$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: 7NKfKsoB2pm2jvWoz/JHVp7F6AH2HMnqqjDL4ouelMA= Subject key identifier: ED:2A:BC:E6:D4:24:6E:B2:73:11:10:D5:0E:0C:A5:7B:85:B2:0C:BC Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285849D42FA80232B167AE38914C80 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a8:02:32:b1:67:ae:38:91:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=3b05bf7e-91da-4aed-a282-4fe288e7255a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:8b:d5:02:30:3c:a2:bf:42:c5:8b:fe:60: 85:30:40:e8:47:dd:10:b1:d5:28:33:dd:b9:ce:6b: 6b:32:f1:14:2f:e1:bd:01:6e:e6:ee:90:20:19:00: 0f:b4:d2:1e:a3:cf:f3:ae:67:2e:42:22:49:fa:f1: 2e:52:b9:8e:8e:d4:54:8a:dd:58:0d:82:de:f2:91: 21:d7:65:3e:f1:8e:b7:4d:6a:fa:ca:a9:9e:1f:f1: 0b:ff:f1:35:48:aa:37:39:98:f3:32:c7:6b:5e:b5: 94:0d:26:24:43:16:4c:58:ac:0f:05:6a:cc:01:fd: 02:b2:68:1d:0b:8e:47:ba:8b:b7:5e:ba:62:ba:4a: 74:f4:a7:9d:9f:72:1f:20:2e:d5:f9:b1:df:78:bf: a2:f2:34:a6:02:f6:f5:61:86:38:6b:37:af:13:2a: 07:55:bd:6d:60:50:18:32:f8:55:4e:68:6e:a5:72: 94:ec:ec:96:71:3f:7c:06:18:25:a8:28:0f:f6:17: f2:66:19:ba:60:20:d2:50:64:95:9c:8f:8c:47:56: 13:40:c8:27:ab:55:56:84:63:2e:87:fa:33:45:47: 6d:39:f1:79:b4:d3:d6:18:53:93:b0:a6:60:bc:6c: 24:73:7f:e1:b2:cc:23:ab:8e:f3:f6:73:84:a1:1d: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2A:BC:E6:D4:24:6E:B2:73:11:10:D5:0E:0C:A5:7B:85:B2:0C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ba:91:0d:25:50:77:c1:05:28:27:ff:23:b2:9a:3e:7a:2d: 30:c6:b5:2c:be:96:80:83:c0:d8:16:9f:8a:97:16:03:c4:c0: c4:8b:30:b3:e2:e5:8d:76:5e:39:ec:e2:3c:71:23:49:9e:5a: a8:99:ec:ca:13:19:c0:e5:c5:15:75:30:e5:45:1a:7f:39:99: 69:7b:4d:46:53:92:1a:fd:d1:1a:6b:42:6e:12:6b:2d:14:29: b0:d7:9c:21:76:08:09:cc:55:b6:89:14:bb:0e:51:9f:f0:d5: dc:96:a7:5a:09:02:fd:8f:f1:c9:d6:9b:7f:28:3e:5c:87:c6: a8:03:0b:6e:82:ca:79:8d:3d:c3:9a:97:1a:de:20:77:66:06: 07:23:0e:4a:91:67:a2:bb:01:79:5d:55:fc:19:25:9c:fd:0d: b2:f5:69:84:2e:b5:fd:79:51:74:4c:3b:3a:6f:4b:ce:d0:ab: d9:05:e5:e9:10:47:fe:bb:46:38:a6:86:34:aa:03:b6:68:0a: e5:e1:6e:b6:dc:80:a9:07:a0:ab:c1:14:64:cc:8b:a8:1f:b9: 2b:1d:02:72:69:f2:e4:c2:87:b2:13:d2:10:22:4d:d4:1c:c7: 0a:a6:b0:33:1d:8e:e7:2f:3f:82:a5:fb:9d:54:82:a2:00:7c: 33:df:1d:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6gCMrFnrjiRTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk M2IwNWJmN2UtOTFkYS00YWVkLWEyODItNGZlMjg4ZTcyNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYWL1QIwPKK/QsWL/mCFMEDoR90QsdUoM925 zmtrMvEUL+G9AW7m7pAgGQAPtNIeo8/zrmcuQiJJ+vEuUrmOjtRUit1YDYLe8pEh 12U+8Y63TWr6yqmeH/EL//E1SKo3OZjzMsdrXrWUDSYkQxZMWKwPBWrMAf0Csmgd C45Huou3Xrpiukp09Kedn3IfIC7V+bHfeL+i8jSmAvb1YYY4azevEyoHVb1tYFAY MvhVTmhupXKU7OyWcT98BhglqCgP9hfyZhm6YCDSUGSVnI+MR1YTQMgnq1VWhGMu h/ozRUdtOfF5tNPWGFOTsKZgvGwkc3/hsswjq47z9nOEoR2n9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0qvObUJG6ycxEQ1Q4MpXuFsgy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa6kQ0lUHfBBSgn/yOymj56LTDGtSy+loCDwNgWn4qXFgPEwMSLMLPi 5Y12Xjns4jxxI0meWqiZ7MoTGcDlxRV1MOVFGn85mWl7TUZTkhr90RprQm4Say0U KbDXnCF2CAnMVbaJFLsOUZ/w1dyWp1oJAv2P8cnWm38oPlyHxqgDC26CynmNPcOa lxreIHdmBgcjDkqRZ6K7AXldVfwZJZz9DbL1aYQutf15UXRMOzpvS87Qq9kF5ekQ R/67RjimhjSqA7ZoCuXhbrbcgKkHoKvBFGTMi6gfuSsdAnJp8uTCh7IT0hAiTdQc xwqmsDMdjucvP4Kl+51UgqIAfDPfHU4= -----END CERTIFICATE-----Generated at Sun Jun 29 10:46:32 2025 by rpki-client