$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ee65b3a5-f123-3c4c-a05f-4510816011bf.roa File: ee65b3a5-f123-3c4c-a05f-4510816011bf.roa (raw, json) Hash identifier: 21K0XxJ/Dqpp7ThmMfp9FYw/wEHOPvA1Asm8u0V3d0I= Subject key identifier: 0C:C2:3D:D9:F2:A7:5E:97:47:06:16:CA:4B:57:07:03:42:64:2B:55 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A14657C6EB177A55FE01A11C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ee65b3a5-f123-3c4c-a05f-4510816011bf.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 13576 IP address blocks: 216.106.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7c:6e:b1:77:a5:5f:e0:1a:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=c64c219f-6251-41ce-a0dc-dc04c6a6cdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cf:7f:e6:c3:0d:9a:97:dc:4b:69:ab:66:d6: 82:49:5c:e4:2d:4d:19:03:1b:98:54:43:9c:2d:45: 21:95:a0:5e:03:0d:fa:06:92:28:83:aa:75:4d:63: fc:f4:ea:a1:86:f4:17:f6:c4:c0:65:82:1b:20:bb: ff:46:50:af:3a:bb:7d:2b:1e:51:a6:96:5c:77:c1: aa:d0:94:c0:ed:5e:a9:96:fe:c5:af:52:9f:18:b2: 1d:cf:be:c1:0b:74:01:36:04:7d:64:d2:5c:74:90: eb:55:99:10:85:e3:5f:e8:45:9c:6d:34:54:77:1b: f4:e8:1a:c8:f8:25:6c:0f:90:5d:1f:43:ff:7e:bf: 3b:fb:ea:6d:89:cd:0e:0a:df:f7:69:4b:ac:25:72: e4:4c:b5:6d:bf:fb:87:f9:85:44:bc:34:47:02:e3: a8:51:c0:38:d4:7f:59:5f:0b:97:04:60:62:f8:2e: 83:03:f8:a1:7d:00:ed:ae:43:3a:48:3e:77:5f:cf: 84:45:93:d3:20:11:a8:88:7e:94:2d:fe:2c:ef:c5: b0:34:8b:f1:b0:74:da:7c:48:9e:85:b8:9d:a9:56: cf:78:0f:3e:05:9a:cb:97:b5:24:67:a0:d7:7c:1c: 5c:83:2d:b8:2c:ce:59:de:5f:58:20:4a:b3:7d:23: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C2:3D:D9:F2:A7:5E:97:47:06:16:CA:4B:57:07:03:42:64:2B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ee65b3a5-f123-3c4c-a05f-4510816011bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:1d:96:87:03:ec:e7:8b:e1:4c:d6:35:cc:71:64:53:82:2b: 88:45:2b:cf:e1:57:ec:80:3c:03:69:0b:f2:40:6f:be:b0:82: 16:70:e0:b1:74:47:7d:07:43:06:2a:c9:c8:b7:65:71:0d:68: 94:1a:aa:18:dd:cc:68:b6:20:88:68:6c:0c:24:e2:4a:a8:01: ad:b8:54:2c:7c:99:25:b7:6b:2a:30:1d:ac:ac:d0:2c:83:dd: 21:b1:5e:61:3a:fd:39:25:ea:69:a0:0a:5d:a8:a7:5b:25:fe: 6d:42:bf:17:60:12:ea:46:23:55:8a:1c:4e:9d:5e:6c:ab:cb: 08:53:c8:bb:8e:07:f9:c3:4c:7c:ed:84:4f:10:25:01:64:af: 4f:8a:ef:00:99:8a:2c:dc:bf:20:41:8a:c7:9a:e9:11:3e:ef: 56:3b:fa:fa:45:d2:6b:44:08:da:62:0e:ec:4d:35:66:7b:f1: 6c:b5:c9:bb:5d:12:39:0c:07:42:83:11:7f:00:00:f7:56:7b: a1:c0:02:9c:66:86:f7:f9:77:fd:a7:2c:9d:b6:6e:0d:ca:06: 8b:87:88:0f:ea:49:5f:ca:fd:61:15:68:30:2d:0d:88:90:29: b4:e7:15:5b:b8:eb:5f:67:77:b2:0f:b1:18:0b:d6:4b:66:21: 8f:04:4b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXxusXelX+AaEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YzY0YzIxOWYtNjI1MS00MWNlLWEwZGMtZGMwNGM2YTZjZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks9/5sMNmpfcS2mrZtaCSVzkLU0ZAxuYVEOc LUUhlaBeAw36BpIog6p1TWP89OqhhvQX9sTAZYIbILv/RlCvOrt9Kx5RppZcd8Gq 0JTA7V6plv7Fr1KfGLIdz77BC3QBNgR9ZNJcdJDrVZkQheNf6EWcbTRUdxv06BrI +CVsD5BdH0P/fr87++ptic0OCt/3aUusJXLkTLVtv/uH+YVEvDRHAuOoUcA41H9Z XwuXBGBi+C6DA/ihfQDtrkM6SD53X8+ERZPTIBGoiH6ULf4s78WwNIvxsHTafEie hbidqVbPeA8+BZrLl7UkZ6DXfBxcgy24LM5Z3l9YIEqzfSOEdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzCPdnyp16XRwYWyktXBwNCZCtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZWU2NWIzYTUtZjEyMy0z YzRjLWEwNWYtNDUxMDgxNjAxMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgdlocD7OeL4UzWNcxxZFOCK4hFK8/hV+yAPANpC/JAb76wghZw4LF0 R30HQwYqyci3ZXENaJQaqhjdzGi2IIhobAwk4kqoAa24VCx8mSW3ayowHays0CyD 3SGxXmE6/Tkl6mmgCl2op1sl/m1CvxdgEupGI1WKHE6dXmyrywhTyLuOB/nDTHzt hE8QJQFkr0+K7wCZiizcvyBBisea6RE+71Y7+vpF0mtECNpiDuxNNWZ78Wy1ybtd EjkMB0KDEX8AAPdWe6HAApxmhvf5d/2nLJ22bg3KBouHiA/qSV/K/WEVaDAtDYiQ KbTnFVu4619nd7IPsRgL1ktmIY8ES2A= -----END CERTIFICATE-----Generated at Sun Jun 29 21:56:20 2025 by rpki-client