01:38:99:b4:36:37:d8:ef:e0:02: 46:7f:14:d7:e3:8e:f4:92:bc:9d:5d:2d:91:7f:2f: 94:4a:da:76:09:03:1c:27:55:05:c3:b5:48:23:8c: 03:84:66:18:08:3a:00:b0:ef:9c:24:8b:d2:8f:3d: ee:db:b0:4c:38:1f:1a:0c:49:58:68:35:7f:a7:ff: 6a:c1:de:54:6b:d3:b6:39:38:73:83:8e:4c:bc:0d: 6f:ce:d3:7a:f8:53:08:f6:7e:a7:0e:a8:7b:e8:03: 4d:57:1c:fa:81:dd:c5:e3:4a:9d:f0:39:f9:58:c0: 5c:00:7e:98:f6:43:e5:08:00:73:82:5b:1f:a9:6e: e0:3e:ff:c3:a2:d9:06:80:fc:0f:80:02:5e:bc:8c: 8f:fd:67:bc:b1:89:bf:66:27:6b:69:55:b5:11:da: d1:66:86:d7:e6:01:d1:8b:63:97:79:eb:7b:51:a5: 3c:0b:45:4f:01:10:93:12:04:f3:fd:8b:cf:86:23: 34:1b:42:f8:22:7b:b9:0b:38:e5:39:8b:6f:1b:6e: 8a:ce:88:87:1c:93:8f:3d:96:81:af:d6:73:1e:a6: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2C:30:CD:7F:9F:A7:4A:D3:5B:F8:19:FC:3A:75:F8:73:6D:0B:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: 208.76.208.0/22 IPv6: 2602:fbfd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:da:61:e2:f7:f9:0d:b4:b7:cf:86:f0:a8:9b:09:6d:46:af: 3f:15:85:80:b3:03:7f:65:2b:f5:8e:4c:66:8c:78:aa:f3:a1: d8:73:36:ef:7a:b0:b3:89:72:e3:d3:4c:fa:4c:69:ca:4b:c4: d9:da:04:89:ab:5c:c7:ea:32:6d:62:81:c3:de:8f:ec:81:e7: 10:6a:ba:df:8e:d7:46:e5:15:31:61:1d:88:c7:13:bb:10:93: 0e:b7:1a:1f:a1:fe:ac:f7:52:74:2b:5a:57:58:98:84:ae:c3: 65:c0:e2:67:01:3e:07:24:b5:70:9f:2a:bb:da:c6:29:b3:d3: ca:76:36:4b:26:b3:38:1b:03:45:f2:cd:21:66:b5:c0:7d:5c: 95:7e:1a:5b:94:9f:51:5e:f0:5a:15:cc:27:d2:44:4d:59:ee: 19:a6:b6:7a:c5:9a:d1:5e:5d:d3:85:5c:5d:66:eb:42:ea:22: d6:ff:a7:e0:be:ef:d2:d1:97:ad:56:be:9c:12:32:8b:ab:13: 95:11:a5:bb:55:60:e5:ee:79:fd:ae:5c:0e:5c:d3:ad:f0:13: 1e:0d:45:61:cc:2d:3b:8b:9b:71:2d:3b:20:30:39:f3:dd:13: c0:ea:4a:75:1f:21:de:c9:8c:e2:aa:d2:1d:08:8f:e3:da:f8: 67:ae:9e:dc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEn+D+/cct66iYy4DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZWM4YmIyMGYtMGUxMy00YzZiLTljODQtYWQzNTg5OTJhM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYfGMLTxJI0BFKOxl9UXxNVwt/eBhGlQfBKn knflYlLiWAE4mbQ2N9jv4AJGfxTX4470krydXS2Rfy+UStp2CQMcJ1UFw7VII4wD hGYYCDoAsO+cJIvSjz3u27BMOB8aDElYaDV/p/9qwd5Ua9O2OThzg45MvA1vztN6 +FMI9n6nDqh76ANNVxz6gd3F40qd8Dn5WMBcAH6Y9kPlCABzglsfqW7gPv/DotkG gPwPgAJevIyP/We8sYm/ZidraVW1EdrRZobX5gHRi2OXeet7UaU8C0VPARCTEgTz /YvPhiM0G0L4Inu5CzjlOYtvG26KzoiHHJOPPZaBr9ZzHqah5QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDgsMM1/n6dK01v4Gfw6dfhzbQtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvMDJkNGM4YzEtODExYy0z MDFmLWFlNDctNjFjNmM2MjAzNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0EzQMA4E AgACMAgDBgQmAvv9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw2mHi9/kNtLfPhvComwltRq8/FYWAswN/ ZSv1jkxmjHiq86HYczbverCziXLj00z6TGnKS8TZ2gSJq1zH6jJtYoHD3o/sgecQ arrfjtdG5RUxYR2IxxO7EJMOtxofof6s91J0K1pXWJiErsNlwOJnAT4HJLVwnyq7 2sYps9PKdjZLJrM4GwNF8s0hZrXAfVyVfhpblJ9RXvBaFcwn0kRNWe4ZprZ6xZrR Xl3ThVxdZutC6iLW/6fgvu/S0ZetVr6cEjKLqxOVEaW7VWDl7nn9rlwOXNOt8BMe DUVhzC07i5txLTsgMDnz3RPA6kp1HyHeyYziqtIdCI/j2vhnrp7c -----END CERTIFICATE-----Generated at Sat Jul 5 05:02:14 2025 by rpki-client