$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa File: 59392e2a-7cc4-32fc-840e-7383dc8b4959.roa (raw, json) Hash identifier: 4iq2p7xT4zsWJkcNq/szHjBKScpURVHisPuIxVP9rWc= Subject key identifier: 2B:67:16:6C:F6:0F:70:CE:56:2A:F8:7B:A3:E9:3E:37:76:4D:39:15 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584A411052E12DD5D912132A0400 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 13536 IP address blocks: 208.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:52:e1:2d:d5:d9:12:13:2a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=8a71fb19-324f-49b8-83e4-00616d622509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:08:6c:62:69:b4:b2:1f:19:f7:10:96:ad: c7:93:d3:e1:48:2d:51:6e:87:64:ce:98:95:76:61: 63:0c:6c:75:d3:2a:d6:70:68:9f:d6:50:e7:83:5c: fd:fa:90:32:78:1a:e1:e2:59:03:d4:ab:ce:cb:a5: 59:d2:fe:73:fe:92:73:7f:62:e9:2b:f6:20:de:9b: b6:02:5b:73:7c:12:97:43:1f:43:64:cc:00:6d:82: fe:5c:81:61:dd:30:f0:68:f1:c0:2a:7e:dd:15:fe: eb:a4:15:15:11:ae:fd:df:5e:b9:e4:53:fb:4a:f2: 38:91:4f:02:41:3f:e5:07:66:cf:03:eb:f9:d4:b1: a5:97:64:e3:b3:6a:9f:af:e1:d3:e4:40:c6:ef:9d: e3:6c:d4:02:cd:2f:5f:7a:59:e8:19:5f:d6:e1:6f: a3:b0:2d:bb:39:d8:36:f5:bc:c7:ed:58:da:72:f0: 94:ec:a5:cb:20:64:18:f8:f9:38:da:00:3d:42:8d: 11:58:8e:cc:8b:ef:9f:c2:10:3d:a1:42:d1:82:35: a0:30:30:22:9a:e5:36:b8:27:1e:5b:a5:e2:a7:9a: bf:da:6c:ba:92:62:1c:4c:e0:2e:32:bd:c7:bc:a2: c0:35:df:e8:4a:87:10:4b:ef:e2:2a:c9:ba:d7:53: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:67:16:6C:F6:0F:70:CE:56:2A:F8:7B:A3:E9:3E:37:76:4D:39:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:91:3e:1f:18:40:15:f8:d0:0a:89:48:51:a5:af:ba:02:9c: b6:45:ef:2b:06:cc:4a:a2:79:9e:77:d6:89:3b:b7:82:5b:86: 39:0f:d9:80:9a:5c:a5:01:17:92:27:f8:07:2a:79:c9:b8:ac: 4a:0a:f3:5f:7f:51:84:df:c0:3d:92:86:01:07:eb:87:d9:a6: 3e:ee:03:61:94:15:d1:bf:a7:7d:b2:f8:32:9c:36:b3:0b:0e: e4:a1:10:a6:99:db:bd:26:6e:21:62:88:d9:5f:2b:d2:89:9f: 67:01:e7:07:54:e4:64:6e:f2:74:8c:67:94:70:a4:96:69:50: 41:de:a4:f5:16:5f:f4:e5:b1:62:c8:5f:fb:05:c5:28:f5:73: 3c:1f:01:36:70:f5:f8:8b:8e:0b:ab:a6:f2:d3:a4:fb:f8:0a: 1c:dd:ac:6e:e6:7c:9a:2f:99:49:b8:5a:ae:ee:16:fe:1e:42: ee:c5:97:8c:6c:e2:53:ed:e1:89:38:66:ab:29:2f:b0:1f:6d: 1e:1b:e9:6e:a0:6d:d9:a7:07:8d:8b:b2:00:54:4d:4a:16:f4: b1:b5:6f:67:bf:58:29:06:6f:a6:04:aa:84:00:26:df:45:22: e1:08:b4:c4:71:de:78:90:89:64:7d:ac:2c:75:b9:a5:36:27: 88:01:8d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFLhLdXZEhMqBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk OGE3MWZiMTktMzI0Zi00OWI4LTgzZTQtMDA2MTZkNjIyNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2MIbGJptLIfGfcQlq3Hk9PhSC1RbodkzpiV dmFjDGx10yrWcGif1lDng1z9+pAyeBrh4lkD1KvOy6VZ0v5z/pJzf2LpK/Yg3pu2 AltzfBKXQx9DZMwAbYL+XIFh3TDwaPHAKn7dFf7rpBUVEa7931655FP7SvI4kU8C QT/lB2bPA+v51LGll2Tjs2qfr+HT5EDG753jbNQCzS9felnoGV/W4W+jsC27Odg2 9bzH7VjacvCU7KXLIGQY+Pk42gA9Qo0RWI7Mi++fwhA9oULRgjWgMDAimuU2uCce W6Xip5q/2my6kmIcTOAuMr3HvKLANd/oSocQS+/iKsm611N3EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtnFmz2D3DOVir4e6PpPjd2TTkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNTkzOTJlMmEtN2NjNC0z MmZjLTg0MGUtNzM4M2RjOGI0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+RPh8YQBX40AqJSFGlr7oCnLZF7ysGzEqieZ531ok7t4JbhjkP2YCa XKUBF5In+Acqecm4rEoK819/UYTfwD2ShgEH64fZpj7uA2GUFdG/p32y+DKcNrML DuShEKaZ270mbiFiiNlfK9KJn2cB5wdU5GRu8nSMZ5RwpJZpUEHepPUWX/TlsWLI X/sFxSj1czwfATZw9fiLjgurpvLTpPv4ChzdrG7mfJovmUm4Wq7uFv4eQu7Fl4xs 4lPt4Yk4ZqspL7AfbR4b6W6gbdmnB42LsgBUTUoW9LG1b2e/WCkGb6YEqoQAJt9F IuEItMRx3niQiWR9rCx1uaU2J4gBjQk= -----END CERTIFICATE-----Generated at Sun Jun 29 10:35:52 2025 by rpki-client