$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa File: ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa (raw, json) Hash identifier: mUvnVoZUC66b4ovRpyevXX1i/HMsdgblFXEsG3G7iNo= Subject key identifier: E8:37:4B:D4:A0:7F:F6:F9:2A:2E:3F:9B:64:BB:3F:50:08:73:32:72 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584A5335A063A002F6D835712000 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 40628 IP address blocks: 204.144.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a0:63:a0:02:f6:d8:35:71:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=2cce62bc-2df2-433c-945e-1ef774e1b8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:57:7f:76:0e:ba:c8:8b:5c:df:ec:57:61: ea:7a:94:1a:77:7e:2c:ec:be:39:7e:64:19:62:6b: ef:28:2a:ff:35:fa:0f:79:88:53:a9:6e:d1:8e:4c: b0:f1:87:af:71:4f:9b:ba:4b:e6:27:26:70:d7:ad: 55:08:f2:9b:5b:12:05:63:76:23:b2:9e:9e:24:f7: db:f2:d0:d8:88:d9:1d:1c:18:69:dc:7e:b1:42:f5: da:2b:e5:e8:73:6e:12:fc:7b:9b:f6:61:d3:93:cd: d5:68:fc:37:19:23:78:73:8b:92:fb:e7:d5:6c:05: 25:82:b1:52:13:37:26:2e:70:10:61:c8:34:dd:26: 69:41:60:12:ee:08:38:fd:12:2c:5a:2f:43:4d:b2: 78:3b:7d:f2:04:f5:60:42:47:1e:2d:fc:03:d3:8d: f3:9c:31:14:2b:e8:e9:bb:dd:e5:fc:dc:1c:f3:68: cb:a5:4c:08:44:b1:e5:9f:3e:2f:3b:9c:3a:40:47: a6:2c:92:b5:a1:07:72:9d:38:b4:85:90:2e:d1:96: d9:0b:aa:63:ef:5e:10:72:58:61:03:02:1f:64:68: 72:96:7c:68:8d:c1:95:bb:49:2c:20:c7:44:cd:25: 98:58:1f:81:5c:18:49:25:63:7c:55:b0:8d:f3:d1: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:37:4B:D4:A0:7F:F6:F9:2A:2E:3F:9B:64:BB:3F:50:08:73:32:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 204.144.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:88:b5:1e:2e:e2:ad:1e:5b:d1:db:48:f9:cf:a1:9e:a1:9a: a7:02:59:cc:fa:2c:53:8a:f2:66:be:c6:26:e1:97:42:b9:a1: 1b:9f:57:1d:f9:29:77:92:a7:a3:42:cb:09:97:06:4d:82:d5: ae:86:57:31:11:91:c8:49:3b:7c:d2:4d:86:ef:52:60:85:fa: 07:06:7f:74:9e:ab:57:47:08:17:5b:84:68:82:6d:23:38:b2: 8c:67:ed:9b:bb:b2:e5:15:2a:7e:8f:a8:bf:34:a7:b9:41:b6: 47:6b:aa:c1:94:cf:c4:02:a6:dd:58:f5:b5:74:6b:47:19:69: 35:9d:66:f3:a3:28:4d:0d:0b:22:62:ea:20:7e:a9:07:30:a3: 4d:71:e1:9f:70:16:52:18:98:25:ca:97:85:a0:75:f2:bc:0d: 76:d4:e9:df:88:f2:1c:9b:54:c0:aa:00:37:f4:84:84:dc:e6: a5:ce:21:b1:57:52:7c:87:99:e2:ab:e8:e6:35:a7:35:2c:ac: 35:e1:c5:89:75:4c:4e:b9:32:29:67:6a:eb:ea:27:e7:58:0e: 15:54:9e:f0:8c:38:a2:27:57:2b:a3:69:af:66:98:e4:40:44: 08:f2:ce:91:0f:9b:42:4b:be:81:3c:19:a5:8a:ef:60:b2:fe: a7:66:0e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaBjoAL22DVxIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MmNjZTYyYmMtMmRmMi00MzNjLTk0NWUtMWVmNzc0ZTFiOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9hXf3YOusiLXN/sV2HqepQad34s7L45fmQZ YmvvKCr/NfoPeYhTqW7Rjkyw8YevcU+bukvmJyZw161VCPKbWxIFY3Yjsp6eJPfb 8tDYiNkdHBhp3H6xQvXaK+Xoc24S/Hub9mHTk83VaPw3GSN4c4uS++fVbAUlgrFS EzcmLnAQYcg03SZpQWAS7gg4/RIsWi9DTbJ4O33yBPVgQkceLfwD043znDEUK+jp u93l/Nwc82jLpUwIRLHlnz4vO5w6QEemLJK1oQdynTi0hZAu0ZbZC6pj714Qclhh AwIfZGhylnxojcGVu0ksIMdEzSWYWB+BXBhJJWN8VbCN89EmDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg3S9Sgf/b5Ki4/m2S7P1AIczJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvZWY2NTdhMTgtYmE2ZS0z ZWE2LWIwMGYtZTU2MDJlOTI1MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJBRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuItR4u4q0eW9HbSPnPoZ6hmqcCWcz6LFOK8ma+xibhl0K5oRufVx35 KXeSp6NCywmXBk2C1a6GVzERkchJO3zSTYbvUmCF+gcGf3Seq1dHCBdbhGiCbSM4 soxn7Zu7suUVKn6PqL80p7lBtkdrqsGUz8QCpt1Y9bV0a0cZaTWdZvOjKE0NCyJi 6iB+qQcwo01x4Z9wFlIYmCXKl4WgdfK8DXbU6d+I8hybVMCqADf0hITc5qXOIbFX UnyHmeKr6OY1pzUsrDXhxYl1TE65MilnauvqJ+dYDhVUnvCMOKInVyujaa9mmORA RAjyzpEPm0JLvoE8GaWK72Cy/qdmDpc= -----END CERTIFICATE-----Generated at Wed Jul 9 21:58:50 2025 by rpki-client