$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa File: b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa (raw, json) Hash identifier: hOIYMWRkSRjRAq18G/0kIuFVw6e2Qv4gDK6nK9Ai6XU= Subject key identifier: BE:0B:97:5F:D2:B3:24:1F:C0:D2:D1:04:16:E5:2E:AC:F4:D6:3C:F2 Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584A51D06EB997BEB0D92D7AF280 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 32723 IP address blocks: 204.11.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6e:b9:97:be:b0:d9:2d:7a:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=42399719-a559-44cb-878d-3d2b6041bcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:38:da:ba:9a:a3:81:72:e8:c1:f1:64:d1: e3:10:9e:e7:eb:d2:59:a9:86:f8:5c:1d:46:85:93: 35:75:a7:ba:d5:39:b2:84:69:bd:63:df:68:a1:8f: 3f:31:b2:83:3f:7a:77:98:2e:b0:f1:e0:78:c4:4f: 2a:90:29:9d:8f:a5:f1:1b:0f:3a:96:34:c8:f4:4b: 9f:9d:e4:26:33:7b:83:b4:9a:6a:a5:6d:7d:9c:a5: d5:77:b9:b4:d0:cd:49:9e:ec:a0:3f:0c:0c:7e:5e: ad:3c:a3:2a:c3:9d:f4:04:d2:a3:42:16:4a:ac:9d: e6:7f:db:f1:04:64:a9:ac:1e:8b:f3:b5:b7:a8:f2: b1:5f:1e:d5:07:b6:c3:74:00:a8:12:ba:4c:3f:92: 61:4e:45:66:78:d2:9e:26:b7:d8:d5:f6:ed:82:7c: 60:76:c2:8e:32:c2:ea:bc:08:15:dc:1d:06:34:0e: bb:af:bc:33:d2:c7:99:3d:d5:a0:e1:54:59:b0:5e: 83:ad:bc:cc:7c:94:a3:42:ec:d1:05:d3:93:fa:d5: 88:cf:1d:b3:4c:cc:9e:89:5b:8d:6b:99:23:cf:4a: 90:b3:29:2e:0f:8d:a8:dd:45:35:b4:8b:0a:69:1d: 42:f7:9f:76:dc:da:ce:c4:de:c7:d4:24:b6:af:ba: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0B:97:5F:D2:B3:24:1F:C0:D2:D1:04:16:E5:2E:AC:F4:D6:3C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv4: 204.11.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ad:f8:ff:56:5a:1a:86:ce:ab:16:7c:13:0a:6d:a5:85:5a: 26:ed:e4:23:bf:db:e1:b6:11:40:c8:53:d5:eb:54:fc:bc:3b: 9b:ce:08:bd:cd:37:b3:37:e3:7b:f4:b4:05:c3:ba:cd:a7:30: e1:df:1a:90:16:44:3c:c6:09:77:d7:59:32:c7:2c:b2:9a:e5: 2e:45:e5:6a:1a:54:7a:7c:08:49:f7:9f:cf:73:83:fd:6d:0f: d5:22:fd:30:20:88:6a:ad:c4:a9:19:08:ba:3e:89:aa:30:9c: dd:bf:8f:9f:22:b9:fc:d1:92:b7:92:a6:97:75:cc:16:68:9c: 2f:8b:2e:85:2e:f7:19:e6:33:69:aa:27:4f:67:d6:57:6e:74: 4f:2f:c6:c5:9a:0c:21:ff:91:2d:9f:8a:a5:82:41:0d:bb:32: 25:b3:0a:d2:b3:32:16:4c:1b:19:d3:35:8f:b5:6e:dc:04:f1: 6d:d7:0a:d7:c8:ea:fa:cf:88:96:8f:94:09:a9:46:c5:0f:3c: 01:c5:79:e5:3f:a5:b0:e7:cc:75:ed:53:d9:bc:f0:b2:80:51: ec:c5:6b:0c:04:ba:fc:ed:49:65:e5:02:33:4f:20:ac:fe:aa: 11:fb:a1:a3:19:6b:a3:3c:85:05:cb:50:1d:7a:79:cc:ae:de: 74:0c:ee:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0G65l76w2S168oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NDIzOTk3MTktYTU1OS00NGNiLTg3OGQtM2QyYjYwNDFiY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogc42rqao4Fy6MHxZNHjEJ7n69JZqYb4XB1G hZM1dae61TmyhGm9Y99ooY8/MbKDP3p3mC6w8eB4xE8qkCmdj6XxGw86ljTI9Euf neQmM3uDtJpqpW19nKXVd7m00M1JnuygPwwMfl6tPKMqw530BNKjQhZKrJ3mf9vx BGSprB6L87W3qPKxXx7VB7bDdACoErpMP5JhTkVmeNKeJrfY1fbtgnxgdsKOMsLq vAgV3B0GNA67r7wz0seZPdWg4VRZsF6DrbzMfJSjQuzRBdOT+tWIzx2zTMyeiVuN a5kjz0qQsykuD42o3UU1tIsKaR1C95923NrOxN7H1CS2r7pwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4Ll1/SsyQfwNLRBBblLqz01jzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvYjhkMTQ5OWItNWE5NC0z NTNjLTk4NDAtM2VmOGI5ZjY5MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOt+P9WWhqGzqsWfBMKbaWFWibt5CO/2+G2EUDIU9XrVPy8O5vOCL3N N7M343v0tAXDus2nMOHfGpAWRDzGCXfXWTLHLLKa5S5F5WoaVHp8CEn3n89zg/1t D9Ui/TAgiGqtxKkZCLo+iaownN2/j58iufzRkreSppd1zBZonC+LLoUu9xnmM2mq J09n1ldudE8vxsWaDCH/kS2fiqWCQQ27MiWzCtKzMhZMGxnTNY+1btwE8W3XCtfI 6vrPiJaPlAmpRsUPPAHFeeU/pbDnzHXtU9m88LKAUezFawwEuvztSWXlAjNPIKz+ qhH7oaMZa6M8hQXLUB16ecyu3nQM7t8= -----END CERTIFICATE-----Generated at Tue Jul 1 15:28:14 2025 by rpki-client