$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa File: f285d95a-b783-3400-8db8-8b30c968f7c0.roa (raw, json) Hash identifier: 43wFVcLVHMPHKuWj7x5GxAnuc1pze2D38yOU+8KMzMA= Subject key identifier: 29:59:5F:DE:28:C7:9A:9A:72:AD:A7:FD:88:30:4D:D3:90:D7:EE:E1 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F43285849D16501BD3B6CD079CFFEED40 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 174 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:01:bd:3b:6c:d0:79:cf:fe:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=28cb7c59-0af7-4d02-a83c-cdab1bbc8189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:5d:18:ba:41:ff:7e:10:f3:70:70:5e:31: 8b:a0:81:0c:75:58:f4:bb:59:07:72:37:bc:ec:3d: 21:d7:45:cf:d7:9e:4c:39:d1:7e:ef:a6:c9:35:b6: 33:a5:5d:45:7a:20:2f:e8:63:62:9d:07:68:b8:68: 5f:71:df:c4:da:aa:1f:1d:6a:aa:e7:7d:12:ee:7d: b0:1a:82:71:a0:75:7e:f3:fa:76:7c:0a:d4:1e:5f: 19:63:4d:72:2b:f7:7b:bf:b1:b2:35:ca:89:ee:c1: 69:df:0c:aa:65:24:56:60:e1:28:47:c8:6c:6c:af: 25:ec:02:37:d0:78:27:50:93:16:53:5c:2a:b8:83: c0:5a:b7:e2:2b:8e:e7:be:a4:76:8c:8d:78:85:77: ac:62:0e:91:08:ee:62:c8:be:aa:f6:5d:da:35:b6: 9d:75:54:a1:ad:77:28:e2:f3:48:30:fc:f0:51:66: a1:6b:c3:50:9a:78:7d:28:5a:bf:68:ad:c7:ec:fc: 63:73:66:a8:78:de:dd:d3:be:b8:bc:16:76:36:7b: 2f:ef:e7:0a:d9:59:8d:b1:5f:9d:c5:01:03:9a:b2: 09:b7:35:db:2f:b8:45:09:0f:32:b1:2a:f5:ec:b1: c0:f5:d8:97:b7:eb:42:34:ed:80:87:d5:fd:90:0e: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:5F:DE:28:C7:9A:9A:72:AD:A7:FD:88:30:4D:D3:90:D7:EE:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7b:ec:2f:d6:b9:04:6b:95:58:6d:68:7c:0b:08:38:db:eb: c1:ff:b2:15:b3:b8:52:01:12:8f:ec:41:2d:0e:27:cc:88:fb: 23:5a:05:0e:c3:12:84:a6:4a:54:51:97:3c:1e:3b:39:f9:1d: a2:c8:8d:da:27:8b:7f:ef:82:bd:08:5c:48:50:c7:06:49:d4: 3c:f6:90:48:1e:93:f1:8c:73:f5:c9:10:70:42:e5:4f:af:3e: d9:eb:4e:76:e3:c6:ca:c3:e6:60:ed:0f:d3:32:18:e6:5e:ca: 4e:44:45:43:0d:78:fd:d5:7a:1c:32:ee:72:f1:35:b6:12:58: 09:bb:e5:86:be:c4:fb:2c:22:3c:e7:1c:3e:97:74:83:2c:48: 9d:61:60:88:f1:6f:17:1a:ee:99:b5:7b:f9:b0:6c:69:da:18: 48:bb:c0:3b:71:ad:53:ae:b8:f4:fc:dc:2b:43:75:5e:02:d7: 87:28:37:4d:40:ef:84:ed:c5:03:62:b6:1f:e0:4a:12:28:41: d7:de:3d:4f:58:60:2a:c1:ac:75:97:27:da:d8:2f:d4:58:2b: 7f:fd:3f:e5:cd:47:4f:31:d9:01:8e:20:6b:d7:47:d0:75:da: 60:4c:f8:a8:25:2e:c5:34:dd:75:d1:5e:1c:13:5e:a0:91:79: 98:e6:5c:80 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEnRZQG9O2zQec/+7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjhjYjdjNTktMGFmNy00ZDAyLWE4M2MtY2RhYjFiYmM4MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBldGLpB/34Q83BwXjGLoIEMdVj0u1kHcje8 7D0h10XP155MOdF+76bJNbYzpV1FeiAv6GNinQdouGhfcd/E2qofHWqq530S7n2w GoJxoHV+8/p2fArUHl8ZY01yK/d7v7GyNcqJ7sFp3wyqZSRWYOEoR8hsbK8l7AI3 0HgnUJMWU1wquIPAWrfiK47nvqR2jI14hXesYg6RCO5iyL6q9l3aNbaddVShrXco 4vNIMPzwUWaha8NQmnh9KFq/aK3H7Pxjc2aoeN7d0764vBZ2Nnsv7+cK2VmNsV+d xQEDmrIJtzXbL7hFCQ8ysSr17LHA9diXt+tCNO2Ah9X9kA4aqQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFClZX94ox5qacq2n/YgwTdOQ1+7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvZjI4NWQ5NWEtYjc4My0z NDAwLThkYjgtOGIzMGM5NjhmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABl77C/WuQRrlVhtaHwLCDjb68H/ shWzuFIBEo/sQS0OJ8yI+yNaBQ7DEoSmSlRRlzweOzn5HaLIjdoni3/vgr0IXEhQ xwZJ1Dz2kEgek/GMc/XJEHBC5U+vPtnrTnbjxsrD5mDtD9MyGOZeyk5ERUMNeP3V ehwy7nLxNbYSWAm75Ya+xPssIjznHD6XdIMsSJ1hYIjxbxca7pm1e/mwbGnaGEi7 wDtxrVOuuPT83CtDdV4C14coN01A74TtxQNith/gShIoQdfePU9YYCrBrHWXJ9rY L9RYK3/9P+XNR08x2QGOIGvXR9B12mBM+KglLsU03XXRXhwTXqCReZjmXIA= -----END CERTIFICATE-----Generated at Sat Jun 7 03:18:36 2025 by rpki-client