$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa File: 8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa (raw, json) Hash identifier: o67UvshGZFyKt4gh2/xVxY1NbbJ9MoYJJmcxZJvNnoE= Subject key identifier: 25:FE:EC:2D:7A:00:7E:0D:FE:F9:C5:B7:BE:E1:C8:35:FF:6B:61:F6 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584A4AD593EDBC42BF53886BFA00 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 398090 IP address blocks: 104.171.200.0/22 maxlen: 24 192.222.48.0/20 maxlen: 24 198.145.39.0/24 maxlen: 24 209.20.156.0/22 maxlen: 24 2607:bb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:93:ed:bc:42:bf:53:88:6b:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=26969321-e214-423a-939a-8eaa4dc137db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:ea:a0:ec:81:72:b3:89:86:19:3c:dc:4a: 13:ec:3d:19:6f:79:39:14:32:64:0e:2f:12:ef:00: 44:97:39:61:85:7a:4b:62:46:7d:bf:92:b9:6c:64: 72:f9:b1:22:a1:1a:a8:91:10:12:2e:f5:48:42:74: d7:ef:f0:f6:56:c0:c7:ab:4d:7d:37:5b:48:ef:01: 4c:76:0d:b9:c2:0e:97:22:42:cc:ba:5a:8a:12:40: ed:1d:54:2e:32:d7:26:31:03:58:f4:d4:51:31:07: df:9b:e7:71:95:d3:ed:cc:1e:b7:16:97:db:77:2e: dc:09:63:78:ff:47:e4:c3:6c:89:81:f6:ce:53:a2: 3a:23:99:4c:05:ca:ba:22:29:c5:4a:77:9c:91:f2: 9a:af:75:40:b9:fd:d3:c4:69:7a:2b:09:6a:17:87: 5f:c6:e5:6d:f3:60:f2:19:8e:4b:49:85:5a:8f:f7: 8a:2d:8c:43:3c:59:ed:a1:4f:52:1d:99:52:bb:c5: c4:c2:2e:71:68:fe:00:67:5e:4e:78:75:6c:42:85: 72:93:dd:3b:25:53:67:7c:00:ee:68:1a:31:67:64: 6b:a0:ff:ea:1a:2c:16:75:39:64:44:1e:1c:5e:f1: 37:8f:3d:19:79:7b:c6:5a:7d:b5:80:61:81:27:49: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FE:EC:2D:7A:00:7E:0D:FE:F9:C5:B7:BE:E1:C8:35:FF:6B:61:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 104.171.200.0/22 192.222.48.0/20 198.145.39.0/24 209.20.156.0/22 IPv6: 2607:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:82:32:be:87:b6:5c:bc:cd:55:4d:83:90:d2:3e:e1:56:2e: 3e:dd:cf:5e:dc:ab:b7:3b:06:0b:2f:dd:81:49:25:9c:86:bf: 3e:0a:40:d0:9a:33:73:67:51:a5:96:ba:79:2d:29:7a:62:83: ad:ec:aa:3a:a9:db:f6:85:78:bc:7a:0d:26:c0:56:86:2a:d7: fb:05:3e:69:5c:d4:3e:05:04:eb:f4:10:d4:4e:09:b1:78:9b: db:15:69:05:d2:ee:23:13:60:68:ea:dd:75:f2:af:3b:b7:d0: 23:b3:19:44:be:09:99:c6:a2:7d:6a:b4:11:af:73:10:cb:6e: 1f:e4:08:ac:c3:49:43:8b:f6:1c:c9:0a:b5:da:fb:db:f1:61: e3:2d:67:dd:3d:a5:35:93:2f:8f:4d:dd:97:2c:6d:be:a6:d4: a0:39:4a:27:25:32:24:48:15:9c:65:c4:2f:18:e8:a5:fa:d1: 1b:c6:70:2d:72:a5:fa:7a:82:16:27:9c:0e:09:f7:38:a4:31: e5:69:9e:15:3f:68:86:84:f3:43:03:4a:39:71:4d:fc:95:18: b3:69:e9:bb:4e:f5:e3:d5:1b:18:21:0e:dc:49:ba:cd:50:e4: d0:fd:1e:f6:57:c2:67:cb:cd:04:c5:7e:98:02:a2:60:8e:48: f4:03:43:e5 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEpK1ZPtvEK/U4hr+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjY5NjkzMjEtZTIxNC00MjNhLTkzOWEtOGVhYTRkYzEzN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CnqoOyBcrOJhhk83EoT7D0Zb3k5FDJkDi8S 7wBElzlhhXpLYkZ9v5K5bGRy+bEioRqokRASLvVIQnTX7/D2VsDHq019N1tI7wFM dg25wg6XIkLMulqKEkDtHVQuMtcmMQNY9NRRMQffm+dxldPtzB63Fpfbdy7cCWN4 /0fkw2yJgfbOU6I6I5lMBcq6IinFSneckfKar3VAuf3TxGl6KwlqF4dfxuVt82Dy GY5LSYVaj/eKLYxDPFntoU9SHZlSu8XEwi5xaP4AZ15OeHVsQoVyk907JVNnfADu aBoxZ2RroP/qGiwWdTlkRB4cXvE3jz0ZeXvGWn21gGGBJ0l/FQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFCX+7C16AH4N/vnFt77hyDX/a2H2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvOGExMWUwYmItN2NmYS0z YTIwLWIyZTAtYjRlNmZjNzEwZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCaKvIAwQE wN4wAwQAxpEnAwQC0RScMA0EAgACMAcDBQAmB7tAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD+CMr6Htly8 zVVNg5DSPuFWLj7dz17cq7c7Bgsv3YFJJZyGvz4KQNCaM3NnUaWWunktKXpig63s qjqp2/aFeLx6DSbAVoYq1/sFPmlc1D4FBOv0ENROCbF4m9sVaQXS7iMTYGjq3XXy rzu30COzGUS+CZnGon1qtBGvcxDLbh/kCKzDSUOL9hzJCrXa+9vxYeMtZ909pTWT L49N3Zcsbb6m1KA5SiclMiRIFZxlxC8Y6KX60RvGcC1ypfp6ghYnnA4J9zikMeVp nhU/aIaE80MDSjlxTfyVGLNp6btO9ePVGxghDtxJus1Q5ND9HvZXwmfLzQTFfpgC omCOSPQDQ+U= -----END CERTIFICATE-----Generated at Mon Jun 30 00:41:54 2025 by rpki-client