$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa File: 82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa (raw, json) Hash identifier: 4P5+6sxIsbIt2jfaVIYH156iKJVqVl6YfiH03kPuP1c= Subject key identifier: DA:50:F5:5B:71:71:A9:D2:E2:9A:6A:D4:3E:93:42:8F:47:F1:AF:36 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A050A74D236AABF47E2560F80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 13576 IP address blocks: 208.53.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:74:d2:36:aa:bf:47:e2:56:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=27ca77b7-fb1f-4863-b322-5a0302840714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:aa:d0:c7:b0:c3:43:28:8d:ac:74:1a:2d: c2:f3:c4:c9:a9:88:66:79:bd:91:c6:3a:a7:6a:2c: 4b:82:24:6d:f7:20:2a:6d:bb:ae:1f:9e:b6:7d:d9: bb:42:03:67:80:b6:ce:c2:09:72:b6:1e:33:a3:96: f2:36:5f:f4:17:9d:0a:38:36:76:00:1e:e0:16:49: 0b:5d:aa:fd:ab:6e:2c:9f:ea:b2:0a:7d:cd:74:1d: a8:ee:20:80:f3:ae:49:3d:85:df:fa:cc:db:4a:62: 2f:0f:1a:ee:af:38:c0:da:42:59:fa:ec:d1:e6:df: 1d:16:5b:f3:2a:77:b1:64:c0:8a:1d:8e:30:86:c3: 55:ff:45:d6:65:87:da:d5:88:ad:62:64:35:7f:06: 0c:c7:d2:b1:0b:fe:83:da:98:ae:69:5a:56:56:d5: e4:86:b2:08:da:4d:7d:4d:8f:4c:00:0c:5d:cc:ac: a6:f1:b8:a0:9c:cc:60:ea:15:4c:b0:ab:b7:ce:ca: a8:e2:36:9b:ad:66:ba:85:c6:15:56:dd:99:00:33: 32:c9:d2:12:64:05:8c:c5:5e:3d:10:f5:55:7f:26: 2c:35:0b:b4:4f:1d:18:89:0b:9e:c8:09:6a:41:2c: 62:68:d3:1c:5b:be:9c:60:dc:36:88:4a:b8:99:de: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:50:F5:5B:71:71:A9:D2:E2:9A:6A:D4:3E:93:42:8F:47:F1:AF:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:9b:51:6b:5e:a5:76:81:ad:ba:44:fc:59:dd:76:16:69:4d: 3a:76:50:41:77:20:0f:06:8e:6b:64:47:ea:99:2e:cd:b7:d2: 18:a5:49:b4:63:3c:08:2c:dd:a2:d7:7e:58:93:03:24:3b:aa: ac:9e:b2:ae:18:23:f5:3f:57:02:45:85:74:8a:08:92:f2:79: c3:aa:b6:09:22:89:de:35:18:68:9e:7f:4f:13:67:1c:24:64: d8:10:90:d3:16:36:27:71:46:e5:94:d3:64:25:fe:40:a7:28: a2:aa:56:56:b6:2d:0c:87:4b:28:93:c7:a6:bb:19:c3:eb:2b: e0:61:4e:2f:fe:d0:f5:52:78:96:2e:7c:74:79:cb:17:ce:c6: d9:72:01:27:88:63:77:fc:2f:2a:4d:b5:8d:b7:3d:06:64:4d: f9:00:49:4f:1a:00:96:25:e3:ec:b2:52:e5:bb:c0:0f:37:b5: 76:de:00:e8:96:9e:14:1a:5b:d4:80:4f:27:09:5f:f4:1f:e9: 39:41:16:a1:f5:6f:ec:be:ef:7f:da:9e:77:e4:3f:2f:30:c5: 66:d5:12:a3:ff:da:f0:a5:f1:05:58:38:77:d3:36:ea:5c:c4: 2c:44:dd:ec:39:41:d9:80:27:92:22:8a:45:5d:1e:5c:3e:8f: ab:ea:cc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnTSNqq/R+JWD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MjdjYTc3YjctZmIxZi00ODYzLWIzMjItNWEwMzAyODQwNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyKq0Meww0Mojax0Gi3C88TJqYhmeb2Rxjqn aixLgiRt9yAqbbuuH562fdm7QgNngLbOwglyth4zo5byNl/0F50KODZ2AB7gFkkL Xar9q24sn+qyCn3NdB2o7iCA865JPYXf+szbSmIvDxrurzjA2kJZ+uzR5t8dFlvz KnexZMCKHY4whsNV/0XWZYfa1YitYmQ1fwYMx9KxC/6D2piuaVpWVtXkhrII2k19 TY9MAAxdzKym8bignMxg6hVMsKu3zsqo4jabrWa6hcYVVt2ZADMyydISZAWMxV49 EPVVfyYsNQu0Tx0YiQueyAlqQSxiaNMcW76cYNw2iEq4md79uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpQ9VtxcanS4ppq1D6TQo9H8a82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODJlMTBkMWUtZWE0NS0z NzMzLThiZjctNWQyNmUzYTdkOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJObUWtepXaBrbpE/FnddhZpTTp2UEF3IA8GjmtkR+qZLs230hilSbRj PAgs3aLXfliTAyQ7qqyesq4YI/U/VwJFhXSKCJLyecOqtgkiid41GGief08TZxwk ZNgQkNMWNidxRuWU02Ql/kCnKKKqVla2LQyHSyiTx6a7GcPrK+BhTi/+0PVSeJYu fHR5yxfOxtlyASeIY3f8LypNtY23PQZkTfkASU8aAJYl4+yyUuW7wA83tXbeAOiW nhQaW9SATycJX/Qf6TlBFqH1b+y+73/annfkPy8wxWbVEqP/2vCl8QVYOHfTNupc xCxE3ew5QdmAJ5IiikVdHlw+j6vqzLQ= -----END CERTIFICATE-----Generated at Sun Jun 29 22:25:55 2025 by rpki-client