$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa File: ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa (raw, json) Hash identifier: 3+6ccCVGxmaINYm8iDlUNb5PsjcFCidtyzuWxEOc5Vg= Subject key identifier: C9:AC:A7:12:FC:19:9B:88:1F:A0:C3:3D:E5:79:F9:FD:AD:72:FF:B2 Certificate issuer: /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Certificate serial: 010D0C9F4328584A050A7884BEDCDF7576FCDE80 Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 3855 IP address blocks: 216.249.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:78:84:be:dc:df:75:76:fc:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=013ea1c8-6fce-45ef-84bb-396f084f43bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:02:e8:3b:07:bf:18:e5:d6:7e:25:13:55: f2:61:87:ac:e8:b2:e1:15:b3:66:1f:b3:0a:6e:bd: 05:24:fc:e5:cc:25:25:93:b6:21:a7:fa:60:92:d4: a2:e6:e2:68:52:4f:b7:12:63:7d:c5:d2:92:5f:2d: df:85:68:d2:73:da:df:b9:81:68:a0:37:6e:e8:69: 83:a4:8b:fc:36:ff:8b:dd:3a:dd:73:a4:b6:fe:9c: 88:1c:47:3a:b0:19:00:5f:ff:9d:9d:d5:fa:1c:9d: 69:f0:d5:31:f5:2a:4e:eb:69:9d:97:e8:6d:13:4f: b0:65:a6:b9:ad:2a:df:7f:f1:f2:36:62:0f:8a:aa: f3:53:25:94:e5:c0:55:7e:70:2a:1e:96:62:b4:f4: 5d:59:24:d7:d9:2a:bb:37:a9:65:ec:69:d3:15:58: 9d:dc:0f:89:43:30:9c:5a:a5:72:da:e9:05:74:37: d9:e2:26:27:38:7f:74:32:7f:21:85:eb:77:ff:80: 36:fb:df:8a:60:40:b0:ba:12:00:a0:06:b2:c5:4b: 7d:9b:fa:da:12:8f:2d:57:1a:1b:5f:ad:19:c3:3e: 04:0f:d4:79:ef:d4:90:b6:52:80:8e:53:bb:69:58: 2f:c7:05:51:65:3d:ee:e5:ed:82:7f:ad:72:75:16: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AC:A7:12:FC:19:9B:88:1F:A0:C3:3D:E5:79:F9:FD:AD:72:FF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl X509v3 Authority Key Identifier: keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer sbgp-ipAddrBlock: critical IPv4: 216.249.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cd:15:b7:96:f0:5e:1b:4d:72:67:b2:76:a1:58:6d:70:e4: a6:9c:b9:3d:94:35:ec:d4:4b:51:e6:2c:da:af:f4:bc:4e:78: c9:46:a1:e4:bd:16:ba:2a:0b:e8:5e:d4:8d:51:e9:25:74:6b: f5:02:47:d1:e6:37:55:18:9f:4b:ad:ad:f2:50:92:c1:33:29: 35:0e:48:49:09:60:f3:85:c6:8a:85:42:2a:f1:ba:49:b7:56: 09:3d:23:5d:66:83:f0:fa:8a:b2:b7:2c:ec:86:8f:1a:56:04: cb:25:13:20:fb:be:73:36:c2:2b:7f:48:6b:5a:7f:98:d1:b4: 23:4c:93:39:52:33:83:ad:6d:94:7b:a4:46:03:3c:af:0a:de: b6:1f:5b:66:de:04:af:63:f0:3e:db:0c:b6:c4:88:fa:48:49: 93:43:94:5a:70:cb:c4:be:62:cb:65:88:89:e8:e2:11:6a:15: 37:a0:05:74:7f:44:0c:c2:f4:f5:94:04:a2:89:63:ab:eb:1a: 7f:7b:11:17:bc:15:a6:c5:ec:53:aa:30:0f:23:73:03:47:d5: 75:4e:64:a1:ab:ce:c7:dc:74:5c:08:ed:25:8d:a1:0d:f6:f4: a1:a4:84:b3:73:fc:57:2c:ce:b9:b3:14:e1:2d:bf:3a:e6:32: 50:29:21:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCniEvtzfdXb83oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5 ZGIxMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MDEzZWExYzgtNmZjZS00NWVmLTg0YmItMzk2ZjA4NGY0M2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCYC6DsHvxjl1n4lE1XyYYes6LLhFbNmH7MK br0FJPzlzCUlk7Yhp/pgktSi5uJoUk+3EmN9xdKSXy3fhWjSc9rfuYFooDdu6GmD pIv8Nv+L3Trdc6S2/pyIHEc6sBkAX/+dndX6HJ1p8NUx9SpO62mdl+htE0+wZaa5 rSrff/HyNmIPiqrzUyWU5cBVfnAqHpZitPRdWSTX2Sq7N6ll7GnTFVid3A+JQzCc WqVy2ukFdDfZ4iYnOH90Mn8hhet3/4A2+9+KYECwuhIAoAayxUt9m/raEo8tVxob X60Zwz4ED9R579SQtlKAjlO7aVgvxwVRZT3u5e2Cf61ydRb9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmspxL8GZuIH6DDPeV5+f2tcv+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvZGRkMGM5ZWItODQ2Zi0z YjQxLWIxNGQtYTE4ZmIwMjllMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2PkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLNFbeW8F4bTXJnsnahWG1w5KacuT2UNezUS1HmLNqv9LxOeMlGoeS9 FroqC+he1I1R6SV0a/UCR9HmN1UYn0utrfJQksEzKTUOSEkJYPOFxoqFQirxukm3 Vgk9I11mg/D6irK3LOyGjxpWBMslEyD7vnM2wit/SGtaf5jRtCNMkzlSM4OtbZR7 pEYDPK8K3rYfW2beBK9j8D7bDLbEiPpISZNDlFpwy8S+YstliIno4hFqFTegBXR/ RAzC9PWUBKKJY6vrGn97ERe8FabF7FOqMA8jcwNH1XVOZKGrzsfcdFwI7SWNoQ32 9KGkhLNz/FcszrmzFOEtvzrmMlApIUE= -----END CERTIFICATE-----Generated at Mon Jun 30 08:58:11 2025 by rpki-client