$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa File: df479898-67d4-3ee5-ab7e-b9a811a3a140.roa (raw, json) Hash identifier: pV4aH86eByXXgre3CAv531qYjLJBBjfZT2lcIWC70LM= Subject key identifier: F3:1D:AE:E2:2B:26:11:8B:6E:99:E7:0D:EC:FB:FC:C7:EF:53:51:68 Certificate issuer: /CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Certificate serial: 010D0C9F4328584A4275894AA1C40B12D9F86A80 Authority key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 33228 IP address blocks: 208.92.236.0/22 maxlen: 24 2602:f85e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:89:4a:a1:c4:0b:12:d9:f8:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=7dfd75c3-dc34-4bf5-b449-7751dea95057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ff:44:f0:d3:30:73:0a:9f:eb:86:26:04:ce: b5:5b:2a:83:a2:8c:37:99:dd:62:e5:f1:36:7f:16: 4b:e5:a5:cf:dd:7f:a4:31:73:3c:3b:97:8a:8d:7d: 93:a2:2b:15:18:b4:e2:70:75:63:dc:3f:c7:60:b8: 02:ef:9d:de:9b:8e:d0:cc:f9:cf:5f:7b:60:b4:40: 5d:b8:56:80:49:87:d6:9c:37:38:e0:cf:3e:0d:15: e3:06:4d:f5:4e:ea:1f:07:3a:28:8e:c5:ce:44:46: db:fa:a9:6f:7b:93:e7:2a:ac:5e:9a:85:74:a5:1d: d4:e0:37:37:98:e9:55:4c:d7:e6:db:82:a3:88:b3: 3e:58:1e:a8:0e:17:87:63:30:32:dd:30:12:41:3d: 96:00:16:2a:aa:99:53:bc:51:d9:b4:d7:4e:b4:f5: f7:77:d6:73:60:dd:23:97:08:9e:a8:d5:43:3c:8b: 35:2e:d6:44:79:27:29:db:9b:00:d1:e3:a2:79:69: 8f:e4:52:0c:5c:6d:d8:56:7f:b6:71:d3:fa:91:f2: b1:54:b2:af:fc:b5:ee:f5:c4:51:e8:fa:79:4b:16: 98:75:52:2b:c0:6e:e4:55:f2:40:5e:0b:ac:b0:30: b0:e1:e3:24:9f:df:9f:e7:05:31:19:f3:f7:32:d0: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:AE:E2:2B:26:11:8B:6E:99:E7:0D:EC:FB:FC:C7:EF:53:51:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl X509v3 Authority Key Identifier: keyid:78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer sbgp-ipAddrBlock: critical IPv4: 208.92.236.0/22 IPv6: 2602:f85e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5b:4a:94:0b:b1:0f:c0:b8:9a:8d:05:49:70:86:e0:5c:54: 0b:93:ad:ba:43:75:5e:c1:fa:8b:b0:56:a0:7f:1e:26:a4:cc: 11:d1:1a:62:0f:61:9c:67:38:11:14:f0:f0:3a:db:fa:f1:d3: b1:f8:77:8c:cd:c3:af:34:ef:73:5f:44:54:a4:b3:43:98:f0: cf:11:89:15:ac:9f:9b:86:d0:83:ca:a2:bb:aa:29:12:8f:b9: 53:d5:0a:fb:4e:3c:c7:2d:67:53:1b:e6:b0:05:bc:45:0d:a7: b6:88:61:3a:23:c4:98:ae:51:06:54:12:b0:60:d3:62:6b:bc: b5:ba:12:fb:8b:31:a0:03:61:c4:bc:1f:1f:59:95:51:7b:2a: 62:e8:70:cc:5f:40:1e:5c:54:d6:dc:5c:47:7b:85:85:0e:44: 04:ac:a8:12:80:91:61:88:05:91:19:47:21:dd:ed:c4:04:3f: c2:56:9d:7a:50:35:d4:1c:1e:f1:55:ef:be:b3:6f:f1:14:d9: bc:51:9b:8f:b9:3f:25:b2:ba:82:21:25:b9:15:89:de:33:2c: e4:e8:d1:e3:3d:67:e5:d6:ec:09:54:e1:37:bb:b8:63:49:3c: 29:77:54:fb:77:43:6d:17:4f:bf:8c:15:9e:d8:d9:ce:ab:0f: 3c:10:fe:7c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpCdYlKocQLEtn4aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiYzNhZjEtODdlNy00YWQ1LWJhOWMtN2VlYmRiZDgy MGRiMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk N2RmZDc1YzMtZGMzNC00YmY1LWI0NDktNzc1MWRlYTk1MDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+f9E8NMwcwqf64YmBM61WyqDoow3md1i5fE2 fxZL5aXP3X+kMXM8O5eKjX2ToisVGLTicHVj3D/HYLgC753em47QzPnPX3tgtEBd uFaASYfWnDc44M8+DRXjBk31TuofBzoojsXOREbb+qlve5PnKqxemoV0pR3U4Dc3 mOlVTNfm24KjiLM+WB6oDheHYzAy3TASQT2WABYqqplTvFHZtNdOtPX3d9ZzYN0j lwieqNVDPIs1LtZEeScp25sA0eOieWmP5FIMXG3YVn+2cdP6kfKxVLKv/LXu9cRR 6Pp5SxaYdVIrwG7kVfJAXgussDCw4eMkn9+f5wUxGfP3MtAj/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPMdruIrJhGLbpnnDez7/MfvU1FoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yOGJj M2FmMS04N2U3LTRhZDUtYmE5Yy03ZWViZGJkODIwZGIvZGY0Nzk4OTgtNjdkNC0z ZWU1LWFiN2UtYjlhODExYTNhMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjhiYzNhZjEtODdlNy00YWQ1LWJh OWMtN2VlYmRiZDgyMGRiLzI4YmMzYWYxLTg3ZTctNGFkNS1iYTljLTdlZWJkYmQ4 MjBkYi5jcmwwHwYDVR0jBBgwFoAUeL0ung9tcd+hemv0AiQDULMZfHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yOGJjM2FmMS04N2U3LTRhZDUtYmE5Yy03ZWVi ZGJkODIwZGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0FzsMA4E AgACMAgDBgQmAvheADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtW0qUC7EPwLiajQVJcIbgXFQLk626Q3Ve wfqLsFagfx4mpMwR0RpiD2GcZzgRFPDwOtv68dOx+HeMzcOvNO9zX0RUpLNDmPDP EYkVrJ+bhtCDyqK7qikSj7lT1Qr7TjzHLWdTG+awBbxFDae2iGE6I8SYrlEGVBKw YNNia7y1uhL7izGgA2HEvB8fWZVReypi6HDMX0AeXFTW3FxHe4WFDkQErKgSgJFh iAWRGUch3e3EBD/CVp16UDXUHB7xVe++s2/xFNm8UZuPuT8lsrqCISW5FYneMyzk 6NHjPWfl1uwJVOE3u7hjSTwpd1T7d0NtF0+/jBWe2NnOqw88EP58 -----END CERTIFICATE-----Generated at Mon Jun 30 00:44:34 2025 by rpki-client