$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa File: 614b6e40-c958-3824-8cf1-5905e6c7c991.roa (raw, json) Hash identifier: dSMseWKv5aXg6x/MPX6jg2cNfL3LDoJK78RmDaNIYsU= Subject key identifier: 25:6E:91:EB:C4:74:11:BE:0F:98:38:FD:7F:B3:72:85:41:72:13:EA Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Certificate serial: 010D0C9F43285849DC8FBD2ECAE6F51AFD9FDA14 Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 13631 IP address blocks: 216.52.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bd:2e:ca:e6:f5:1a:fd:9f:da:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=b34f51da-629f-412c-b570-5acb6b9bb29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:7b:48:29:46:00:45:f1:0c:b7:17:6b:fa: 5f:5a:25:60:5c:de:83:52:38:df:aa:be:25:3d:04: 93:55:3e:67:aa:3b:4a:15:08:ec:f2:29:98:f8:7d: 8b:27:8a:15:8f:3f:eb:ee:59:ae:1a:dc:c1:77:c5: 83:d5:3e:3d:21:c7:42:1a:21:ef:4d:d4:27:a7:b7: 78:aa:2e:ea:1e:75:81:03:eb:7f:89:21:3f:2b:11: 53:4f:0f:5c:3a:3c:41:80:20:c9:18:4e:95:bb:1a: 10:ea:ef:85:9a:56:dd:84:d1:ab:68:4f:cc:f8:78: 76:5e:94:ca:81:85:ec:0e:bf:0b:52:3c:96:82:03: f8:c3:64:ce:7f:a7:b4:56:c9:49:33:4e:ea:81:24: 8e:1f:0f:7c:eb:fc:ad:65:80:10:0b:f3:f7:8f:50: bd:bc:7a:68:59:3e:4b:31:b0:f2:42:a5:ad:9d:50: 23:f7:56:99:93:26:3d:5a:d8:ef:00:85:63:dc:37: 61:44:44:85:ad:12:41:63:52:91:98:f3:93:d5:78: 81:cc:c1:5a:85:a5:cf:b0:d3:c3:be:75:b0:5a:75: 1e:10:3a:63:e9:f3:8a:41:1e:29:85:36:ca:ac:34: 5e:9c:5f:5a:18:94:e6:ec:c7:f5:ac:73:33:7f:99: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6E:91:EB:C4:74:11:BE:0F:98:38:FD:7F:B3:72:85:41:72:13:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl X509v3 Authority Key Identifier: keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer sbgp-ipAddrBlock: critical IPv4: 216.52.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cb:dd:d3:32:f5:f5:19:6e:6a:bd:75:8a:c1:98:0f:69:60: 29:71:a6:61:77:78:c6:2f:a4:64:8d:41:29:36:40:5d:d3:46: 84:10:6b:7f:8d:ff:8d:58:8d:db:0a:26:59:ee:05:21:0f:79: 87:0c:2a:e8:89:3a:ac:cb:9f:18:7c:f9:24:e8:10:21:b7:16: b5:5c:5b:df:96:36:ab:7c:a6:27:e8:16:22:ab:9f:94:fb:78: 73:a8:03:96:f3:62:47:41:33:2c:15:b5:fb:43:5d:af:8e:da: 7d:3d:7b:cd:c8:f9:e1:35:e2:1f:c6:0b:ca:2d:52:66:a5:5e: ac:b4:60:77:5b:a5:a6:5b:ad:60:81:b1:c0:e0:7d:fe:49:de: 1c:e9:50:61:15:6d:33:2d:9f:6e:b3:0c:61:b6:b9:09:d0:9a: 9c:0d:0e:13:46:a3:27:5e:5a:27:b3:c8:eb:c8:2c:f4:1c:48: ae:6e:c4:e7:03:f4:0a:a9:44:7a:88:3b:67:d1:87:84:ad:eb: 02:4e:79:27:e8:4c:a0:c9:71:7c:95:fa:a2:63:c4:06:39:a6: 1b:6c:f0:9c:5f:f0:d3:6c:31:17:d2:13:be:0e:56:f4:20:4d: 53:a2:c6:b7:f6:b5:46:8a:e6:4e:39:33:7d:55:f8:f9:97:29: fe:e1:79:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj70uyub1Gv2f2hQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy NmQ1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YjM0ZjUxZGEtNjI5Zi00MTJjLWI1NzAtNWFjYjZiOWJiMjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaN7SClGAEXxDLcXa/pfWiVgXN6DUjjfqr4l PQSTVT5nqjtKFQjs8imY+H2LJ4oVjz/r7lmuGtzBd8WD1T49IcdCGiHvTdQnp7d4 qi7qHnWBA+t/iSE/KxFTTw9cOjxBgCDJGE6VuxoQ6u+FmlbdhNGraE/M+Hh2XpTK gYXsDr8LUjyWggP4w2TOf6e0VslJM07qgSSOHw986/ytZYAQC/P3j1C9vHpoWT5L MbDyQqWtnVAj91aZkyY9WtjvAIVj3DdhRESFrRJBY1KRmPOT1XiBzMFahaXPsNPD vnWwWnUeEDpj6fOKQR4phTbKrDRenF9aGJTm7Mf1rHMzf5k5MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVukevEdBG+D5g4/X+zcoVBchPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvNjE0YjZlNDAtYzk1OC0z ODI0LThjZjEtNTkwNWU2YzdjOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLL3dMy9fUZbmq9dYrBmA9pYClxpmF3eMYvpGSNQSk2QF3TRoQQa3+N /41YjdsKJlnuBSEPeYcMKuiJOqzLnxh8+SToECG3FrVcW9+WNqt8pifoFiKrn5T7 eHOoA5bzYkdBMywVtftDXa+O2n09e83I+eE14h/GC8otUmalXqy0YHdbpaZbrWCB scDgff5J3hzpUGEVbTMtn26zDGG2uQnQmpwNDhNGoydeWiezyOvILPQcSK5uxOcD 9AqpRHqIO2fRh4St6wJOeSfoTKDJcXyV+qJjxAY5phts8Jxf8NNsMRfSE74OVvQg TVOixrf2tUaK5k45M31V+PmXKf7heaE= -----END CERTIFICATE-----Generated at Tue Jul 1 12:54:57 2025 by rpki-client