$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/5143d577-fd2f-39c5-9c81-52dfb807dc3c.roa File: 5143d577-fd2f-39c5-9c81-52dfb807dc3c.roa (raw, json) Hash identifier: amIMGMOG9E01Eyt96OqtstfGTBdYdNZUjscaI3dZZmA= Subject key identifier: E5:1A:E6:39:92:62:FB:B4:E6:48:57:D1:53:9C:BB:52:34:99:65:2D Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F4328584A4F05C92921BDABD9527F3AC0 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/5143d577-fd2f-39c5-9c81-52dfb807dc3c.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 208.71.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c9:29:21:bd:ab:d9:52:7f:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=c3e722d9-8754-4b17-a93b-204d8cbbb36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:54:51:55:fa:ac:b1:d3:d2:7a:65:17:42: ce:0c:85:59:f6:9e:c5:dc:be:87:6f:aa:d1:48:d8: 2a:2d:24:29:69:c5:ce:62:80:d4:06:4a:bc:b5:7f: f9:9e:f3:9b:e3:37:7a:05:b0:30:5e:36:a9:ca:3b: da:16:af:e6:99:c6:80:2c:a4:62:5f:ef:70:3a:0b: 24:b7:fc:a7:74:c6:f3:67:54:56:6b:52:06:14:71: 03:16:4c:b9:24:c8:0e:03:70:7c:ea:6a:4f:a8:ca: e6:3f:2e:64:6f:1b:89:ae:33:0d:02:c4:86:79:8e: 80:8e:b6:70:04:35:bc:08:62:80:4c:7c:43:3a:97: 1d:f7:1e:9f:20:4e:c9:31:d9:36:51:4d:45:c0:6d: e9:ec:ce:62:c0:d7:76:fc:cc:c5:d1:e4:69:52:19: 21:e3:e2:be:e0:fe:c6:fb:83:61:c6:76:c2:a4:18: e8:11:b3:60:85:8e:13:9c:65:cc:2b:50:df:39:9b: b2:69:60:1e:c8:9d:aa:51:70:e8:29:2e:92:a3:5a: c1:61:92:4d:4c:81:5e:e3:13:04:be:1e:4f:31:76: 0f:e5:28:3f:76:b4:09:28:50:90:61:6a:bd:30:d0: b3:9c:04:bb:e2:5e:e1:bb:46:7f:27:d8:79:77:35: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1A:E6:39:92:62:FB:B4:E6:48:57:D1:53:9C:BB:52:34:99:65:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/5143d577-fd2f-39c5-9c81-52dfb807dc3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e1:98:40:71:b1:69:7a:11:e2:a9:8a:20:1c:f9:7e:5b:6d: 1a:8c:45:a5:2d:86:d0:09:f8:7f:a7:b7:7c:c6:23:aa:76:0e: 1b:3f:22:62:6f:14:52:9e:f0:1d:cf:87:f4:0a:df:c7:a2:b8: 3d:de:72:d9:62:a8:3f:32:ae:98:ef:6a:0d:b6:e2:46:ff:04: 5b:04:39:fe:8f:c3:c3:00:ea:1d:4e:16:63:9f:c3:cd:c3:03: 65:4d:93:22:9e:f3:a3:d4:b4:4f:9d:c0:5c:4f:ec:83:46:a7: f7:53:31:a0:e9:98:f2:e0:ab:7a:7c:f9:fc:69:ba:b2:12:34: 42:c8:22:c4:42:d1:49:cb:5d:9b:b1:6b:6f:df:46:c2:59:a3: 51:b8:3e:1d:46:0f:5f:aa:26:09:3f:77:20:d4:56:75:cd:d0: 7a:a6:1f:dd:e5:e8:e3:76:84:e6:97:e9:58:be:19:d1:86:1c: 4e:e4:58:50:47:40:ab:eb:0e:4e:e7:85:d3:36:c8:3b:3e:93: 39:72:47:66:3f:6c:13:a4:6b:66:2d:14:e3:6c:a2:7c:41:81: 7d:92:a0:18:60:a4:f4:ac:68:67:54:b3:7b:c5:97:9f:c5:9c: 41:5f:e6:67:cd:0f:d9:4b:b7:06:74:44:d9:f5:6a:c3:69:0e: 98:12:5a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBckpIb2r2VJ/OsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YzNlNzIyZDktODc1NC00YjE3LWE5M2ItMjA0ZDhjYmJiMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlndUUVX6rLHT0nplF0LODIVZ9p7F3L6Hb6rR SNgqLSQpacXOYoDUBkq8tX/5nvOb4zd6BbAwXjapyjvaFq/mmcaALKRiX+9wOgsk t/yndMbzZ1RWa1IGFHEDFky5JMgOA3B86mpPqMrmPy5kbxuJrjMNAsSGeY6AjrZw BDW8CGKATHxDOpcd9x6fIE7JMdk2UU1FwG3p7M5iwNd2/MzF0eRpUhkh4+K+4P7G +4NhxnbCpBjoEbNghY4TnGXMK1DfOZuyaWAeyJ2qUXDoKS6So1rBYZJNTIFe4xME vh5PMXYP5Sg/drQJKFCQYWq9MNCznAS74l7hu0Z/J9h5dzXBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUa5jmSYvu05khX0VOcu1I0mWUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvNTE0M2Q1NzctZmQyZi0z OWM1LTljODEtNTJkZmI4MDdkYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDhmEBxsWl6EeKpiiAc+X5bbRqMRaUthtAJ+H+nt3zGI6p2Dhs/ImJv FFKe8B3Ph/QK38eiuD3ectliqD8yrpjvag224kb/BFsEOf6Pw8MA6h1OFmOfw83D A2VNkyKe86PUtE+dwFxP7INGp/dTMaDpmPLgq3p8+fxpurISNELIIsRC0UnLXZux a2/fRsJZo1G4Ph1GD1+qJgk/dyDUVnXN0HqmH93l6ON2hOaX6Vi+GdGGHE7kWFBH QKvrDk7nhdM2yDs+kzlyR2Y/bBOka2YtFONsonxBgX2SoBhgpPSsaGdUs3vFl5/F nEFf5mfND9lLtwZ0RNn1asNpDpgSWls= -----END CERTIFICATE-----Generated at Sun Jun 29 04:05:57 2025 by rpki-client