$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa File: 8e12930e-504a-3f50-8b98-113950f808f7.roa (raw, json) Hash identifier: i5WdRtZ0LjGsSK2Lg5sPtWRSHlusccwYmKjwoEKBMlQ= Subject key identifier: 3F:74:0B:20:95:8C:0D:0C:FE:1B:63:0B:BF:EB:29:AC:7B:73:9C:8F Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584A119AAE35F15DC8CF5EB0E280 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 88 IP address blocks: 204.153.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:ae:35:f1:5d:c8:cf:5e:b0:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=11f0a143-f570-44e1-80bb-8aab5064ed64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:21:60:17:10:ee:79:6f:76:f3:42:6c:93: 73:2d:6e:62:c0:6b:ad:d4:06:0c:c4:d9:c5:4b:b3: ff:d0:b9:46:a2:be:30:a7:e9:32:1e:91:0c:33:03: 29:2e:6c:17:f8:25:6e:90:8a:cd:2e:5d:c8:9c:ed: ff:80:c0:0e:cc:52:3f:5c:6a:f9:71:b6:b5:3b:17: 9c:44:4b:37:26:44:23:3f:1b:ad:c4:f2:9c:90:26: 7c:26:c6:b2:57:2f:09:d4:b7:9c:a4:d4:50:3b:2b: 46:43:62:20:1a:ad:a3:63:14:40:24:9f:aa:03:7c: 25:75:00:f6:cd:d9:dd:48:62:9e:f6:f4:18:75:cb: c8:6f:eb:4f:28:85:e9:0e:2f:95:02:84:db:51:c0: c2:57:d9:91:fa:3a:24:3f:fc:a2:bd:21:31:4e:8d: 6a:5f:ac:70:41:88:8a:30:e1:d9:f9:e1:0d:e5:cf: d3:1a:60:78:a9:5f:74:af:a5:43:50:15:1f:f2:2b: 64:a4:86:9b:d0:6c:08:b9:21:3d:e1:e7:32:1a:f6: fe:6a:25:df:18:74:d6:fb:ab:0c:32:9c:87:73:50: 4d:9e:ed:4f:c5:dc:bb:21:76:4b:18:47:13:df:b8: bf:65:9b:06:fc:03:12:47:1c:ce:7e:bc:ca:82:ed: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:74:0B:20:95:8C:0D:0C:FE:1B:63:0B:BF:EB:29:AC:7B:73:9C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b3:57:0c:83:d1:1d:69:fe:65:4e:45:28:2a:9c:e5:0b:07: 18:43:59:dc:b4:62:9c:68:04:96:aa:85:ee:9c:ae:8c:0a:ba: b0:ef:12:a8:72:a7:0e:3e:91:f1:3e:14:79:78:7d:70:29:af: 05:a1:a7:d8:85:cd:ba:4a:cb:44:5d:17:2a:75:ce:dd:0e:e6: 05:50:e7:1b:7e:48:6a:89:64:b8:a7:d8:43:3e:98:67:7f:62: 78:8a:07:3d:54:3b:29:f4:28:67:57:ff:ff:83:cd:e6:d0:37: 79:81:a2:51:36:46:b3:7f:f8:fe:6a:ff:f0:4c:c3:1d:47:06: 55:80:6a:0d:89:24:c0:58:05:ed:55:9b:f7:a5:74:7a:cd:6b: 77:50:9d:a5:bc:7d:72:b4:c3:1a:9f:ec:c3:e0:cc:3c:7e:ee: 91:aa:28:6a:b9:8e:6c:0f:a9:b2:fb:f1:5f:0d:87:45:96:6d: 8b:b1:de:8c:83:e2:be:36:54:d1:bb:f0:02:b2:05:1e:3b:e3: fb:ea:66:6a:82:d2:f7:18:a3:1f:c3:96:0b:d7:f5:43:fb:f9: 61:45:47:ae:aa:79:62:69:da:0e:f4:9b:d1:dc:ec:12:9a:4f: f4:cf:68:74:f4:3f:06:60:6f:ff:20:41:43:a6:d3:7b:a0:10: 72:1a:72:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmq418V3Iz16w4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MTFmMGExNDMtZjU3MC00NGUxLTgwYmItOGFhYjUwNjRlZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQAhYBcQ7nlvdvNCbJNzLW5iwGut1AYMxNnF S7P/0LlGor4wp+kyHpEMMwMpLmwX+CVukIrNLl3InO3/gMAOzFI/XGr5cba1Oxec REs3JkQjPxutxPKckCZ8JsayVy8J1LecpNRQOytGQ2IgGq2jYxRAJJ+qA3wldQD2 zdndSGKe9vQYdcvIb+tPKIXpDi+VAoTbUcDCV9mR+jokP/yivSExTo1qX6xwQYiK MOHZ+eEN5c/TGmB4qV90r6VDUBUf8itkpIab0GwIuSE94ecyGvb+aiXfGHTW+6sM MpyHc1BNnu1Pxdy7IXZLGEcT37i/ZZsG/AMSRxzOfrzKgu2zYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD90CyCVjA0M/htjC7/rKax7c5yPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOGUxMjkzMGUtNTA0YS0z ZjUwLThiOTgtMTEzOTUwZjgwOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKzVwyD0R1p/mVORSgqnOULBxhDWdy0YpxoBJaqhe6crowKurDvEqhy pw4+kfE+FHl4fXAprwWhp9iFzbpKy0RdFyp1zt0O5gVQ5xt+SGqJZLin2EM+mGd/ YniKBz1UOyn0KGdX//+DzebQN3mBolE2RrN/+P5q//BMwx1HBlWAag2JJMBYBe1V m/eldHrNa3dQnaW8fXK0wxqf7MPgzDx+7pGqKGq5jmwPqbL78V8Nh0WWbYux3oyD 4r42VNG78AKyBR474/vqZmqC0vcYox/DlgvX9UP7+WFFR66qeWJp2g70m9Hc7BKa T/TPaHT0PwZgb/8gQUOm03ugEHIacnQ= -----END CERTIFICATE-----Generated at Sun Jun 8 16:34:40 2025 by rpki-client