$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa File: e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa (raw, json) Hash identifier: adokgJKob9434YR8Y/FLPTs7R0Ob20OsD1FmtDrnTtw= Subject key identifier: 61:89:B2:18:FE:CA:BD:BB:19:9C:67:0B:64:AE:14:28:E6:9C:53:F6 Certificate issuer: /CN=de0cc6bd-e920-421b-822f-9be354b0d759 Certificate serial: 010D0C9F43285849B0AA0E7319365C246B778400 Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa Signing time: Tue 29 Apr 2025 19:38:44 +0000 ROA not before: Tue 29 Apr 2025 19:38:44 +0000 ROA not after: Mon 28 Jul 2025 19:38:44 +0000 asID: 399888 IP address blocks: 208.75.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:aa:0e:73:19:36:5c:24:6b:77:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759 Validity Not Before: Apr 29 19:38:44 2025 GMT Not After : Jul 28 19:38:44 2025 GMT Subject: CN=c195d530-e74b-4942-907d-5bd7a61187c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3d:32:5f:81:14:a6:2f:98:09:7c:1f:ab:ce: b7:19:a2:4a:ee:ca:0b:a9:04:f3:9d:21:49:63:24: 81:6b:f0:3e:04:9f:61:79:6f:8b:c9:36:0b:83:c6: 75:70:17:03:0a:75:fd:2e:19:51:32:3f:66:cb:37: 05:f5:45:88:3d:0d:ed:c0:ce:c9:0b:fa:88:dc:02: 7c:c4:82:aa:11:64:2e:93:8c:dd:bb:0e:d8:3e:c0: 8a:2f:97:8a:79:0d:22:92:87:83:cc:74:d8:7b:0d: dd:15:45:39:f9:06:98:ec:b4:3c:7b:c8:91:49:55: d5:0d:33:67:1b:8b:6d:70:6f:d2:2f:e1:ff:dc:70: e0:e6:c2:e0:66:12:4a:83:3c:fc:6a:31:29:36:b4: 7a:9d:dd:9b:7e:97:61:19:e7:68:24:fa:3c:5b:ef: 2f:a3:84:d1:01:32:fb:7d:58:b5:96:bc:46:99:84: b1:d4:e9:d6:9e:45:ff:4d:ef:07:d1:0c:34:98:fe: b5:6e:8b:97:09:df:f1:46:6e:fb:a5:81:10:d8:2b: 66:04:85:4b:50:20:64:c1:94:48:f9:98:38:1c:e9: b6:7f:2d:df:a3:52:63:ec:da:98:d9:66:95:3a:3b: 34:7a:62:ac:94:85:d7:41:22:c9:55:ed:cd:5f:43: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:B2:18:FE:CA:BD:BB:19:9C:67:0B:64:AE:14:28:E6:9C:53:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl X509v3 Authority Key Identifier: keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer sbgp-ipAddrBlock: critical IPv4: 208.75.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3b:7c:f4:3e:a7:69:ec:c4:f7:e0:29:0c:1f:e4:0e:e9:c6: ea:9d:05:b3:88:2d:a6:86:7c:d6:5e:cf:ae:ca:94:4e:50:45: d4:69:98:8f:22:82:8f:29:f1:1f:30:6b:23:b3:1b:02:04:6a: f1:02:62:7e:7e:51:5c:7e:94:27:f2:66:7b:b1:11:66:3e:36: 02:b7:59:af:e4:d9:2d:3e:48:54:3e:a9:b1:a0:53:9f:5e:2c: c7:9c:12:86:2a:f5:c2:42:2f:6d:35:11:99:95:99:5d:78:aa: d2:2d:5f:e5:92:2a:02:61:f2:6c:1a:58:55:62:75:65:6f:32: 47:b8:e8:47:a2:e0:f2:4b:51:56:fa:8c:58:8d:52:ed:95:cd: 5a:48:0d:9e:27:26:bc:a2:6b:54:1f:cb:fa:a0:b3:5c:65:b1: 61:1b:3b:ce:f6:ef:93:4c:46:e5:80:5d:87:b2:a8:1e:9d:81: fb:61:07:75:b3:b6:41:63:d6:27:2d:54:b9:af:d1:55:07:f4: 27:d7:fd:be:a4:26:f3:0f:4d:9d:a1:15:89:e5:40:5a:07:91: e6:59:8c:7a:52:94:31:09:2d:7c:72:44:60:95:99:4c:e5:73: 28:71:65:9a:e1:a8:24:1d:e0:0b:47:33:93:0f:d5:b8:5e:cc: 55:b6:f4:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmwqg5zGTZcJGt3hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwY2M2YmQtZTkyMC00MjFiLTgyMmYtOWJlMzU0YjBk NzU5MB4XDTI1MDQyOTE5Mzg0NFoXDTI1MDcyODE5Mzg0NFowLzEtMCsGA1UEAxMk YzE5NWQ1MzAtZTc0Yi00OTQyLTkwN2QtNWJkN2E2MTE4N2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7T0yX4EUpi+YCXwfq863GaJK7soLqQTznSFJ YySBa/A+BJ9heW+LyTYLg8Z1cBcDCnX9LhlRMj9myzcF9UWIPQ3twM7JC/qI3AJ8 xIKqEWQuk4zduw7YPsCKL5eKeQ0ikoeDzHTYew3dFUU5+QaY7LQ8e8iRSVXVDTNn G4ttcG/SL+H/3HDg5sLgZhJKgzz8ajEpNrR6nd2bfpdhGedoJPo8W+8vo4TRATL7 fVi1lrxGmYSx1OnWnkX/Te8H0Qw0mP61bouXCd/xRm77pYEQ2CtmBIVLUCBkwZRI +Zg4HOm2fy3fo1Jj7NqY2WaVOjs0emKslIXXQSLJVe3NX0NHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGJshj+yr27GZxnC2SuFCjmnFP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBj YzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRiMGQ3NTkvZTY2NjlkNWItMGRiZC0z NzMwLWFkNGItMTBmY2NkZTY2YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGUwY2M2YmQtZTkyMC00MjFiLTgy MmYtOWJlMzU0YjBkNzU5L2RlMGNjNmJkLWU5MjAtNDIxYi04MjJmLTliZTM1NGIw ZDc1OS5jcmwwHwYDVR0jBBgwFoAU0N8F+unbijdSc2pIZnRTxmgQcFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUz NTRiMGQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI87fPQ+p2nsxPfgKQwf5A7pxuqdBbOILaaGfNZez67KlE5QRdRpmI8i go8p8R8wayOzGwIEavECYn5+UVx+lCfyZnuxEWY+NgK3Wa/k2S0+SFQ+qbGgU59e LMecEoYq9cJCL201EZmVmV14qtItX+WSKgJh8mwaWFVidWVvMke46Eei4PJLUVb6 jFiNUu2VzVpIDZ4nJryia1Qfy/qgs1xlsWEbO87275NMRuWAXYeyqB6dgfthB3Wz tkFj1ictVLmv0VUH9CfX/b6kJvMPTZ2hFYnlQFoHkeZZjHpSlDEJLXxyRGCVmUzl cyhxZZrhqCQd4AtHM5MP1bhezFW29P0= -----END CERTIFICATE-----Generated at Mon May 12 11:18:14 2025 by rpki-client