$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa File: acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa (raw, json) Hash identifier: pA8giTfJbaSjfeP/bAckOYAJobdpPGHm/tNHbq06oi0= Subject key identifier: C4:A3:03:DB:5D:E0:DA:D7:A7:39:80:3C:D5:27:E0:43:A4:25:D4:E8 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584A411052B5D3C10B1C8BD57B80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 13536 IP address blocks: 208.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:52:b5:d3:c1:0b:1c:8b:d5:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=2547ef69-6aad-45a4-8691-296f8ac36b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:07:0b:1a:0f:99:05:bb:e1:00:42:af:f5:9b: 6d:c6:2b:8e:cd:ff:a7:75:01:9c:8c:b6:58:48:39: 47:c0:63:95:2f:26:21:ed:04:97:1a:d3:c6:85:47: 48:00:35:0c:eb:13:9d:ed:91:96:64:72:3f:82:cc: 01:bf:2f:b3:5a:30:5d:be:bf:91:12:26:51:f8:d5: c6:43:64:b3:5a:62:2a:b2:48:02:a9:41:5a:50:5f: 99:10:a3:0d:4d:5a:83:e6:ba:4d:a2:7f:a4:e0:68: 2f:11:ed:52:5d:f1:a3:54:e8:4b:0d:c1:e8:da:05: e4:a6:6f:28:ae:3a:66:34:41:a3:9b:8f:5e:90:24: 16:b8:e7:2e:3b:f3:42:a5:80:13:fb:45:ed:43:0d: 13:61:7c:8c:8c:f9:d3:c2:cd:a7:35:a3:9d:7f:a5: b5:82:64:d1:6a:ee:6f:fa:c2:58:44:53:4e:9e:94: 34:b7:a2:97:2b:7a:22:a5:6b:1a:59:4e:e4:cd:cb: 74:d5:d2:fe:bb:a9:89:78:fc:8c:fc:7d:54:e4:fe: b6:b2:50:4a:ca:19:df:87:07:c7:a5:01:66:14:5d: 47:e4:75:2b:1f:d0:95:1d:3d:9e:3d:d1:bc:7f:14: 60:31:14:7f:49:e5:4d:85:d8:23:e0:fe:2a:44:68: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A3:03:DB:5D:E0:DA:D7:A7:39:80:3C:D5:27:E0:43:A4:25:D4:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:dc:29:ae:2a:a8:e2:38:86:ed:c2:24:bc:26:e7:08:a4:26: df:00:6e:39:01:bf:78:f5:af:79:6e:c4:26:dd:fb:a5:c9:00: 36:99:67:90:cd:30:cb:4f:c8:81:df:15:cd:03:5e:cc:77:4c: 87:af:a4:fd:42:2d:19:d1:b5:7c:ac:92:6c:fc:99:2f:a3:6c: e2:d8:33:5d:3b:41:1e:f4:42:a2:fb:72:08:76:77:3a:70:ca: 51:17:3c:8c:7b:54:6c:40:51:f9:77:a7:7a:85:3a:8e:c5:d8: b7:2d:c8:50:1c:12:1f:5e:16:82:c4:14:bc:67:41:11:80:fc: 34:d1:d2:52:20:67:a9:33:39:05:8c:a3:e4:25:58:89:36:57: f4:57:10:18:9a:d7:16:ac:1e:04:4f:25:52:91:55:8b:0e:ed: e5:85:28:56:a8:c4:7b:f5:a9:7f:b4:80:05:ec:59:30:4f:e3: 3f:96:e1:92:96:06:46:6a:07:24:cc:51:bf:d8:40:b0:09:f9: f5:8f:54:f7:c5:07:49:b4:26:1e:77:44:97:d2:11:de:0c:c3: fa:86:ad:9a:8e:cb:b6:29:44:7e:9b:d4:f0:a2:22:be:3a:3d: 0a:2a:a6:a2:ee:17:76:16:2f:70:b9:1e:e9:a9:b1:3c:8e:6c: 1e:c1:e7:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFK108ELHIvVe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MjU0N2VmNjktNmFhZC00NWE0LTg2OTEtMjk2ZjhhYzM2YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQcLGg+ZBbvhAEKv9ZttxiuOzf+ndQGcjLZY SDlHwGOVLyYh7QSXGtPGhUdIADUM6xOd7ZGWZHI/gswBvy+zWjBdvr+REiZR+NXG Q2SzWmIqskgCqUFaUF+ZEKMNTVqD5rpNon+k4GgvEe1SXfGjVOhLDcHo2gXkpm8o rjpmNEGjm49ekCQWuOcuO/NCpYAT+0XtQw0TYXyMjPnTws2nNaOdf6W1gmTRau5v +sJYRFNOnpQ0t6KXK3oipWsaWU7kzct01dL+u6mJePyM/H1U5P62slBKyhnfhwfH pQFmFF1H5HUrH9CVHT2ePdG8fxRgMRR/SeVNhdgj4P4qRGinfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSjA9td4NrXpzmAPNUn4EOkJdToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYWNmMDA3MGEtYmNmMS0z MWY3LWI5YjUtMDNlNmI0MGY0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7cKa4qqOI4hu3CJLwm5wikJt8AbjkBv3j1r3luxCbd+6XJADaZZ5DN MMtPyIHfFc0DXsx3TIevpP1CLRnRtXyskmz8mS+jbOLYM107QR70QqL7cgh2dzpw ylEXPIx7VGxAUfl3p3qFOo7F2LctyFAcEh9eFoLEFLxnQRGA/DTR0lIgZ6kzOQWM o+QlWIk2V/RXEBia1xasHgRPJVKRVYsO7eWFKFaoxHv1qX+0gAXsWTBP4z+W4ZKW BkZqByTMUb/YQLAJ+fWPVPfFB0m0Jh53RJfSEd4Mw/qGrZqOy7YpRH6b1PCiIr46 PQoqpqLuF3YWL3C5HumpsTyObB7B5yI= -----END CERTIFICATE-----Generated at Sun Jun 29 12:09:12 2025 by rpki-client