$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa File: 9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa (raw, json) Hash identifier: a8PteI5bU37/x9I/hccP7V0ZEmOniYF7bNn2OUnQbzM= Subject key identifier: EE:68:EA:CC:95:5E:47:CE:72:33:61:F0:F8:E9:51:C8:85:9F:9B:20 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A0727D74DCD5FCD539AB5DC80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa Signing time: Fri 30 May 2025 19:11:42 +0000 ROA not before: Fri 30 May 2025 19:11:42 +0000 ROA not after: Thu 28 Aug 2025 19:11:42 +0000 asID: 36850 IP address blocks: 204.85.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:d7:4d:cd:5f:cd:53:9a:b5:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:11:42 2025 GMT Not After : Aug 28 19:11:42 2025 GMT Subject: CN=7cddeab0-b2f4-40bb-8baf-3636e7bfa1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:a0:a3:b2:38:67:60:7c:83:8f:ca:24:f3: 4a:84:48:e6:e1:a4:a9:bc:b6:e0:e4:ff:a7:c0:6a: 87:0d:24:14:1e:83:13:94:a1:27:ec:cd:ca:ed:03: de:96:24:6b:a1:9c:79:c2:84:e8:93:cd:a1:50:49: c5:e6:4a:5b:09:b3:ca:08:1f:76:49:68:04:58:f8: a0:d9:20:0c:b6:8e:7a:c9:b2:05:de:bc:ec:ba:f8: 5c:01:d4:f7:02:22:a0:12:1b:9e:1b:fb:b6:53:cf: 83:d5:ce:c8:ae:58:17:41:ad:4c:61:39:60:a6:ed: 87:31:48:11:04:34:c7:ee:4d:bf:f6:38:ff:17:46: 52:11:83:f2:b7:3e:92:33:6d:c6:9c:55:6c:0a:c4: cc:78:ec:07:7a:01:f3:ba:cb:f0:bc:2e:1a:e8:6a: 3a:f1:42:99:54:75:52:cb:67:c6:69:08:b6:ec:f4: 19:c6:c7:dd:5f:0a:6d:73:8e:3a:20:45:41:c9:ee: cf:cf:7b:f9:af:d3:f9:f8:92:f6:85:e6:88:84:0d: 00:a6:24:ac:1c:48:29:9a:d6:18:e0:05:13:27:22: 39:ff:18:37:ad:73:a9:1e:5e:d2:60:96:c3:a7:89: 6f:20:dd:c6:52:dc:23:85:45:e4:49:03:3a:d4:7c: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:68:EA:CC:95:5E:47:CE:72:33:61:F0:F8:E9:51:C8:85:9F:9B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:dd:a2:6b:2a:44:e9:df:75:09:5a:6f:46:be:7e:09:2c:dc: 5a:c7:33:07:eb:f7:8a:3a:d7:27:1c:20:22:2b:7c:4f:f6:d7: 93:82:ff:3a:1a:57:b8:7a:65:d4:fe:06:89:80:82:99:e1:ac: b0:12:0d:9f:62:ba:74:f3:bd:e9:d1:f1:f1:57:02:da:2d:cf: 5a:79:87:5a:20:eb:b5:40:f2:7f:c3:98:a1:e8:7b:22:88:b0: 45:41:38:b1:cc:1e:c2:7b:77:a0:23:72:47:c6:bb:77:93:c9: 9e:49:0b:5c:d9:ed:b9:33:83:1d:28:fc:a3:82:4d:7c:dc:0c: e9:fa:7a:90:f8:1c:60:cf:77:0b:d1:51:cd:aa:ef:61:3b:27: 0c:79:20:c8:f6:62:40:9e:32:18:f7:11:7f:d7:3c:cb:f0:65: 51:9e:08:38:66:71:0b:54:d4:10:d6:96:32:f0:e6:94:a9:98: 15:53:8b:c5:88:24:58:c2:54:40:10:f3:b0:4f:28:23:67:8b: 00:55:ec:fb:19:cf:61:ff:64:d8:91:7f:e8:af:64:c6:74:f1: f5:a0:75:49:99:a1:cd:19:7f:f8:9d:47:1b:37:e3:9d:72:7a: 43:44:ed:c6:4f:6c:2a:cb:63:65:4f:b6:08:59:f2:23:f4:a5: 25:43:16:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9dNzV/NU5q13IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTE0MloXDTI1MDgyODE5MTE0MlowLzEtMCsGA1UEAxMk N2NkZGVhYjAtYjJmNC00MGJiLThiYWYtMzYzNmU3YmZhMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Sgo7I4Z2B8g4/KJPNKhEjm4aSpvLbg5P+n wGqHDSQUHoMTlKEn7M3K7QPeliRroZx5woTok82hUEnF5kpbCbPKCB92SWgEWPig 2SAMto56ybIF3rzsuvhcAdT3AiKgEhueG/u2U8+D1c7IrlgXQa1MYTlgpu2HMUgR BDTH7k2/9jj/F0ZSEYPytz6SM23GnFVsCsTMeOwHegHzusvwvC4a6Go68UKZVHVS y2fGaQi27PQZxsfdXwptc446IEVBye7Pz3v5r9P5+JL2heaIhA0ApiSsHEgpmtYY 4AUTJyI5/xg3rXOpHl7SYJbDp4lvIN3GUtwjhUXkSQM61HypaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5o6syVXkfOcjNh8PjpUciFn5sgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWRhOWI4ODEtNjhlMC0z ZjJhLThhMDItNWI3MDgzNWU0YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITdomsqROnfdQlab0a+fgks3FrHMwfr94o61yccICIrfE/215OC/zoa V7h6ZdT+BomAgpnhrLASDZ9iunTzvenR8fFXAtotz1p5h1og67VA8n/DmKHoeyKI sEVBOLHMHsJ7d6AjckfGu3eTyZ5JC1zZ7bkzgx0o/KOCTXzcDOn6epD4HGDPdwvR Uc2q72E7Jwx5IMj2YkCeMhj3EX/XPMvwZVGeCDhmcQtU1BDWljLw5pSpmBVTi8WI JFjCVEAQ87BPKCNniwBV7PsZz2H/ZNiRf+ivZMZ08fWgdUmZoc0Zf/idRxs3451y ekNE7cZPbCrLY2VPtghZ8iP0pSVDFs4= -----END CERTIFICATE-----Generated at Sun Jun 8 14:28:17 2025 by rpki-client