$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa File: 337f6349-eb96-3d85-8d88-4d78539f1677.roa (raw, json) Hash identifier: dmUdSlnoyHf4suhVESXZuDWeE1H2atuGxEHrdPvdRF8= Subject key identifier: 8F:52:9F:2D:02:D5:17:F5:DE:7F:DA:23:1A:A8:78:38:ED:74:67:6D Certificate issuer: /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Certificate serial: 010D0C9F4328584A1B5FF8D6F17419B1B4687C00 Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 198949 IP address blocks: 162.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f8:d6:f1:74:19:b1:b4:68:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=3a3646b4-44a7-42a6-b8e0-ee8eee59acb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:2d:77:f9:14:9d:a8:df:88:9b:4a:ee:79: 43:b3:20:3f:2f:42:08:c9:7f:43:a2:a6:2e:91:af: f5:df:f7:52:48:44:2b:de:a8:8c:ba:83:3a:17:5e: a5:76:e7:19:05:f6:97:3e:86:dd:6d:80:28:9b:56: d5:09:25:31:ed:82:77:94:e3:1d:db:f8:a8:83:7f: 67:71:d8:66:c9:1f:00:27:b0:f3:93:2b:28:0f:d3: 2a:a2:ed:bd:5d:2e:68:9f:ee:55:cb:31:fd:68:53: de:1c:71:33:96:81:f5:df:5b:e1:04:56:9c:48:76: bc:ed:4c:3d:42:a7:d3:6c:01:88:c9:5c:ae:6f:c3: 62:6a:5c:b7:d6:9c:2d:4f:f3:d3:60:43:e6:c1:42: cb:23:0a:95:1d:a4:c7:a8:3d:42:b0:a8:d4:7f:b2: b6:a4:26:c6:26:0f:83:37:c8:45:bf:a3:25:75:0f: 29:b7:ff:57:8e:3e:fb:68:38:2e:5b:ce:0f:38:75: 7c:30:e2:bd:6b:b3:f6:40:3e:f7:4d:05:8a:ff:91: d3:bf:87:f5:63:36:1b:b5:fa:d3:9a:50:09:67:42: 52:d7:54:3e:9d:c6:4e:d8:29:c7:6a:26:f0:b9:e6: 95:cd:7e:c3:a3:f9:4c:c7:1e:19:1d:2d:5b:f7:f6: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:9F:2D:02:D5:17:F5:DE:7F:DA:23:1A:A8:78:38:ED:74:67:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl X509v3 Authority Key Identifier: keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer sbgp-ipAddrBlock: critical IPv4: 162.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:43:3c:09:6d:81:79:e7:9f:00:a9:04:a0:95:f6:aa:ec:15: c3:6b:f6:a6:9d:5c:6e:f4:86:12:66:fb:bf:5c:2a:73:64:ff: 8f:58:bd:ef:56:6f:9e:b1:f7:b3:0d:6b:32:ca:53:7c:9f:6f: 9b:7e:f0:20:cf:3c:2d:8d:7d:1f:64:46:52:c0:e5:ad:b4:c6: 6e:ad:7e:56:e4:f7:db:d4:5b:f1:43:99:d2:a8:e5:e3:68:b4: a9:e6:64:fb:aa:61:d1:62:15:22:28:0a:66:06:db:c7:5d:ca: a4:a3:c7:99:35:b1:90:b0:1a:79:e8:d5:29:bd:c2:e5:2e:d5: b8:c4:a3:e7:99:21:a7:b8:7b:f7:a9:b3:32:91:fd:13:b1:77: 42:7a:6d:69:74:79:b2:78:bd:33:db:1d:4c:f6:90:a8:60:f2: 08:e1:b3:d8:ca:53:a3:3f:1f:96:70:a6:68:b4:5a:84:96:29: b6:28:ff:eb:1b:51:dc:65:7a:6c:af:92:71:2b:a6:9d:9d:45: 39:77:c7:20:b7:bb:1b:1f:4f:cb:30:c9:c6:68:ce:71:a6:c4: 3d:9b:39:80:d4:07:15:30:0d:99:84:9c:ad:ae:e8:59:e7:74: 72:0d:db:b3:01:63:8d:2a:d2:97:96:d5:27:90:01:66:46:06: 5a:ba:ec:64 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEobX/jW8XQZsbRofAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiM2UxMTAtMmY2NS00ZTdmLThmZmEtMGE2NzE5MTky ZjIwMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk M2EzNjQ2YjQtNDRhNy00MmE2LWI4ZTAtZWU4ZWVlNTlhY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhstd/kUnajfiJtK7nlDsyA/L0IIyX9DoqYu ka/13/dSSEQr3qiMuoM6F16lducZBfaXPobdbYAom1bVCSUx7YJ3lOMd2/iog39n cdhmyR8AJ7DzkysoD9Mqou29XS5on+5VyzH9aFPeHHEzloH131vhBFacSHa87Uw9 QqfTbAGIyVyub8Nialy31pwtT/PTYEPmwULLIwqVHaTHqD1CsKjUf7K2pCbGJg+D N8hFv6MldQ8pt/9Xjj77aDguW84POHV8MOK9a7P2QD73TQWK/5HTv4f1YzYbtfrT mlAJZ0JS11Q+ncZO2CnHaibwueaVzX7Do/lMxx4ZHS1b9/Z7UwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI9Sny0C1Rf13n/aIxqoeDjtdGdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIz ZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3MTkxOTJmMjAvMzM3ZjYzNDktZWI5Ni0z ZDg1LThkODgtNGQ3ODUzOWYxNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2JiM2UxMTAtMmY2NS00ZTdmLThm ZmEtMGE2NzE5MTkyZjIwLzNiYjNlMTEwLTJmNjUtNGU3Zi04ZmZhLTBhNjcxOTE5 MmYyMC5jcmwwHwYDVR0jBBgwFoAUXYVn4tCQa51VL4yiAqGA0Dh0EVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIzZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3 MTkxOTJmMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAooEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABEM8CW2BeeefAKkEoJX2quwVw2v2pp1cbvSGEmb7v1wqc2T/j1i971Zv nrH3sw1rMspTfJ9vm37wIM88LY19H2RGUsDlrbTGbq1+VuT329Rb8UOZ0qjl42i0 qeZk+6ph0WIVIigKZgbbx13KpKPHmTWxkLAaeejVKb3C5S7VuMSj55khp7h796mz MpH9E7F3QnptaXR5sni9M9sdTPaQqGDyCOGz2MpToz8flnCmaLRahJYptij/6xtR 3GV6bK+ScSumnZ1FOXfHILe7Gx9PyzDJxmjOcabEPZs5gNQHFTANmYScra7oWed0 cg3bswFjjSrSl5bVJ5ABZkYGWrrsZA== -----END CERTIFICATE-----Generated at Tue Jul 1 00:50:04 2025 by rpki-client