$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa File: 42054cda-212d-33df-8dc9-e1e9747eddb1.roa (raw, json) Hash identifier: BSwRfhi885QfjMVzwM0N4wYnN8M0WsBcRHbYn1CUHpc= Subject key identifier: CA:66:FC:4F:59:67:48:28:C8:30:34:A8:7E:CE:BA:75:5F:37:F5:3A Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584A119AA968702EECC4BDBFEA00 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 88 IP address blocks: 204.153.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a9:68:70:2e:ec:c4:bd:bf:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=cd77ed3a-65ed-4833-b359-6bc8d9993a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:75:82:2a:9c:53:d5:89:a4:34:36:31:27: 19:0b:7c:d9:f7:9c:02:26:42:23:91:8a:0d:13:84: 81:96:cd:18:16:93:e0:4d:b8:1f:90:e7:33:35:ea: 2b:cf:d6:74:25:11:f3:49:58:b6:24:c4:a1:bb:6a: 37:15:ef:e8:2a:8f:48:d3:b2:57:16:dc:89:86:1c: d8:2e:f0:58:00:7a:0a:c1:cd:7e:eb:13:7e:d5:d3: f0:4f:ed:ed:8c:a1:74:fe:33:64:b9:d7:ee:83:37: a7:f9:df:35:3c:05:c9:92:f6:54:ed:45:4b:82:9b: af:6f:18:ec:f6:8d:da:5f:2e:70:89:c0:a8:ff:37: 1b:59:9d:29:76:bf:58:67:57:da:ed:19:a9:28:05: 18:8f:6c:5a:92:0a:48:7f:35:18:41:21:a6:98:d4: b9:6a:a4:e7:45:1f:c9:6d:19:3e:37:4c:d2:76:e7: 44:91:01:92:ab:37:9c:f7:a9:d7:b0:30:b1:c9:ae: fb:2e:29:45:27:ae:46:a2:c8:98:ba:fd:17:c8:c4: 48:20:36:9d:f3:3c:a1:c6:ba:89:6a:f1:d7:20:21: 11:9d:8a:ac:92:c6:c8:bd:b9:12:bc:a4:3a:16:cd: 9a:a6:45:ee:65:95:09:89:8b:53:e3:12:75:1b:79: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:66:FC:4F:59:67:48:28:C8:30:34:A8:7E:CE:BA:75:5F:37:F5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a2:88:4f:b9:18:15:21:1d:d0:15:62:b3:cb:1c:d5:d7:c6: f2:b4:65:10:78:71:29:9a:8e:7c:b7:05:2f:ab:69:ce:a2:5f: 66:f6:f6:6f:de:58:50:e0:b6:d6:db:a4:73:9a:90:b6:d5:79: 88:47:67:1b:40:cb:ff:e0:ef:ce:13:21:2d:2e:b6:e1:16:b4: 00:4a:00:d0:95:72:27:c3:13:57:bf:a8:88:ef:e4:f6:21:c0: 7f:8c:0b:05:41:33:f9:bb:1c:c6:08:25:ae:9d:4d:46:e7:3d: a8:f8:f0:4e:50:b4:bd:6d:74:c5:cf:1a:0c:ba:76:97:4b:be: f3:a9:34:f5:44:c7:eb:fd:cf:3e:85:36:92:d3:3c:de:82:c7: 49:22:ba:54:ad:90:42:5a:5c:e4:30:62:9d:a5:69:24:30:e4: 8a:b6:9e:3f:a3:7f:22:33:27:dd:5e:58:a5:a3:05:04:d3:e3: 31:be:8c:1d:d8:19:7c:7f:e7:21:eb:da:b8:ef:fa:eb:9c:c6: a5:5d:b0:2f:4b:43:00:b0:c0:21:00:bd:19:5b:c6:09:86:55: fe:5c:01:fb:73:f2:8d:3b:56:7f:c5:9f:b3:6c:25:d8:ec:cc: 1b:be:a7:41:7e:69:38:aa:06:7e:40:1e:26:04:1a:db:e9:76: 2f:17:78:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqlocC7sxL2/6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2Q3N2VkM2EtNjVlZC00ODMzLWIzNTktNmJjOGQ5OTkzYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc91giqcU9WJpDQ2MScZC3zZ95wCJkIjkYoN E4SBls0YFpPgTbgfkOczNeorz9Z0JRHzSVi2JMShu2o3Fe/oKo9I07JXFtyJhhzY LvBYAHoKwc1+6xN+1dPwT+3tjKF0/jNkudfugzen+d81PAXJkvZU7UVLgpuvbxjs 9o3aXy5wicCo/zcbWZ0pdr9YZ1fa7RmpKAUYj2xakgpIfzUYQSGmmNS5aqTnRR/J bRk+N0zSdudEkQGSqzec96nXsDCxya77LilFJ65GosiYuv0XyMRIIDad8zyhxrqJ avHXICERnYqsksbIvbkSvKQ6Fs2apkXuZZUJiYtT4xJ1G3ljXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpm/E9ZZ0goyDA0qH7OunVfN/U6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvNDIwNTRjZGEtMjEyZC0z M2RmLThkYzktZTFlOTc0N2VkZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiiiE+5GBUhHdAVYrPLHNXXxvK0ZRB4cSmajny3BS+rac6iX2b29m/e WFDgttbbpHOakLbVeYhHZxtAy//g784TIS0utuEWtABKANCVcifDE1e/qIjv5PYh wH+MCwVBM/m7HMYIJa6dTUbnPaj48E5QtL1tdMXPGgy6dpdLvvOpNPVEx+v9zz6F NpLTPN6Cx0kiulStkEJaXOQwYp2laSQw5Iq2nj+jfyIzJ91eWKWjBQTT4zG+jB3Y GXx/5yHr2rjv+uucxqVdsC9LQwCwwCEAvRlbxgmGVf5cAftz8o07Vn/Fn7NsJdjs zBu+p0F+aTiqBn5AHiYEGtvpdi8XeF4= -----END CERTIFICATE-----Generated at Sun Jun 8 18:31:05 2025 by rpki-client