$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa File: 0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa (raw, json) Hash identifier: TLYPhS+umnCtHM2DPOLwK1GGSrausXxExMaRuOyiefw= Subject key identifier: 4C:F0:B7:51:10:6C:BC:D1:C0:A5:EC:0F:65:B2:1A:F7:38:72:A7:37 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584A119AA99CFD250C479F3ECE46 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 88 IP address blocks: 204.153.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a9:9c:fd:25:0c:47:9f:3e:ce:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=649b073e-3f02-4feb-9857-06be16b8292f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:04:ac:bb:8c:58:4e:c7:12:ca:a3:10:d7: 67:36:8a:c3:9a:c9:44:27:e5:e8:2c:b8:85:35:09: 0d:e9:bd:1e:93:69:9b:68:44:3f:d8:1e:78:fd:04: 9f:13:89:cc:da:3d:8c:17:ae:46:d9:db:d3:21:29: 4e:73:04:a0:2f:a4:ee:65:9c:14:e7:dc:20:89:7b: 2b:ba:49:ad:73:b3:5e:41:03:bb:d6:3e:03:ad:e8: 17:25:98:10:d5:08:28:fa:4f:a1:f0:22:51:6c:55: bd:af:59:02:71:65:04:ba:93:46:4e:4a:98:da:2c: 29:76:4d:68:f8:00:6b:55:18:c9:8b:32:be:40:d7: 3f:ec:aa:dd:90:b1:6d:e3:cf:0d:a7:1d:30:76:e3: 0b:03:83:11:65:70:09:0e:c4:27:87:5e:b0:bf:7a: 95:ca:fd:19:ba:f7:7e:3a:c0:ab:01:22:99:db:1f: a2:f2:d4:e2:f6:fc:c5:73:7a:6c:f2:d9:a5:c5:1f: 7c:15:46:4d:18:9f:e5:31:0f:06:33:3f:4a:c7:21: 69:0f:56:d1:a5:a5:c2:2b:65:51:36:a5:82:ac:dc: c4:0d:c9:b2:e1:12:de:85:de:a5:08:9c:2e:89:ee: d9:de:ce:a6:c4:53:be:ad:92:f8:0b:f1:bf:d9:02: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:B7:51:10:6C:BC:D1:C0:A5:EC:0F:65:B2:1A:F7:38:72:A7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:aa:bb:b2:63:1f:4b:40:1c:2c:34:12:e9:9a:4f:be:7b:f8: 73:d1:a9:02:56:a3:e8:51:8d:ea:87:69:14:ba:81:82:66:fa: 54:26:d2:3f:1e:12:13:4f:58:cb:c3:13:7a:c3:ab:1d:2f:06: 79:cb:45:12:ac:18:e4:a9:30:0d:79:41:b0:73:ef:f3:7c:94: fe:5f:8c:68:66:1c:d9:93:b9:02:73:0a:d8:23:2b:c1:7a:3a: 63:b9:e7:0a:94:bf:7e:4b:0d:35:73:c7:9c:a7:9c:86:2f:7b: e0:ac:56:52:23:d7:ba:bd:69:a8:d5:1f:7f:55:2f:a0:07:58: 14:81:13:04:db:32:dc:43:c4:4a:83:a2:fc:b4:1a:9b:04:5c: 19:1a:da:6a:8b:50:68:97:a7:30:bb:c6:0a:06:ff:ef:f8:cc: a4:3d:4c:31:15:92:0f:29:7e:89:fa:98:96:d7:c9:0c:d3:d8: cb:24:61:ec:6d:7f:30:2e:3c:fd:97:df:a9:ab:19:3d:08:47: 0a:e9:03:ab:24:e3:45:d4:f3:e2:50:88:d2:e7:74:45:78:c4: 5a:1d:a2:e0:a7:7a:cc:f5:a3:9a:39:2a:65:cc:2e:98:50:0d: 3b:5e:ef:da:0f:63:ed:63:71:0f:2c:8b:9f:09:92:a5:21:e7: 09:6a:e3:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqmc/SUMR58+zkYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NjQ5YjA3M2UtM2YwMi00ZmViLTk4NTctMDZiZTE2YjgyOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVgErLuMWE7HEsqjENdnNorDmslEJ+XoLLiF NQkN6b0ek2mbaEQ/2B54/QSfE4nM2j2MF65G2dvTISlOcwSgL6TuZZwU59wgiXsr ukmtc7NeQQO71j4DregXJZgQ1Qgo+k+h8CJRbFW9r1kCcWUEupNGTkqY2iwpdk1o +ABrVRjJizK+QNc/7KrdkLFt488Npx0wduMLA4MRZXAJDsQnh16wv3qVyv0Zuvd+ OsCrASKZ2x+i8tTi9vzFc3ps8tmlxR98FUZNGJ/lMQ8GMz9KxyFpD1bRpaXCK2VR NqWCrNzEDcmy4RLehd6lCJwuie7Z3s6mxFO+rZL4C/G/2QJUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzwt1EQbLzRwKXsD2WyGvc4cqc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvMGExNjgxNGEtYmNkNy0z YzU5LWI5Y2ItZDc4OGNjNzBmNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSqu7JjH0tAHCw0EumaT757+HPRqQJWo+hRjeqHaRS6gYJm+lQm0j8e EhNPWMvDE3rDqx0vBnnLRRKsGOSpMA15QbBz7/N8lP5fjGhmHNmTuQJzCtgjK8F6 OmO55wqUv35LDTVzx5ynnIYve+CsVlIj17q9aajVH39VL6AHWBSBEwTbMtxDxEqD ovy0GpsEXBka2mqLUGiXpzC7xgoG/+/4zKQ9TDEVkg8pfon6mJbXyQzT2MskYext fzAuPP2X36mrGT0IRwrpA6sk40XU8+JQiNLndEV4xFodouCnesz1o5o5KmXMLphQ DTte79oPY+1jcQ8si58JkqUh5wlq49U= -----END CERTIFICATE-----Generated at Sun Jun 8 18:27:39 2025 by rpki-client