$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa File: 1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa (raw, json) Hash identifier: JO3xeuUeHNs2xbuXo8/USZKcOCHQHH8zIiErYy9BkSw= Subject key identifier: 2C:0E:D7:31:05:01:85:E9:C2:09:9E:95:80:FF:BC:DD:F4:50:DE:35 Certificate issuer: /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff Certificate serial: 010D0C9F4328584A56005274123DA532D8072E80 Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 7896 IP address blocks: 216.128.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:52:74:12:3d:a5:32:d8:07:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=534db8c6-98d0-4afd-b887-2da4139fce75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:40:b6:ab:e6:fb:95:cb:f5:b8:c9:66:c0: 13:43:55:ca:a5:e5:5e:4d:ed:00:99:93:79:35:c0: ee:54:c0:b9:c4:6b:ee:c7:3a:ef:0f:2f:ab:28:c0: 3d:9e:55:af:2d:c3:ff:67:c9:62:3c:ec:f1:77:ab: 9e:49:b0:fa:fb:cc:eb:ce:13:eb:03:99:4f:44:16: 54:e0:e7:5b:8b:70:93:d5:96:f2:73:2d:0e:c3:6e: 7e:53:35:07:4b:02:71:b8:4e:50:d1:b8:0a:73:b6: 17:14:13:0d:5b:15:b1:ad:71:0d:f7:dd:77:b7:09: 02:b3:00:e5:30:76:df:01:bb:19:34:2e:29:92:92: 3b:2c:55:44:d3:0a:cc:98:ee:da:27:8a:06:c1:ec: e4:90:5e:c3:bd:fb:48:9f:6e:34:ea:6d:cd:62:11: d1:56:bb:52:f5:5d:9a:f9:c1:b9:18:cd:a1:60:2c: 1e:6c:b8:0a:cc:b2:cb:5d:ef:97:3b:0f:98:32:58: d8:33:cb:17:c6:38:a4:99:d5:69:2e:a0:e6:13:3c: 2d:97:bb:dd:8e:58:64:53:0f:51:9f:7f:e9:80:f6: da:01:51:1e:c5:6b:f7:9e:77:69:bb:c6:a0:27:92: 22:86:ec:9e:36:ae:95:91:d2:91:ab:d3:0e:7d:f5: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:D7:31:05:01:85:E9:C2:09:9E:95:80:FF:BC:DD:F4:50:DE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl X509v3 Authority Key Identifier: keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer sbgp-ipAddrBlock: critical IPv4: 216.128.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:98:e6:e0:3b:8e:cb:38:35:a8:47:09:1f:4c:de:b0:d3:47: 96:fc:59:70:1c:cb:1c:93:1b:d8:8a:bb:d3:9f:f2:4f:56:3e: 1b:ca:dd:f0:64:5f:3c:50:0f:33:0b:1f:6c:9a:f0:10:25:59: e9:5a:aa:ba:5f:be:d4:5c:6b:a1:bd:48:d6:3e:ae:2c:04:b2: f1:cb:ca:30:d7:f8:14:0a:ef:16:9b:7b:67:a9:4c:72:b7:7d: 54:78:91:94:93:ca:36:2d:2b:9d:77:07:ea:a6:f5:0e:a0:70: 63:0f:9c:0f:8b:e0:23:ef:02:99:b4:a0:2a:50:61:fd:85:a6: ce:b0:6e:19:40:aa:98:e1:78:94:cc:80:6f:a5:49:b5:d3:c0: b8:f1:83:4b:b1:18:b5:45:f6:38:34:05:6e:b2:62:23:8c:cb: 5d:1f:a5:1c:ea:13:e0:23:ba:e0:39:e7:d4:b7:7d:2b:1c:01: ef:32:1e:fe:a1:fc:f7:61:9d:e5:65:2f:71:97:19:0f:b9:d2: 6e:d9:48:d4:99:33:09:03:30:0e:25:12:80:44:4e:c1:75:45: a5:d6:a8:8f:fa:4c:76:f5:97:e4:09:c0:04:38:d4:42:70:50: 03:49:ff:7f:95:35:d0:34:fd:29:3f:3d:a2:8c:18:a2:ef:08: 6e:f3:4d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFJ0Ej2lMtgHLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZWJkNWYtZDcyZi00ZmZlLWFlY2QtYWQyZDJiMWE4 ZWZmMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk NTM0ZGI4YzYtOThkMC00YWZkLWI4ODctMmRhNDEzOWZjZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglhAtqvm+5XL9bjJZsATQ1XKpeVeTe0AmZN5 NcDuVMC5xGvuxzrvDy+rKMA9nlWvLcP/Z8liPOzxd6ueSbD6+8zrzhPrA5lPRBZU 4Odbi3CT1Zbycy0Ow25+UzUHSwJxuE5Q0bgKc7YXFBMNWxWxrXEN9913twkCswDl MHbfAbsZNC4pkpI7LFVE0wrMmO7aJ4oGwezkkF7DvftIn2406m3NYhHRVrtS9V2a +cG5GM2hYCwebLgKzLLLXe+XOw+YMljYM8sXxjikmdVpLqDmEzwtl7vdjlhkUw9R n3/pgPbaAVEexWv3nndpu8agJ5IihuyeNq6VkdKRq9MOffVLjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwO1zEFAYXpwgmelYD/vN30UN41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMTRl YmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJkMmIxYThlZmYvMWFjMDMyYTUtOGNkNy0z ZTc3LWJlNmYtOWVmYmQ0ODY5YWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTE0ZWJkNWYtZDcyZi00ZmZlLWFl Y2QtYWQyZDJiMWE4ZWZmL2UxNGViZDVmLWQ3MmYtNGZmZS1hZWNkLWFkMmQyYjFh OGVmZi5jcmwwHwYDVR0jBBgwFoAUKJOWuiuwPLkmCsnjm3yOzLSIMbkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMTRlYmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJk MmIxYThlZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2Y5uA7jss4NahHCR9M3rDTR5b8WXAcyxyTG9iKu9Of8k9WPhvK3fBk XzxQDzMLH2ya8BAlWelaqrpfvtRca6G9SNY+riwEsvHLyjDX+BQK7xabe2epTHK3 fVR4kZSTyjYtK513B+qm9Q6gcGMPnA+L4CPvApm0oCpQYf2Fps6wbhlAqpjheJTM gG+lSbXTwLjxg0uxGLVF9jg0BW6yYiOMy10fpRzqE+AjuuA559S3fSscAe8yHv6h /PdhneVlL3GXGQ+50m7ZSNSZMwkDMA4lEoBETsF1RaXWqI/6THb1l+QJwAQ41EJw UANJ/3+VNdA0/Sk/PaKMGKLvCG7zTf0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:47:55 2025 by rpki-client