$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/ac8c860a-3f45-3972-a4d1-f2717597012d.roa File: ac8c860a-3f45-3972-a4d1-f2717597012d.roa (raw, json) Hash identifier: hk8PJT6gpnfLbZ8aGmpuSLKl8aBxIuqewNzeT5dFHH8= Subject key identifier: 3B:CA:04:01:CF:66:59:FB:CE:FB:6A:49:65:41:19:A0:79:BD:53:B9 Certificate issuer: /CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c Certificate serial: 010D0C9F4328584A2BA2903E8BE27265DB853800 Authority key identifier: 97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/ac8c860a-3f45-3972-a4d1-f2717597012d.roa Signing time: Thu 12 Jun 2025 20:48:04 +0000 ROA not before: Thu 12 Jun 2025 20:48:04 +0000 ROA not after: Wed 10 Sep 2025 20:48:04 +0000 asID: 401773 IP address blocks: 204.147.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2b:a2:90:3e:8b:e2:72:65:db:85:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c Validity Not Before: Jun 12 20:48:04 2025 GMT Not After : Sep 10 20:48:04 2025 GMT Subject: CN=5b78afdb-448b-400d-acf8-ba9d4ff7f499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:32:2a:03:3b:83:bf:61:9f:ba:ed:d3:8c: 31:5a:49:d7:80:b9:33:25:3b:b0:08:81:20:98:39: 5c:ad:42:ca:e3:46:07:6a:4c:4d:41:b8:2a:1f:7e: 91:74:3c:ab:00:dd:5d:77:0e:55:b9:2a:e7:4a:f3: 25:35:92:71:ee:72:81:f9:46:99:09:64:a2:45:33: 78:17:c3:9c:68:27:06:e0:53:74:46:95:bc:ee:74: 9f:9b:39:36:73:3f:c5:90:d9:42:ea:ea:21:69:b6: e9:43:07:fb:39:3e:d8:85:27:59:70:2f:1c:fa:0d: 78:21:f1:f4:f7:bc:83:c3:19:99:de:45:74:0c:fa: cb:30:66:9b:af:b9:0d:bb:c2:2b:21:f3:46:1d:5f: c8:4d:8a:70:da:cf:24:d7:24:31:c2:1c:53:df:33: 84:de:78:cb:06:83:1c:6a:44:4f:0b:08:c4:cd:2b: aa:43:3c:a7:de:15:88:54:95:12:54:82:28:b0:1a: 2a:01:93:d3:ec:43:60:ff:dc:03:02:b8:35:5d:0c: 93:7b:15:2f:3d:c7:be:32:b9:6a:61:09:10:b9:21: 3b:80:3f:8e:a1:7a:86:c2:be:27:b0:3d:c6:31:ad: 83:7f:be:d9:31:78:69:75:44:74:03:ba:ce:5e:5e: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CA:04:01:CF:66:59:FB:CE:FB:6A:49:65:41:19:A0:79:BD:53:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/ac8c860a-3f45-3972-a4d1-f2717597012d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.crl X509v3 Authority Key Identifier: keyid:97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer sbgp-ipAddrBlock: critical IPv4: 204.147.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:50:4c:74:a1:ee:aa:16:82:f3:55:52:76:59:54:87:df:82: fc:fc:0d:f3:aa:c8:88:0e:7d:61:23:6c:2a:2d:83:0e:6a:35: 6f:7f:c1:32:65:9b:ab:41:37:15:6b:52:ef:ba:bc:54:40:b5: 29:72:05:8c:cb:54:b8:1f:d1:4a:26:31:28:25:26:29:a2:ec: a4:a0:b0:96:5f:1e:b4:59:0a:0d:7d:71:cb:33:90:65:55:23: dc:86:4d:27:d4:02:0b:f9:6b:83:c7:d7:c8:85:ba:54:37:50: 3d:4c:50:5c:1e:05:f8:93:1c:8c:8a:d2:e5:9d:6a:f9:94:50: d5:f2:ed:69:c2:2d:b9:b6:7c:b2:7b:8c:c0:56:67:9f:fe:b5: 48:25:e2:02:cf:63:8e:97:77:5d:88:2e:d2:3c:eb:c0:0f:df: 7a:df:81:ff:c1:21:05:3d:13:ae:42:9e:a4:e8:f0:62:59:f9: 0b:ed:6e:44:f8:7c:84:82:e8:d6:0c:7f:cd:ab:5b:b2:d7:a8: 5c:e8:db:4e:d2:f4:8e:1a:33:ad:72:83:40:27:17:6a:5f:6b: e0:40:bd:fe:f8:23:5b:6a:70:d5:05:17:35:f5:ee:8e:e5:85: a4:85:f9:32:6f:fa:b6:a3:29:63:1e:0f:be:91:dd:d4:f2:c3: a8:9a:de:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoropA+i+JyZduFOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY3M2FkOGQtY2I1YS00NmE4LWE1ZjMtOGY5MDE0ZmRl NThjMB4XDTI1MDYxMjIwNDgwNFoXDTI1MDkxMDIwNDgwNFowLzEtMCsGA1UEAxMk NWI3OGFmZGItNDQ4Yi00MDBkLWFjZjgtYmE5ZDRmZjdmNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouoyKgM7g79hn7rt04wxWknXgLkzJTuwCIEg mDlcrULK40YHakxNQbgqH36RdDyrAN1ddw5VuSrnSvMlNZJx7nKB+UaZCWSiRTN4 F8OcaCcG4FN0RpW87nSfmzk2cz/FkNlC6uohabbpQwf7OT7YhSdZcC8c+g14IfH0 97yDwxmZ3kV0DPrLMGabr7kNu8IrIfNGHV/ITYpw2s8k1yQxwhxT3zOE3njLBoMc akRPCwjEzSuqQzyn3hWIVJUSVIIosBoqAZPT7ENg/9wDArg1XQyTexUvPce+Mrlq YQkQuSE7gD+OoXqGwr4nsD3GMa2Df77ZMXhpdUR0A7rOXl5/iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvKBAHPZln7zvtqSWVBGaB5vVO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZjcz YWQ4ZC1jYjVhLTQ2YTgtYTVmMy04ZjkwMTRmZGU1OGMvYWM4Yzg2MGEtM2Y0NS0z OTcyLWE0ZDEtZjI3MTc1OTcwMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGY3M2FkOGQtY2I1YS00NmE4LWE1 ZjMtOGY5MDE0ZmRlNThjLzBmNzNhZDhkLWNiNWEtNDZhOC1hNWYzLThmOTAxNGZk ZTU4Yy5jcmwwHwYDVR0jBBgwFoAUl8j8rbiFxPHglZrV3Y4bOVbLwGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZjczYWQ4ZC1jYjVhLTQ2YTgtYTVmMy04Zjkw MTRmZGU1OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtQTHSh7qoWgvNVUnZZVIffgvz8DfOqyIgOfWEjbCotgw5qNW9/wTJl m6tBNxVrUu+6vFRAtSlyBYzLVLgf0UomMSglJimi7KSgsJZfHrRZCg19ccszkGVV I9yGTSfUAgv5a4PH18iFulQ3UD1MUFweBfiTHIyK0uWdavmUUNXy7WnCLbm2fLJ7 jMBWZ5/+tUgl4gLPY46Xd12ILtI868AP33rfgf/BIQU9E65CnqTo8GJZ+QvtbkT4 fISC6NYMf82rW7LXqFzo207S9I4aM61yg0AnF2pfa+BAvf74I1tqcNUFFzX17o7l haSF+TJv+rajKWMeD76R3dTyw6ia3gw= -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:07 2025 by rpki-client