$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa File: 6207f57d-7286-3e57-bd00-2ce12029aa76.roa (raw, json) Hash identifier: T0CWu8dQtsCrTOT/4QmTA1QxVmKpVO257T8IOubmPe8= Subject key identifier: 76:EA:E6:25:09:C2:E4:A6:54:3A:40:F0:BA:8F:48:B8:16:AC:41:67 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584A49707E2245D85C53B384C570 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 23532 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7e:22:45:d8:5c:53:b3:84:c5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=d564b8e8-9a15-4ccc-a3c7-d02a67e39c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:18:b2:c1:82:a6:c7:e7:63:cf:00:92:2c: 18:d7:e3:bf:40:31:bc:ea:ca:2c:b7:25:c8:7d:cb: 17:a2:a3:f0:c3:03:44:5a:41:a2:ce:9e:b0:98:69: 0e:10:28:63:ce:f2:02:f7:9c:d0:7d:80:8e:9f:f4: 8e:10:ad:6b:7d:1e:c2:5c:bf:4e:37:e7:a0:4d:f9: db:7d:55:5c:39:34:42:4b:8d:9b:e5:a5:38:8c:b7: db:00:ff:9b:14:16:1c:02:9a:08:b0:1c:a6:5f:ca: 17:53:b8:d3:7f:c3:fc:49:e7:dd:56:25:55:fb:66: 8b:d1:77:d2:56:e6:3b:24:50:a7:74:8f:16:9c:d3: 1e:b3:84:b2:ce:27:f9:2b:0a:82:13:a5:7a:25:43: 45:e5:d6:33:42:fd:6f:57:6f:10:c1:c3:02:84:da: 6c:88:bf:34:d0:d2:cc:e4:63:e1:dd:bd:72:22:27: bc:c8:2c:5d:e5:79:4f:1a:79:9a:e5:6e:93:ab:ae: 51:48:05:b3:35:52:57:d0:04:f2:ae:60:d5:ed:a4: 86:0e:05:24:3b:c9:cc:6a:6c:bc:70:ff:f3:9b:00: 0f:79:2d:1c:73:5c:9d:15:f5:e3:c7:f5:35:bd:d6: fb:77:5b:7b:c1:2c:b1:c6:1c:36:7f:0d:2e:0a:28: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EA:E6:25:09:C2:E4:A6:54:3A:40:F0:BA:8F:48:B8:16:AC:41:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:98:eb:9c:a9:7f:61:8a:69:ee:58:b6:f8:e5:9c:e4:78:38: ac:ef:cb:3d:d1:08:43:5f:b3:d2:e3:2d:4c:a4:1e:c6:88:12: 57:72:76:92:d2:e1:1c:b4:f2:0b:81:66:91:86:45:8d:5c:86: fe:c6:04:13:26:b9:26:b7:4e:8c:30:d9:7e:3a:2a:f4:ee:2d: 3a:e9:4f:f8:27:ae:50:e3:12:e6:84:9a:89:a3:34:28:7e:db: ce:c8:be:8b:f8:15:5b:1d:eb:e4:4f:cf:34:46:2b:c2:6c:85: 08:af:a0:e8:c6:81:2e:ba:63:8a:1b:90:48:a1:96:fe:dc:96: d9:42:41:c5:fb:29:5d:ef:db:7c:7c:b9:df:1d:43:b7:93:12: 37:20:6e:f8:02:4e:3d:13:b4:2d:40:eb:44:e1:79:ce:71:fb: a1:89:2f:0c:22:3f:d6:de:6f:43:f4:f5:a3:da:a7:53:e8:83: 30:c7:ae:1c:58:b1:dd:cc:bc:9d:f2:5f:2e:41:36:23:bf:5b: 24:10:00:b7:fe:0c:c9:81:0c:3f:29:0a:24:3a:6f:d9:9a:13: 80:3f:72:49:ed:25:50:6b:10:b5:40:77:cb:22:90:e7:33:1c: 61:d9:4b:4e:d1:c5:50:77:0d:83:3d:5d:a4:8d:40:e1:4d:15: d8:4f:4c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcH4iRdhcU7OExXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDU2NGI4ZTgtOWExNS00Y2NjLWEzYzctZDAyYTY3ZTM5YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk8YssGCpsfnY88AkiwY1+O/QDG86sostyXI fcsXoqPwwwNEWkGizp6wmGkOEChjzvIC95zQfYCOn/SOEK1rfR7CXL9ON+egTfnb fVVcOTRCS42b5aU4jLfbAP+bFBYcApoIsBymX8oXU7jTf8P8SefdViVV+2aL0XfS VuY7JFCndI8WnNMes4Syzif5KwqCE6V6JUNF5dYzQv1vV28QwcMChNpsiL800NLM 5GPh3b1yIie8yCxd5XlPGnma5W6Tq65RSAWzNVJX0ATyrmDV7aSGDgUkO8nMamy8 cP/zmwAPeS0cc1ydFfXjx/U1vdb7d1t7wSyxxhw2fw0uCii1PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbq5iUJwuSmVDpA8LqPSLgWrEFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjIwN2Y1N2QtNzI4Ni0z ZTU3LWJkMDAtMmNlMTIwMjlhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCY65ypf2GKae5YtvjlnOR4OKzvyz3RCENfs9LjLUykHsaIEldydpLS 4Ry08guBZpGGRY1chv7GBBMmuSa3Toww2X46KvTuLTrpT/gnrlDjEuaEmomjNCh+ 287Ivov4FVsd6+RPzzRGK8JshQivoOjGgS66Y4obkEihlv7cltlCQcX7KV3v23x8 ud8dQ7eTEjcgbvgCTj0TtC1A60Thec5x+6GJLwwiP9beb0P09aPap1PogzDHrhxY sd3MvJ3yXy5BNiO/WyQQALf+DMmBDD8pCiQ6b9maE4A/ckntJVBrELVAd8sikOcz HGHZS07RxVB3DYM9XaSNQOFNFdhPTDI= -----END CERTIFICATE-----Generated at Sun Jun 29 21:04:05 2025 by rpki-client