$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa File: a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa (raw, json) Hash identifier: ptgzsT1RTU/liRghtRkexI0dPu8U51MBmbeW8HLOTbQ= Subject key identifier: 06:2F:9B:5B:17:A9:09:03:66:2A:0C:E2:9C:7B:51:07:0A:6F:5C:FE Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A050A74206547C0C4BBC237C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 13576 IP address blocks: 208.53.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:74:20:65:47:c0:c4:bb:c2:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=001ef0f9-f131-4a41-9fc4-0a79537f3ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:2c:ad:62:38:3e:bd:db:9f:3e:95:be:d9: e9:08:16:ce:da:47:1a:3f:c2:cd:81:fb:35:de:f5: 14:87:4b:f3:60:04:a4:9e:30:7c:0e:a1:9f:71:08: 53:e5:c2:23:22:7c:28:0a:9f:cd:4f:63:64:2f:43: 18:54:fe:84:bd:20:b0:87:93:00:41:3f:7b:c5:eb: 2e:bb:37:77:26:7c:af:e2:22:3b:79:74:91:16:b2: 56:ad:df:34:6c:75:28:70:96:bd:e4:54:7a:31:ad: ab:c1:d9:92:9b:4b:30:76:90:df:02:f1:de:8d:1f: 88:a4:53:92:87:15:39:34:e5:2b:26:3f:3e:dc:46: b8:52:4d:4a:36:00:96:61:04:5a:d6:a3:ab:cf:75: bc:05:2c:7a:bb:f5:c2:28:ef:4d:1d:3b:06:4a:9f: 8f:22:b4:34:dc:a6:a4:5e:1d:b8:e0:1d:a4:cc:31: b2:ce:46:99:b3:8b:bd:07:72:34:44:6d:91:5c:7e: e4:67:04:51:43:46:84:24:19:d5:b8:05:2a:e0:4d: 69:10:e8:54:21:a1:66:a8:97:1e:0e:d2:9e:84:ec: 63:ec:5d:14:cc:19:85:6d:33:87:e3:21:55:21:45: 4b:47:00:62:31:1c:5f:5d:6a:04:28:1a:cd:30:36: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2F:9B:5B:17:A9:09:03:66:2A:0C:E2:9C:7B:51:07:0A:6F:5C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3c:08:1e:80:2a:36:f8:1f:79:8e:0f:8b:2d:43:22:3f:03: 24:70:ed:73:bb:5b:7d:9d:3a:0a:91:b8:24:66:cc:04:e3:8c: 82:6f:fd:f7:26:ea:ea:4f:ff:d0:86:5f:7e:70:57:57:4c:6f: d1:d5:df:cd:d5:26:a2:ea:a1:3d:d7:58:74:29:64:f5:ac:71: 33:a7:27:8c:90:9d:bf:cc:85:1e:db:e7:dd:29:e1:f6:7f:ea: e8:60:a8:b9:a5:77:4f:7a:74:3f:eb:5c:9a:05:4b:36:9f:72: 1c:55:6d:b5:79:ce:f1:3e:c2:b2:1f:a8:cb:e8:cf:02:10:c6: c4:82:cf:2d:7a:b7:bd:54:1c:19:9a:ae:41:e0:55:af:8a:a9: 92:b2:15:63:f1:1f:b1:ac:a1:53:1c:e7:b0:ff:24:5d:1d:0f: 70:4f:18:0b:a4:fa:d7:c1:6d:a6:cc:eb:81:f0:e3:e1:a7:5e: 71:10:72:03:a3:66:bd:32:72:71:32:48:a0:99:a9:cd:a8:19: f3:30:37:cb:35:4c:fc:4c:4a:f8:b1:24:b8:ae:c0:1c:7e:3a: 8b:fb:12:06:50:92:3f:94:65:e0:ca:fd:4b:83:21:17:54:38: 7b:62:7d:c3:81:f1:c2:ab:fb:d7:73:3d:c7:c9:08:ca:fd:7d: 41:80:e8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnQgZUfAxLvCN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MDAxZWYwZjktZjEzMS00YTQxLTlmYzQtMGE3OTUzN2YzZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioMsrWI4Pr3bnz6VvtnpCBbO2kcaP8LNgfs1 3vUUh0vzYASknjB8DqGfcQhT5cIjInwoCp/NT2NkL0MYVP6EvSCwh5MAQT97xesu uzd3Jnyv4iI7eXSRFrJWrd80bHUocJa95FR6Ma2rwdmSm0swdpDfAvHejR+IpFOS hxU5NOUrJj8+3Ea4Uk1KNgCWYQRa1qOrz3W8BSx6u/XCKO9NHTsGSp+PIrQ03Kak Xh244B2kzDGyzkaZs4u9B3I0RG2RXH7kZwRRQ0aEJBnVuAUq4E1pEOhUIaFmqJce DtKehOxj7F0UzBmFbTOH4yFVIUVLRwBiMRxfXWoEKBrNMDaW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYvm1sXqQkDZioM4px7UQcKb1z+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYTZmZDVmYzQtYTMwOC0z NWY2LThiYjQtZTJiMTBiNzhmNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU8CB6AKjb4H3mOD4stQyI/AyRw7XO7W32dOgqRuCRmzATjjIJv/fcm 6upP/9CGX35wV1dMb9HV383VJqLqoT3XWHQpZPWscTOnJ4yQnb/MhR7b590p4fZ/ 6uhgqLmld096dD/rXJoFSzafchxVbbV5zvE+wrIfqMvozwIQxsSCzy16t71UHBma rkHgVa+KqZKyFWPxH7GsoVMc57D/JF0dD3BPGAuk+tfBbabM64Hw4+GnXnEQcgOj Zr0ycnEySKCZqc2oGfMwN8s1TPxMSvixJLiuwBx+Oov7EgZQkj+UZeDK/UuDIRdU OHtifcOB8cKr+9dzPcfJCMr9fUGA6Cc= -----END CERTIFICATE-----Generated at Sun Jun 29 21:33:37 2025 by rpki-client