$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/e6fecda2-321f-3c92-bd85-e5ed69f50c3a.roa File: e6fecda2-321f-3c92-bd85-e5ed69f50c3a.roa (raw, json) Hash identifier: tQWWALTxWQQ4Ka1PvOBzck0GF9mA0WVV3kB0haDWhT4= Subject key identifier: EB:1E:D9:C9:01:07:12:72:A7:DB:48:5C:43:0C:97:EC:65:F6:52:80 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584A5A306B95388FD69EA4273698 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/e6fecda2-321f-3c92-bd85-e5ed69f50c3a.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 6407 IP address blocks: 108.63.30.0/23 maxlen: 24 108.63.32.0/19 maxlen: 24 108.63.64.0/18 maxlen: 24 108.63.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:6b:95:38:8f:d6:9e:a4:27:36:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=223822cf-571d-4190-8add-4e06f57f5440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:85:6a:85:3c:5c:b0:12:9e:2e:f5:c2:c9: 76:82:11:a9:5e:00:06:80:5f:d8:a6:c5:65:7b:d3: b4:fd:69:9b:98:cc:ba:75:c5:37:83:ee:f6:ee:5c: dd:5f:7c:74:f8:f1:1b:0d:45:77:60:aa:9d:a3:80: 87:8b:de:ce:73:67:ae:8d:42:6c:cd:97:60:3a:cd: 1f:ce:70:60:90:c3:df:ea:78:52:fa:93:9d:84:ec: 29:e0:21:cc:58:c7:47:ba:3b:2a:51:bf:52:ed:11: 65:e6:37:00:ad:9a:41:8c:b5:ef:49:84:03:b4:e5: 59:93:0c:45:4b:3a:19:55:ec:23:96:64:8b:9b:d0: c1:76:26:af:29:0a:b7:ea:ed:a4:47:dd:42:90:3c: db:7b:46:af:f0:a8:77:68:1c:f5:3b:a4:18:39:e8: 6e:1a:26:c4:a5:33:10:49:1f:04:f3:51:d8:9d:e7: ef:c6:7e:26:47:25:ec:57:68:3e:6a:51:a3:f8:f1: cb:f9:c3:29:8b:84:8d:02:b2:d7:ba:f6:7d:a3:a1: 47:aa:0d:9b:30:7d:c8:11:96:27:03:72:f6:7a:9b: 27:b4:f6:2c:3c:d2:81:6a:76:9d:14:cc:a4:e9:3a: 72:1c:a1:2d:21:92:7e:24:aa:43:48:e1:e1:47:6d: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1E:D9:C9:01:07:12:72:A7:DB:48:5C:43:0C:97:EC:65:F6:52:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/e6fecda2-321f-3c92-bd85-e5ed69f50c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 108.63.30.0-108.63.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d3:2d:0f:84:17:af:83:45:1b:06:a4:ee:e4:1b:3d:4c:f4: fe:85:47:65:55:ac:19:aa:2b:9d:08:69:9b:f6:55:22:e7:ef: 6c:d5:4a:4f:db:15:07:50:c6:75:4c:4a:23:4c:d5:a7:fc:c4: 74:17:a2:0d:44:14:07:16:b8:84:af:24:00:15:c5:2e:98:5d: 04:69:a3:f0:a1:b2:ad:59:e0:26:ab:d7:81:53:e3:bf:1a:91: 46:95:7e:6c:b3:b5:03:f4:38:13:00:eb:78:d5:44:b7:57:bd: fc:9b:c1:30:b0:b5:34:26:94:16:5c:67:1c:ec:9a:ad:23:01: 07:b8:32:37:cd:04:2b:e7:79:e7:fc:ca:bd:04:19:cf:15:27: 07:8e:03:a1:55:56:59:a4:65:c2:6e:14:d2:d8:cb:d9:72:2b: 36:4f:be:d8:22:49:23:7e:7a:68:2c:5d:00:19:af:68:b5:e6: e1:f6:41:f4:12:9f:3c:18:c3:56:8b:82:db:54:af:3c:6e:53: f4:0d:2a:97:03:fa:e4:88:0f:34:e0:39:66:6c:06:d3:ef:35: 88:e7:76:f6:b9:2d:b4:0b:d2:ca:eb:ec:1c:48:35:36:36:e9: 7e:be:53:16:5f:76:38:04:25:4d:81:16:aa:6c:62:9b:c2:7e: 23:86:2f:4a -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEpaMGuVOI/WnqQnNpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk MjIzODIyY2YtNTcxZC00MTkwLThhZGQtNGUwNmY1N2Y1NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5qFaoU8XLASni71wsl2ghGpXgAGgF/YpsVl e9O0/WmbmMy6dcU3g+727lzdX3x0+PEbDUV3YKqdo4CHi97Oc2eujUJszZdgOs0f znBgkMPf6nhS+pOdhOwp4CHMWMdHujsqUb9S7RFl5jcArZpBjLXvSYQDtOVZkwxF SzoZVewjlmSLm9DBdiavKQq36u2kR91CkDzbe0av8Kh3aBz1O6QYOehuGibEpTMQ SR8E81HYnefvxn4mRyXsV2g+alGj+PHL+cMpi4SNArLXuvZ9o6FHqg2bMH3IEZYn A3L2epsntPYsPNKBanadFMyk6TpyHKEtIZJ+JKpDSOHhR201GQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFOse2ckBBxJyp9tIXEMMl+xl9lKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvZTZmZWNkYTItMzIxZi0z YzkyLWJkODUtZTVlZDY5ZjUwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAFsPx4D AwZsADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAJ0y0PhBevg0UbBqTu5Bs9TPT+hUdlVawZqiudCGmb9lUi 5+9s1UpP2xUHUMZ1TEojTNWn/MR0F6INRBQHFriEryQAFcUumF0EaaPwobKtWeAm q9eBU+O/GpFGlX5ss7UD9DgTAOt41US3V738m8EwsLU0JpQWXGcc7JqtIwEHuDI3 zQQr53nn/Mq9BBnPFScHjgOhVVZZpGXCbhTS2MvZcis2T77YIkkjfnpoLF0AGa9o tebh9kH0Ep88GMNWi4LbVK88blP0DSqXA/rkiA804DlmbAbT7zWI53b2uS20C9LK 6+wcSDU2Nul+vlMWX3Y4BCVNgRaqbGKbwn4jhi9K -----END CERTIFICATE-----Generated at Mon Jun 30 00:53:49 2025 by rpki-client