$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa File: 5d5c344a-e189-3864-9d26-6e969f78a1f1.roa (raw, json) Hash identifier: WPCaWV9hHH3GNSPawxJc5026VZodAriSc0UkPDcrCa0= Subject key identifier: BB:C4:D8:9F:04:F1:B6:66:FF:22:45:2C:9E:A9:03:41:34:71:B9:A6 Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F43285849D42FAD969D64D76AC504A910 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 18914 IP address blocks: 204.8.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ad:96:9d:64:d7:6a:c5:04:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7bdc97b9-2c42-435c-85d4-ddcacbe2df5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7f:21:39:62:32:95:fd:50:7a:7d:81:77:32: 5e:be:c1:87:46:99:12:ac:6e:40:1a:57:19:96:5a: 21:0b:48:53:bf:e4:b6:1e:3e:9b:6f:00:d6:30:1d: 6a:08:74:82:81:bb:0e:c6:72:03:b4:de:26:78:b2: de:a7:63:6e:e5:50:23:33:2b:52:8b:56:11:52:57: b8:d7:67:04:06:50:50:b6:47:01:59:1e:0b:f3:38: aa:c4:06:9c:7c:ce:83:b9:47:23:f0:e8:84:6f:81: 44:47:5c:a5:c3:56:45:d0:d9:75:bc:ad:48:26:76: 43:e4:f5:d3:f6:26:14:9a:d5:d1:be:e8:a2:20:08: 40:f2:a8:d1:7f:57:f0:30:ea:21:c9:a5:45:0f:e8: fc:d9:70:0b:b9:7d:7a:cb:a5:cc:7f:8d:37:12:21: f7:11:8a:a8:51:0f:b0:3d:f7:d3:e7:43:0f:0d:1b: 79:a7:c0:e6:e7:ea:fc:ea:f2:76:a3:c9:03:1c:a3: d1:89:db:a1:16:c6:64:42:6e:d6:50:df:9e:f0:a8: 5b:42:e9:c7:b7:0f:71:5f:6d:1f:e8:fc:27:96:7b: 52:cc:59:5d:8d:6b:9a:33:86:b1:26:3d:d1:69:24: 6d:ae:f9:82:19:8c:6e:ea:20:aa:fd:f4:cc:c0:59: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C4:D8:9F:04:F1:B6:66:FF:22:45:2C:9E:A9:03:41:34:71:B9:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 204.8.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:45:13:78:49:25:63:c7:ed:3e:05:5f:1e:9b:3d:dc:a9:1f: da:d2:1c:02:5e:1f:22:e5:48:fc:1a:5e:2b:62:a8:9a:c3:b3: 39:7b:d9:ff:9b:0c:80:aa:a9:a9:c2:9d:e9:12:c1:6c:e4:54: 2b:47:9e:e4:3d:e2:2e:40:5a:02:af:4f:bf:98:75:fa:52:96: da:c2:b7:2c:d6:9d:98:a3:ed:a7:31:53:3e:85:08:d6:18:ed: 05:2a:f5:fc:65:14:40:99:cf:59:2a:ec:42:19:64:c6:8e:53: cd:95:35:ee:e6:05:36:4b:ba:62:4f:77:50:b3:e5:eb:42:64: b9:4b:e6:bb:27:c1:56:cd:27:a2:04:6c:e5:2e:a1:08:8f:65: 88:c0:f6:b8:ab:50:b5:4a:e2:90:74:ed:02:59:8b:2a:f9:46: 51:17:6c:1e:26:c2:2e:83:15:49:38:30:8a:4a:e4:23:b5:c6: 1d:d4:a9:1d:d9:e0:65:ed:b1:b9:86:11:7a:bf:e5:a9:64:2d: a5:b8:ab:3e:6f:61:3c:c5:af:f1:72:19:bf:9c:f3:9f:c3:46: d5:f1:c6:52:45:8d:d0:da:3c:36:53:6e:cd:dc:02:dd:3f:d6: 06:6a:12:3a:72:2e:86:81:10:6a:da:d9:93:a6:fc:f5:9f:4a: 4d:cb:16:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL62WnWTXasUEqRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2JkYzk3YjktMmM0Mi00MzVjLTg1ZDQtZGRjYWNiZTJkZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n8hOWIylf1Qen2BdzJevsGHRpkSrG5AGlcZ llohC0hTv+S2Hj6bbwDWMB1qCHSCgbsOxnIDtN4meLLep2Nu5VAjMytSi1YRUle4 12cEBlBQtkcBWR4L8ziqxAacfM6DuUcj8OiEb4FER1ylw1ZF0Nl1vK1IJnZD5PXT 9iYUmtXRvuiiIAhA8qjRf1fwMOohyaVFD+j82XALuX16y6XMf403EiH3EYqoUQ+w PffT50MPDRt5p8Dm5+r86vJ2o8kDHKPRiduhFsZkQm7WUN+e8KhbQunHtw9xX20f 6PwnlntSzFldjWuaM4axJj3RaSRtrvmCGYxu6iCq/fTMwFl5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvE2J8E8bZm/yJFLJ6pA0E0cbmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNWQ1YzM0NGEtZTE4OS0z ODY0LTlkMjYtNmU5NjlmNzhhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFFE3hJJWPH7T4FXx6bPdypH9rSHAJeHyLlSPwaXitiqJrDszl72f+b DICqqanCnekSwWzkVCtHnuQ94i5AWgKvT7+YdfpSltrCtyzWnZij7acxUz6FCNYY 7QUq9fxlFECZz1kq7EIZZMaOU82VNe7mBTZLumJPd1Cz5etCZLlL5rsnwVbNJ6IE bOUuoQiPZYjA9rirULVK4pB07QJZiyr5RlEXbB4mwi6DFUk4MIpK5CO1xh3UqR3Z 4GXtsbmGEXq/5alkLaW4qz5vYTzFr/FyGb+c85/DRtXxxlJFjdDaPDZTbs3cAt0/ 1gZqEjpyLoaBEGra2ZOm/PWfSk3LFso= -----END CERTIFICATE-----Generated at Sat Jun 7 17:23:44 2025 by rpki-client