$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa File: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (raw, json) Hash identifier: ymBjkyaWl6nGmXTATvXOHnAEjY/yVkYVK/BQolLF6uE= Subject key identifier: 8D:BD:DE:61:E2:F3:C3:69:CF:62:09:72:EC:C6:F7:DE:13:B6:0B:C7 Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584A63F5B6E0FDB0C35F94B52CF0 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 399673 IP address blocks: 216.25.96.0/20 maxlen: 24 216.147.64.0/19 maxlen: 24 2606:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:b6:e0:fd:b0:c3:5f:94:b5:2c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=db4d6efd-f1e4-4136-b899-6dac774d0bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:78:a6:8e:be:ec:f6:f5:ce:58:35:86:09:93: 33:f3:3a:bc:b6:bd:4c:4c:dc:9a:a0:5c:4e:e3:99: 89:0d:ae:aa:85:28:9b:d9:42:91:fe:5f:a6:20:71: 10:e6:0e:15:25:5a:90:33:35:a8:2c:38:34:13:9f: b3:66:b3:f3:0c:97:35:93:1c:aa:d9:8b:f1:5f:89: 01:4f:7c:39:c3:2a:1c:f6:f2:56:d5:ad:a0:ff:13: 0a:fc:be:b4:c5:69:2d:aa:ec:45:b4:a6:26:6c:46: 61:f3:63:3b:e0:3d:4c:a0:de:13:70:2a:b5:3c:fc: e3:64:b2:fa:f3:a0:2a:77:b7:63:0f:06:96:f2:69: 1c:1e:5f:58:39:a4:34:c8:68:f7:a5:2c:2c:fd:92: 5a:e6:5c:aa:f9:ea:e5:f9:1f:ea:ec:01:72:a7:1b: d1:63:1d:4d:95:20:b5:bb:a4:44:34:44:16:52:6f: fe:da:1e:97:ab:07:82:8f:f9:54:0e:44:9a:5d:da: cb:84:7c:56:76:f8:1d:34:b4:ef:48:aa:58:6d:9f: bf:13:2b:07:7d:3a:a0:56:75:ee:fc:9e:76:6a:ec: aa:dc:6b:a0:0c:e6:17:8e:25:e8:79:81:4f:b4:9b: 2d:f0:73:e5:8d:3c:ab:91:ca:18:41:90:b6:9b:5b: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BD:DE:61:E2:F3:C3:69:CF:62:09:72:EC:C6:F7:DE:13:B6:0B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: 216.25.96.0/20 216.147.64.0/19 IPv6: 2606:5640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:50:8f:55:53:e5:18:ba:30:73:1a:6e:0c:0d:51:fa:54:e1: 1d:d2:ea:fd:70:23:27:07:ad:9d:9a:27:c1:40:f8:11:45:d2: a8:20:ff:a7:cb:bc:a2:8c:a6:21:17:c9:95:26:1a:eb:31:da: 89:ac:36:4a:e9:c7:7a:35:19:79:a3:af:d5:d7:cc:e4:d3:c7: d5:cf:bd:99:7e:83:1c:83:e1:8c:31:20:dc:2b:dc:41:69:05: 08:bc:3e:3c:73:40:4a:a1:7d:41:f9:44:bf:4a:27:e9:09:19: 27:84:ef:c5:aa:ae:5e:6a:1b:63:4c:58:11:d2:9d:72:76:09: 22:89:15:26:0b:9b:47:67:8c:7c:b0:da:9f:9d:cf:46:b3:21: a6:e0:5f:2b:ea:f1:38:03:f9:8b:e0:33:b2:a9:5b:2b:08:de: c0:62:90:f2:78:98:f3:60:10:d4:50:52:e6:90:77:1a:a4:9f: 83:8e:c0:e0:23:2f:9e:0b:82:fa:01:42:82:c4:3f:2a:e5:a7: fd:1b:9e:51:ef:b0:d6:2b:7a:e5:9e:48:7f:e0:51:cc:fa:28: 45:6a:4f:98:6a:53:1a:b9:f8:85:81:e7:3e:1e:b3:b6:c7:72: 85:0a:d3:e9:57:2c:c9:bd:67:f2:0e:58:7a:a5:58:90:4f:41: 09:3e:c9:40 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEpj9bbg/bDDX5S1LPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk ZGI0ZDZlZmQtZjFlNC00MTM2LWI4OTktNmRhYzc3NGQwYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3imjr7s9vXOWDWGCZMz8zq8tr1MTNyaoFxO 45mJDa6qhSib2UKR/l+mIHEQ5g4VJVqQMzWoLDg0E5+zZrPzDJc1kxyq2YvxX4kB T3w5wyoc9vJW1a2g/xMK/L60xWktquxFtKYmbEZh82M74D1MoN4TcCq1PPzjZLL6 86Aqd7djDwaW8mkcHl9YOaQ0yGj3pSws/ZJa5lyq+erl+R/q7AFypxvRYx1NlSC1 u6RENEQWUm/+2h6XqweCj/lUDkSaXdrLhHxWdvgdNLTvSKpYbZ+/EysHfTqgVnXu /J52auyq3GugDOYXjiXoeYFPtJst8HPljTyrkcoYQZC2m1uoeQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFI293mHi88Npz2IJcuzG994TtgvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvOWM0NmU5OTgtMTkwOC0z ZDRiLWExMTktM2Q5OThkYjdiODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQE2BlgAwQF 2JNAMA0EAgACMAcDBQAmBlZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJRQj1VT5Ri6MHMabgwNUfpU4R3S 6v1wIycHrZ2aJ8FA+BFF0qgg/6fLvKKMpiEXyZUmGusx2omsNkrpx3o1GXmjr9XX zOTTx9XPvZl+gxyD4YwxINwr3EFpBQi8PjxzQEqhfUH5RL9KJ+kJGSeE78Wqrl5q G2NMWBHSnXJ2CSKJFSYLm0dnjHyw2p+dz0azIabgXyvq8TgD+YvgM7KpWysI3sBi kPJ4mPNgENRQUuaQdxqkn4OOwOAjL54LgvoBQoLEPyrlp/0bnlHvsNYreuWeSH/g Ucz6KEVqT5hqUxq5+IWB5z4es7bHcoUK0+lXLMm9Z/IOWHqlWJBPQQk+yUA= -----END CERTIFICATE-----Generated at Thu Jul 3 16:46:50 2025 by rpki-client