$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa File: 397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa (raw, json) Hash identifier: vWc+e9+acbOevMNwtm9tS9oBLXpNF0J3tZBdM4ilYzE= Subject key identifier: CE:F0:6B:B6:DE:79:68:2E:8F:9B:1D:28:95:9C:93:82:0E:D9:1A:46 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584A4110569A36E8B0883F189980 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 12083 IP address blocks: 24.214.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:56:9a:36:e8:b0:88:3f:18:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=5d535edd-22e1-4a9f-ab8e-2cab3db6ae0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:a0:43:b8:16:11:3d:d9:3a:fe:8f:c8:1e: 8d:76:7e:f0:26:d6:78:2f:0f:70:a5:59:e6:cc:ab: 56:5c:58:ca:3c:84:78:e7:f8:57:92:76:90:9c:f1: a3:39:a3:dd:90:ba:38:8c:fe:93:c1:ac:f7:b5:b4: 91:87:8c:12:af:96:6c:26:49:b1:50:de:9c:19:f4: 30:57:e5:a0:89:2d:54:17:28:73:bb:04:4d:6f:8b: 99:04:d5:46:68:d2:fc:b0:f3:4b:a9:93:d6:77:16: 1a:3f:ec:66:92:6a:94:76:77:de:f3:2c:7f:e6:01: 37:d5:54:85:f1:75:ad:51:4a:5c:2b:5d:a9:1d:c3: 26:c5:18:1f:13:62:fb:03:7e:21:4d:87:33:51:bb: 5c:0b:67:a8:5b:73:e4:5a:ae:bb:1c:bd:34:b7:21: bf:40:7d:b8:f9:b1:55:0f:12:cd:51:22:72:b8:c5: 7b:55:3c:fd:21:de:91:92:f6:fa:fb:ed:a9:82:1b: f2:4c:93:3b:bb:9f:c9:af:59:52:e0:fd:d7:9b:14: b0:ef:50:6b:81:e5:65:66:2b:e1:ec:35:05:9b:a4: 73:a1:00:40:3d:5f:ff:26:9a:6b:f7:8f:8e:be:1c: f4:26:d7:b7:cc:55:ce:7a:75:4e:6b:94:1b:12:2c: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F0:6B:B6:DE:79:68:2E:8F:9B:1D:28:95:9C:93:82:0E:D9:1A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:17:ab:0f:16:8b:34:27:fc:40:3b:0e:ec:28:5e:9b:e9:c5: 32:ed:6c:e4:f4:04:f9:62:29:41:3d:21:fd:a1:87:3a:3e:69: bc:47:d0:7c:ee:06:b1:c1:1b:77:7c:54:51:73:7b:2f:65:36: fe:47:14:05:33:c5:dd:97:bb:ae:e5:8d:7e:f3:e5:0b:5b:9a: 59:2f:e0:d6:0e:bd:5d:12:11:c3:77:fd:88:ae:e2:f0:13:ca: e7:10:56:a0:51:82:68:50:08:18:a8:eb:87:96:5d:8d:fd:0b: 27:d6:c3:83:d1:b1:b2:fc:da:c8:b2:39:2a:68:db:18:72:eb: 85:80:5f:1f:fa:b1:75:c8:b5:0b:db:a0:fc:10:b8:10:dc:e1: cc:e0:9d:e2:d2:2a:41:cd:92:14:89:a7:4f:16:e9:34:e3:f0: a0:63:87:a4:6d:bb:45:75:e6:fb:e4:b8:23:57:b8:84:ad:62: 1c:0c:56:e6:60:9b:60:f2:12:7e:d7:1f:cf:13:36:bd:c0:05: d8:3b:db:a8:5d:36:72:88:51:9d:a0:e1:a1:5d:d0:b7:c8:14: 2b:a7:8f:2c:08:65:41:53:e1:1d:83:13:a1:5d:6a:b8:37:2d: 3e:93:44:9f:9e:a4:1a:e5:6c:9d:09:4a:7d:b8:74:fc:55:ae: d7:dc:9b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFaaNuiwiD8YmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NWQ1MzVlZGQtMjJlMS00YTlmLWFiOGUtMmNhYjNkYjZhZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2agQ7gWET3ZOv6PyB6Ndn7wJtZ4Lw9wpVnm zKtWXFjKPIR45/hXknaQnPGjOaPdkLo4jP6Twaz3tbSRh4wSr5ZsJkmxUN6cGfQw V+WgiS1UFyhzuwRNb4uZBNVGaNL8sPNLqZPWdxYaP+xmkmqUdnfe8yx/5gE31VSF 8XWtUUpcK12pHcMmxRgfE2L7A34hTYczUbtcC2eoW3PkWq67HL00tyG/QH24+bFV DxLNUSJyuMV7VTz9Id6Rkvb6++2pghvyTJM7u5/Jr1lS4P3XmxSw71BrgeVlZivh 7DUFm6RzoQBAPV//Jppr94+Ovhz0Jte3zFXOenVOa5QbEixO5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7wa7beeWguj5sdKJWck4IO2RpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMzk3YzI3NzgtZjdhMi0z NjdkLTliNjQtZmJiODdjM2FjNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGNbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEXqw8WizQn/EA7DuwoXpvpxTLtbOT0BPliKUE9If2hhzo+abxH0Hzu BrHBG3d8VFFzey9lNv5HFAUzxd2Xu67ljX7z5Qtbmlkv4NYOvV0SEcN3/Yiu4vAT yucQVqBRgmhQCBio64eWXY39CyfWw4PRsbL82siyOSpo2xhy64WAXx/6sXXItQvb oPwQuBDc4czgneLSKkHNkhSJp08W6TTj8KBjh6Rtu0V15vvkuCNXuIStYhwMVuZg m2DyEn7XH88TNr3ABdg726hdNnKIUZ2g4aFd0LfIFCunjywIZUFT4R2DE6Fdarg3 LT6TRJ+epBrlbJ0JSn24dPxVrtfcm3k= -----END CERTIFICATE-----Generated at Mon Jun 30 00:49:48 2025 by rpki-client