$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa File: 29077896-9620-3e68-a116-dbfb8641ca35.roa (raw, json) Hash identifier: OtWpsYF+Myf9RG2SOTogfoZ9RtNy4D9t+WEiV10rrI0= Subject key identifier: 3A:C3:49:61:D9:C4:1A:5A:86:8A:1C:F7:F8:6A:BA:57:A0:2B:D4:63 Certificate issuer: /CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e Certificate serial: 010D0C9F4328584A73427EADE821AECF744CD900 Authority key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa Signing time: Tue 08 Jul 2025 12:32:42 +0000 ROA not before: Tue 08 Jul 2025 12:32:42 +0000 ROA not after: Mon 06 Oct 2025 12:32:42 +0000 asID: 12129 IP address blocks: 204.106.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:42:7e:ad:e8:21:ae:cf:74:4c:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e Validity Not Before: Jul 8 12:32:42 2025 GMT Not After : Oct 6 12:32:42 2025 GMT Subject: CN=a42029bc-f097-43e0-91dc-3fbd2dacd69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:2b:0b:6d:d6:3a:ad:42:9f:2a:e2:9f:40: 32:2f:b6:ee:0c:54:8f:f1:8a:1f:0e:a1:1f:ef:3d: 74:f3:41:10:49:03:00:20:a3:62:68:ea:2d:98:2f: ce:aa:36:4a:53:89:27:22:af:49:a6:12:0b:0f:9a: bc:25:ad:f2:f1:ac:ee:7d:4a:11:85:f8:b6:15:4b: a4:07:0b:33:55:3c:96:85:41:1b:b6:06:f6:dc:5b: 6c:57:7d:19:76:98:4c:72:5e:61:31:c8:ae:9a:58: dd:d0:56:70:ac:10:f5:0c:7b:62:5d:ac:d5:00:31: 8e:af:e0:3c:30:4e:d9:d3:ff:f1:71:76:25:f3:ea: fa:d3:fa:3f:e0:68:d0:5d:b4:b7:46:e6:39:d8:40: b0:47:c9:9c:c5:40:4a:92:8c:07:df:c6:1c:4f:02: 68:39:5b:ea:ca:53:c9:c4:91:cc:a5:cd:27:b4:da: 45:4a:d0:cf:70:ae:ff:29:f2:f4:89:fa:97:89:1f: bc:e9:98:66:33:6d:25:86:e5:c1:7e:98:02:b9:cc: 54:ab:0e:8e:4e:52:52:8f:9e:f2:e6:d1:9d:39:aa: 43:2c:4d:be:fe:cf:b6:89:84:dd:9c:f7:57:2a:ad: 2e:51:90:41:60:f4:17:a9:57:8f:ae:f8:18:56:0a: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C3:49:61:D9:C4:1A:5A:86:8A:1C:F7:F8:6A:BA:57:A0:2B:D4:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl X509v3 Authority Key Identifier: keyid:37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer sbgp-ipAddrBlock: critical IPv4: 204.106.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f2:82:77:1c:3b:10:8c:03:99:3a:c3:4b:0e:a3:fb:a3:e3: 25:d7:82:34:35:39:1f:cf:b4:8a:ee:c0:dd:af:9c:1f:e0:c5: ef:6a:86:c4:25:88:53:28:3c:c8:ed:6a:4a:3c:fa:25:42:96: bf:c8:b0:81:7b:b0:68:7e:f4:a7:3c:47:67:5c:32:f3:fe:78: fe:bb:fc:1a:ea:1c:e2:32:4f:62:10:ae:92:57:9b:c8:1a:00: 65:e8:2e:00:9c:52:53:5b:b5:e4:6e:3b:01:5c:dd:50:c3:6e: d2:82:19:8b:1d:7f:a9:07:df:bd:1c:25:a8:51:fa:cb:e8:86: fe:1d:9f:4c:17:39:1e:f2:1c:e9:3d:2a:ef:c9:0b:a1:96:c5: f5:44:80:af:56:ce:95:22:9a:8f:93:50:35:d7:52:52:6b:2b: c9:e0:df:b5:51:10:e1:e9:a5:03:71:2e:e0:d5:f8:ca:4c:95: ee:1f:0b:fa:52:80:64:13:22:11:7b:f6:86:52:af:fc:67:7e: 35:ad:96:d0:10:d0:63:26:ec:29:9e:db:71:79:fd:66:b4:a3: 54:1c:45:30:28:09:ed:2f:e6:7e:1a:39:08:91:a8:1a:7e:67: 2b:f1:47:5b:88:9b:3e:c3:9d:ea:42:6d:6f:dc:bc:73:51:b3: f0:a0:72:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzQn6t6CGuz3RM2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmNmFjNzktYmVlZS00ZWJhLWE2OWEtYTNmMjhmNjI1 ZjRlMB4XDTI1MDcwODEyMzI0MloXDTI1MTAwNjEyMzI0MlowLzEtMCsGA1UEAxMk YTQyMDI5YmMtZjA5Ny00M2UwLTkxZGMtM2ZiZDJkYWNkNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGArC23WOq1Cnyrin0AyL7buDFSP8YofDqEf 7z1080EQSQMAIKNiaOotmC/OqjZKU4knIq9JphILD5q8Ja3y8azufUoRhfi2FUuk BwszVTyWhUEbtgb23FtsV30ZdphMcl5hMciumljd0FZwrBD1DHtiXazVADGOr+A8 ME7Z0//xcXYl8+r60/o/4GjQXbS3RuY52ECwR8mcxUBKkowH38YcTwJoOVvqylPJ xJHMpc0ntNpFStDPcK7/KfL0ifqXiR+86ZhmM20lhuXBfpgCucxUqw6OTlJSj57y 5tGdOapDLE2+/s+2iYTdnPdXKq0uUZBBYPQXqVePrvgYVgotuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrDSWHZxBpahooc9/hqulegK9RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mOGY2 YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2YyOGY2MjVmNGUvMjkwNzc4OTYtOTYyMC0z ZTY4LWExMTYtZGJmYjg2NDFjYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjhmNmFjNzktYmVlZS00ZWJhLWE2 OWEtYTNmMjhmNjI1ZjRlL2Y4ZjZhYzc5LWJlZWUtNGViYS1hNjlhLWEzZjI4ZjYy NWY0ZS5jcmwwHwYDVR0jBBgwFoAUN7PodYQ6rlXM8/Un7kfdCrEPA4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mOGY2YWM3OS1iZWVlLTRlYmEtYTY5YS1hM2Yy OGY2MjVmNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGoRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvygnccOxCMA5k6w0sOo/uj4yXXgjQ1OR/PtIruwN2vnB/gxe9qhsQl iFMoPMjtako8+iVClr/IsIF7sGh+9Kc8R2dcMvP+eP67/BrqHOIyT2IQrpJXm8ga AGXoLgCcUlNbteRuOwFc3VDDbtKCGYsdf6kH370cJahR+svohv4dn0wXOR7yHOk9 Ku/JC6GWxfVEgK9WzpUimo+TUDXXUlJrK8ng37VREOHppQNxLuDV+MpMle4fC/pS gGQTIhF79oZSr/xnfjWtltAQ0GMm7Cme23F5/Wa0o1QcRTAoCe0v5n4aOQiRqBp+ ZyvxR1uImz7DnepCbW/cvHNRs/Cgcsc= -----END CERTIFICATE-----Generated at Fri Jul 11 04:35:41 2025 by rpki-client