$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa File: b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa (raw, json) Hash identifier: L8c/jPabR+Mlb8nKd/IP0xYfVr75TbeM5rD3+arGWVQ= Subject key identifier: 01:9A:9E:ED:DA:9C:0E:2D:75:C7:C7:AA:50:1F:2E:BA:82:E4:58:F4 Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9 Certificate serial: 010D0C9F4328584A1F902206DE40397CC1A22400 Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 32821 IP address blocks: 208.94.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:22:06:de:40:39:7c:c1:a2:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=f3614e6e-4e12-479e-9d45-afcad2881888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:1b:39:6b:ca:ae:10:25:ff:03:f1:d0:03: ba:36:a6:21:8a:55:31:90:76:9c:6a:03:d4:c3:6e: 8a:e2:ee:9a:b1:37:d1:a7:33:48:e4:67:82:52:d7: cc:74:69:91:59:44:23:ba:de:d5:6e:72:d4:15:7a: bd:3b:f6:72:2b:8c:b8:ce:5b:4d:1b:4a:b4:86:de: 32:a3:c9:2f:b5:b0:d4:5d:74:51:90:9c:e6:33:60: 13:af:83:27:fc:85:28:01:ed:77:66:70:0a:38:f4: 67:2c:a5:60:70:06:96:be:c0:17:a7:3f:78:4a:34: 21:d0:dc:10:6c:9f:fa:33:44:29:63:ab:c5:1a:83: 37:07:8f:a8:fa:62:31:e8:df:80:1f:ac:7b:b5:9e: 61:c4:c6:9e:be:31:3b:da:b1:28:3b:cd:0a:37:cc: d6:e9:29:dd:97:6e:44:f8:7d:c8:68:3e:dc:bc:9c: 47:97:61:83:fa:fe:b2:6f:a0:d8:45:ae:cc:d6:db: c5:06:6c:7b:bf:8d:f1:1d:d0:c1:8b:21:43:a4:c4: 76:6a:3c:c4:fd:24:56:4a:42:71:b9:97:78:9c:2c: 26:57:db:4c:e5:12:04:08:83:77:79:fc:0c:d8:cb: a3:3a:d5:8d:5d:13:fd:6a:e2:68:a1:19:53:8c:0e: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9A:9E:ED:DA:9C:0E:2D:75:C7:C7:AA:50:1F:2E:BA:82:E4:58:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl X509v3 Authority Key Identifier: keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer sbgp-ipAddrBlock: critical IPv4: 208.94.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:81:86:fd:93:c4:6f:70:5b:bd:0f:64:7f:bb:3d:55:08:57: 25:e2:a6:d0:ea:4b:48:7e:81:c6:c2:0e:0d:b4:53:52:98:98: e6:0c:c8:1d:da:19:f3:25:c9:1f:1a:05:aa:cf:b3:bf:c4:a0: 9b:6a:43:3d:98:b9:79:d9:90:16:b5:0c:6a:e8:6d:8d:41:99: 44:4f:68:99:02:32:c3:4f:72:ee:bc:98:2c:2d:01:20:34:9c: 4c:da:97:83:b2:a5:ce:d3:3b:f7:74:10:42:3a:90:e4:00:22: 2d:4d:9b:b3:41:eb:f9:7d:98:f5:64:73:0b:07:10:73:1a:2d: 1f:d9:42:87:08:8b:ed:b4:d5:3d:a4:2e:6d:9e:95:6b:ad:2a: 94:8b:a0:a3:f7:8c:8b:05:38:6b:be:e0:91:c5:7f:e8:fa:46: 4c:d7:de:7f:d5:80:5a:5a:70:89:13:4d:c1:74:e9:30:b9:4e: c5:d2:d0:ed:2e:26:70:86:fb:87:52:04:0a:bb:b8:ab:6f:b3: 16:7c:11:d4:69:87:4f:1c:2b:c8:bc:31:30:1f:ae:a0:d4:53: 91:99:1a:26:d0:c8:48:c8:9e:c5:63:bf:a4:aa:7b:f1:70:2f: a5:ed:93:29:fd:14:8d:80:b4:38:b6:d9:b9:76:3e:f1:16:98: 9f:44:f1:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCIG3kA5fMGiJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj YmY5MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk ZjM2MTRlNmUtNGUxMi00NzllLTlkNDUtYWZjYWQyODgxODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJMbOWvKrhAl/wPx0AO6NqYhilUxkHacagPU w26K4u6asTfRpzNI5GeCUtfMdGmRWUQjut7VbnLUFXq9O/ZyK4y4zltNG0q0ht4y o8kvtbDUXXRRkJzmM2ATr4Mn/IUoAe13ZnAKOPRnLKVgcAaWvsAXpz94SjQh0NwQ bJ/6M0QpY6vFGoM3B4+o+mIx6N+AH6x7tZ5hxMaevjE72rEoO80KN8zW6Sndl25E +H3IaD7cvJxHl2GD+v6yb6DYRa7M1tvFBmx7v43xHdDBiyFDpMR2ajzE/SRWSkJx uZd4nCwmV9tM5RIECIN3efwM2MujOtWNXRP9auJooRlTjA6kHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGanu3anA4tdcfHqlAfLrqC5Fj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvYjJhNWViYjctOTc3Zi0z NTExLWJkY2UtMWUxYThiNWRmMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl ZGJlZmNiZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F50MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeBhv2TxG9wW70PZH+7PVUIVyXiptDqS0h+gcbCDg20U1KYmOYMyB3a GfMlyR8aBarPs7/EoJtqQz2YuXnZkBa1DGrobY1BmURPaJkCMsNPcu68mCwtASA0 nEzal4Oypc7TO/d0EEI6kOQAIi1Nm7NB6/l9mPVkcwsHEHMaLR/ZQocIi+201T2k Lm2elWutKpSLoKP3jIsFOGu+4JHFf+j6RkzX3n/VgFpacIkTTcF06TC5TsXS0O0u JnCG+4dSBAq7uKtvsxZ8EdRph08cK8i8MTAfrqDUU5GZGibQyEjInsVjv6Sqe/Fw L6Xtkyn9FI2AtDi22bl2PvEWmJ9E8ds= -----END CERTIFICATE-----Generated at Mon Jun 30 10:22:34 2025 by rpki-client