$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa File: a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa (raw, json) Hash identifier: FyI5P5T0FYiXu2EnqyQnVvr7yYciBw6c9abMiN7Fvhw= Subject key identifier: 3D:2B:AF:A3:8D:17:E2:ED:0A:F8:51:1D:B2:DF:3D:49:D6:A1:EE:B8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A5B95A8ABEA34F173E5A0F600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 400427 IP address blocks: 204.1.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:a8:ab:ea:34:f1:73:e5:a0:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=0a24972e-a707-4d20-84fe-c174f861d0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:f4:4e:66:b1:74:64:05:ba:76:a9:0a:fc: da:a4:02:d6:1a:8a:0f:e8:42:c6:2e:f5:3a:ff:0c: ec:7d:0f:52:d8:6b:78:b4:65:af:f9:69:f9:73:27: 92:c9:57:75:1f:26:d4:0c:49:09:de:83:a4:a0:6d: 99:75:4c:a0:a7:20:10:3f:14:40:7a:96:73:9c:75: 97:fb:3a:8b:1d:6c:56:11:23:50:f6:c7:86:72:06: 01:6e:0c:7d:b2:26:e4:7f:f9:15:99:f0:dc:6f:87: 21:20:e8:a0:c4:0d:ca:00:d9:d7:42:f1:a5:4b:c5: e8:08:fc:2c:a6:a6:d2:e4:1b:bf:63:dd:b0:78:a1: 3d:05:ee:ec:3b:59:4c:53:1c:8c:fa:3e:bf:5b:e8: f0:41:f2:fc:90:4d:ed:d7:dc:d4:5d:54:55:0f:7e: e2:e0:87:ee:28:e7:1e:9a:88:39:59:44:db:51:35: 83:ad:0e:66:d4:bf:a4:08:f0:67:f6:44:76:3b:15: d0:f9:25:2a:ea:24:22:1a:d0:8b:d3:ab:59:4d:3c: f0:47:c1:a3:8f:40:e4:87:67:12:21:fc:59:a9:45: 0d:02:15:2d:d0:f4:8c:31:32:ce:88:b8:72:0f:5e: d2:1f:74:a1:9c:be:b9:49:ae:bb:56:e5:b7:f8:b2: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:AF:A3:8D:17:E2:ED:0A:F8:51:1D:B2:DF:3D:49:D6:A1:EE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.1.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:1b:38:2b:0c:51:7f:56:78:6b:22:ff:10:14:f4:36:16:c4: 3a:1b:e4:93:88:4f:ac:85:c3:db:94:7a:1c:16:be:8e:6b:0e: 23:d9:a7:f2:e4:d9:bd:36:a1:a4:26:30:5e:df:c2:1c:e7:93: b4:d3:38:0e:8a:ad:df:ed:5d:3e:6c:e4:26:3f:81:09:86:14: 2d:70:cb:55:f1:92:6e:bf:66:af:1f:93:e9:bb:8a:5f:e8:d0: d9:4e:56:2e:97:e1:b4:26:8a:01:f6:ec:db:af:69:ca:09:16: 0b:96:78:c8:33:55:e2:75:13:22:44:b4:9b:28:94:df:f7:b4: bf:96:29:62:10:bb:98:dc:43:0b:8b:62:99:c0:76:81:0b:af: 1e:15:27:97:c7:34:79:bf:f6:21:39:6a:9f:84:a8:c3:c9:00: 49:d1:41:12:cb:9c:e9:bf:e2:ec:5b:1d:f6:8c:fa:a2:9a:83: a8:a5:25:ed:6a:b0:b8:d6:9a:d2:0d:e8:8e:3a:2c:87:2a:cb: e0:49:19:52:13:a0:21:33:db:33:2f:37:d1:23:b4:ca:c0:34: 32:01:dc:d2:2d:89:bf:cb:44:02:b0:c7:33:6e:17:47:7a:11: 80:b6:3a:2a:1f:ec:dd:74:c9:9d:a3:54:09:e2:a8:4c:24:f6: f2:f4:45:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblair6jTxc+Wg9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MGEyNDk3MmUtYTcwNy00ZDIwLTg0ZmUtYzE3NGY4NjFkMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAP0TmaxdGQFunapCvzapALWGooP6ELGLvU6 /wzsfQ9S2Gt4tGWv+Wn5cyeSyVd1HybUDEkJ3oOkoG2ZdUygpyAQPxRAepZznHWX +zqLHWxWESNQ9seGcgYBbgx9sibkf/kVmfDcb4chIOigxA3KANnXQvGlS8XoCPws pqbS5Bu/Y92weKE9Be7sO1lMUxyM+j6/W+jwQfL8kE3t19zUXVRVD37i4IfuKOce mog5WUTbUTWDrQ5m1L+kCPBn9kR2OxXQ+SUq6iQiGtCL06tZTTzwR8Gjj0Dkh2cS IfxZqUUNAhUt0PSMMTLOiLhyD17SH3ShnL65Sa67VuW3+LKrvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0rr6ONF+LtCvhRHbLfPUnWoe64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYThmNzcyMWMtYzNkYS0z NWZmLWFlYWYtMDcxMzcyOGIxOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzAEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJobOCsMUX9WeGsi/xAU9DYWxDob5JOIT6yFw9uUehwWvo5rDiPZp/Lk 2b02oaQmMF7fwhznk7TTOA6Krd/tXT5s5CY/gQmGFC1wy1Xxkm6/Zq8fk+m7il/o 0NlOVi6X4bQmigH27NuvacoJFguWeMgzVeJ1EyJEtJsolN/3tL+WKWIQu5jcQwuL YpnAdoELrx4VJ5fHNHm/9iE5ap+EqMPJAEnRQRLLnOm/4uxbHfaM+qKag6ilJe1q sLjWmtIN6I46LIcqy+BJGVIToCEz2zMvN9EjtMrANDIB3NItib/LRAKwxzNuF0d6 EYC2Oiof7N10yZ2jVAniqEwk9vL0RQE= -----END CERTIFICATE-----Generated at Tue Jul 1 01:47:06 2025 by rpki-client