$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa File: 64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa (raw, json) Hash identifier: Eyh2nfbQvjms5wacvxO7/DS/GK8fhygBPpIlXtee0S4= Subject key identifier: CB:A6:54:29:69:73:F9:22:78:76:69:A2:CE:26:60:E1:38:8B:64:B7 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F43285849D165089212DC08AAF11EEC00 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 11650 IP address blocks: 208.114.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:08:92:12:dc:08:aa:f1:1e:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=88b15f6d-2df0-4fc3-b593-1389cb77ec99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:67:64:44:f7:32:a8:e4:b8:d5:f3:1d:d9: 6e:ca:c0:2c:7b:d8:3b:57:d2:c5:1e:a1:01:ee:02: 95:49:ad:36:ef:c5:ec:5b:76:69:a5:f0:da:62:5a: ff:86:bf:05:67:48:44:c4:80:46:65:d2:68:2b:d7: b5:44:e2:ce:93:70:03:bd:08:1f:41:9c:77:e3:21: ec:4e:55:ba:a1:e1:81:10:1e:67:3e:90:eb:0f:6c: 4d:35:14:60:ea:4f:f8:fc:97:48:91:f3:7d:11:99: cc:4c:c3:72:e2:44:eb:9e:90:92:5e:f4:8b:72:37: 76:9f:86:59:d6:ac:64:a1:eb:e7:8b:52:de:1a:80: c3:d2:21:fd:42:be:6e:9d:f3:4e:bd:8f:bf:6a:02: 62:77:30:24:b6:94:c3:ab:00:ed:cd:c2:f3:5a:7f: 18:dc:a0:ea:1c:1f:fd:27:f7:3c:43:72:24:e1:fe: 3c:4e:7d:35:59:64:34:10:6d:4e:58:bb:fa:56:5d: f0:39:c7:7c:1e:23:27:30:95:40:bf:5c:13:c2:26: e0:c7:9a:f3:8e:b5:9f:f4:37:bb:68:d1:9a:7d:19: c7:34:dd:20:c9:00:49:67:a7:d7:4e:ad:18:c3:78: 8a:49:51:ee:a5:48:25:99:ac:0a:e9:97:f7:b8:01: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A6:54:29:69:73:F9:22:78:76:69:A2:CE:26:60:E1:38:8B:64:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 208.114.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:9a:03:1f:8d:d2:65:35:15:90:cd:50:ce:3d:a9:98:e6: 78:0e:e3:4f:d6:18:ee:9f:1d:8f:59:21:09:67:16:c6:dd:4d: a1:7c:32:00:23:1c:b8:7a:d6:24:b4:ae:32:8e:70:f4:c4:5e: 87:12:cd:54:8f:13:fa:4f:6f:1b:55:8d:ee:6a:a5:10:95:8d: 3e:5b:46:54:d9:c6:f8:26:92:f0:81:76:d3:b7:c7:71:05:5b: d9:14:ad:2c:5b:3f:06:78:f2:de:36:6f:08:2f:32:a2:98:47: 8a:ae:09:6b:9e:2b:67:cb:9c:c4:c6:47:da:14:a4:48:5a:cc: 79:7e:14:64:6b:d5:02:14:83:db:46:84:3a:ee:5c:a8:6f:57: e7:ff:d2:fc:0b:ba:77:4a:b9:c4:5b:30:f0:35:f4:54:a7:8c: 2e:2d:09:bc:05:bd:35:ec:a8:97:c7:7c:07:33:cb:99:91:96: f9:29:fc:69:54:14:90:72:fa:68:c1:82:72:73:fe:cf:7e:e0: 43:1c:2c:45:32:ce:fa:50:e7:3b:a5:3a:12:e4:6a:64:9c:71: c3:be:9d:18:d5:3d:fc:3d:07:a6:97:ca:2a:97:06:e1:93:ac: ce:cb:fc:27:08:f7:72:d4:15:c7:79:cc:c5:53:77:39:10:92: a2:9b:1f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQiSEtwIqvEe7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ODhiMTVmNmQtMmRmMC00ZmMzLWI1OTMtMTM4OWNiNzdlYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAJnZET3MqjkuNXzHdluysAse9g7V9LFHqEB 7gKVSa0278XsW3ZppfDaYlr/hr8FZ0hExIBGZdJoK9e1ROLOk3ADvQgfQZx34yHs TlW6oeGBEB5nPpDrD2xNNRRg6k/4/JdIkfN9EZnMTMNy4kTrnpCSXvSLcjd2n4ZZ 1qxkoevni1LeGoDD0iH9Qr5unfNOvY+/agJidzAktpTDqwDtzcLzWn8Y3KDqHB/9 J/c8Q3Ik4f48Tn01WWQ0EG1OWLv6Vl3wOcd8HiMnMJVAv1wTwibgx5rzjrWf9De7 aNGafRnHNN0gyQBJZ6fXTq0Yw3iKSVHupUglmawK6Zf3uAG+wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMumVClpc/kieHZpos4mYOE4i2S3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvNjRiZWM2MmMtM2U2YS0z NGQyLWFjYjUtMjFlMmMxNWI0YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESLmgMfjdJlNRWQzVDOPamY5ngO40/WGO6fHY9ZIQlnFsbdTaF8MgAj HLh61iS0rjKOcPTEXocSzVSPE/pPbxtVje5qpRCVjT5bRlTZxvgmkvCBdtO3x3EF W9kUrSxbPwZ48t42bwgvMqKYR4quCWueK2fLnMTGR9oUpEhazHl+FGRr1QIUg9tG hDruXKhvV+f/0vwLundKucRbMPA19FSnjC4tCbwFvTXsqJfHfAczy5mRlvkp/GlU FJBy+mjBgnJz/s9+4EMcLEUyzvpQ5zulOhLkamScccO+nRjVPfw9B6aXyiqXBuGT rM7L/CcI93LUFcd5zMVTdzkQkqKbH1Y= -----END CERTIFICATE-----Generated at Mon Jun 30 01:27:05 2025 by rpki-client