$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa File: 8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa (raw, json) Hash identifier: Gyx4gNbxpDWdXGIoqh9eS3l1royLO2q+Lr7b/FcQU5Q= Subject key identifier: 50:22:B3:E6:10:65:5F:F4:9B:7B:EC:36:D0:5E:07:57:6B:10:E0:72 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584A411056A849BDB7345E225800 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 12083 IP address blocks: 24.214.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:56:a8:49:bd:b7:34:5e:22:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=d3ea8c97-25d3-48c1-89e5-29d1b310e88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:98:52:16:78:8b:98:7c:bb:d4:4b:ec:61: fc:08:8c:8e:0f:8c:cf:16:d7:a9:e8:11:03:32:d3: 9a:2d:f2:93:15:ca:51:1c:51:cf:d2:ae:c8:47:e1: 7f:70:4a:93:f1:49:14:b7:da:f6:ba:3f:38:a4:94: 04:e8:cf:24:df:fc:01:8f:b7:fe:46:a1:d3:61:2f: 93:d3:36:a6:a5:09:7d:7d:64:28:57:0f:f4:e4:3d: be:1e:09:38:bf:09:73:37:d0:ab:2d:3c:1d:d4:ac: b6:22:73:d3:09:23:3c:71:d0:bf:e4:7d:df:0e:f7: c0:44:be:81:41:5d:64:60:4a:25:11:19:be:70:70: ee:4e:fb:71:16:3e:e0:8e:a4:1a:4a:e2:27:b6:37: 7c:08:62:4c:74:1b:3b:db:6a:89:d8:d6:f1:8e:49: 8b:45:e9:cb:ad:69:cc:ae:4f:15:ca:c3:47:16:72: d2:f0:d7:8c:b3:09:13:79:54:95:51:50:14:5b:7f: 85:8c:a5:0e:81:89:60:d0:39:bb:38:4c:97:c6:b4: 34:6e:a8:5d:37:6b:80:2e:37:4f:96:80:0f:c9:a2: db:26:11:97:27:e1:6a:c7:7a:8c:d9:20:38:0f:9c: f4:02:f7:e8:5c:e0:a9:cc:1d:ce:a4:17:86:8a:e3: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:22:B3:E6:10:65:5F:F4:9B:7B:EC:36:D0:5E:07:57:6B:10:E0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8095fe8b-bce8-3f1c-916c-2dcc81c6d45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d6:95:4f:69:58:63:2b:6b:87:63:d4:e4:6c:e5:47:1e:8c: ed:03:28:d7:87:f5:a7:88:ef:af:a2:2d:fa:07:fb:6b:b4:43: 2c:77:9f:93:09:20:ba:f1:51:3d:55:7c:d2:b5:58:4c:e3:f9: 49:10:43:b3:b1:b6:44:1d:b7:24:01:7c:9d:3f:a6:78:fe:89: 3b:cb:1b:8f:fc:cc:49:de:53:ec:63:b6:69:ce:8e:b9:2f:35: 4b:c0:d8:6c:8f:67:07:fd:d3:3c:a3:39:09:f5:ec:d9:12:c9: 3c:24:13:3b:7a:38:09:7d:ac:1a:e3:50:55:90:b7:e4:51:ad: d7:0f:47:17:9f:19:13:7d:86:65:64:16:c2:8e:62:f5:3e:1f: ba:cb:32:81:85:2c:9d:b8:75:26:c6:d7:2a:8e:5b:15:f7:59: 2b:f3:ca:12:2e:99:c8:54:6b:31:9b:91:e0:6a:8c:ea:27:25: 08:99:e7:27:2c:6e:d2:a3:da:8a:de:17:df:50:b1:ad:4f:04: a0:2b:0a:71:43:6b:d2:92:09:cd:11:0f:87:67:f2:23:31:19: 86:17:cf:72:ad:d2:14:73:fc:0c:44:4e:c0:25:06:8d:96:26: 30:d0:50:b6:42:8d:15:7b:78:c7:10:3b:6a:8f:dd:a6:60:00: 4c:6d:72:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFaoSb23NF4iWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDNlYThjOTctMjVkMy00OGMxLTg5ZTUtMjlkMWIzMTBlODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjWYUhZ4i5h8u9RL7GH8CIyOD4zPFtep6BED MtOaLfKTFcpRHFHP0q7IR+F/cEqT8UkUt9r2uj84pJQE6M8k3/wBj7f+RqHTYS+T 0zampQl9fWQoVw/05D2+Hgk4vwlzN9CrLTwd1Ky2InPTCSM8cdC/5H3fDvfARL6B QV1kYEolERm+cHDuTvtxFj7gjqQaSuIntjd8CGJMdBs722qJ2NbxjkmLRenLrWnM rk8VysNHFnLS8NeMswkTeVSVUVAUW3+FjKUOgYlg0Dm7OEyXxrQ0bqhdN2uALjdP loAPyaLbJhGXJ+Fqx3qM2SA4D5z0AvfoXOCpzB3OpBeGiuMaTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAis+YQZV/0m3vsNtBeB1drEOByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvODA5NWZlOGItYmNlOC0z ZjFjLTkxNmMtMmRjYzgxYzZkNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGNbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjWlU9pWGMra4dj1ORs5UcejO0DKNeH9aeI76+iLfoH+2u0Qyx3n5MJ ILrxUT1VfNK1WEzj+UkQQ7OxtkQdtyQBfJ0/pnj+iTvLG4/8zEneU+xjtmnOjrkv NUvA2GyPZwf90zyjOQn17NkSyTwkEzt6OAl9rBrjUFWQt+RRrdcPRxefGRN9hmVk FsKOYvU+H7rLMoGFLJ24dSbG1yqOWxX3WSvzyhIumchUazGbkeBqjOonJQiZ5ycs btKj2oreF99Qsa1PBKArCnFDa9KSCc0RD4dn8iMxGYYXz3Kt0hRz/AxETsAlBo2W JjDQULZCjRV7eMcQO2qP3aZgAExtcqY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:35:55 2025 by rpki-client