$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa File: 1208c61d-795d-39aa-83bd-93a914e71179.roa (raw, json) Hash identifier: fKCHf8MCorT/JEy7QVjU+6xaqvKj7aUQRx33ntJ92FU= Subject key identifier: A1:10:8C:95:61:24:29:E2:62:AB:B2:A6:08:13:10:28:1C:0C:D2:C6 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584A2ABAD9E3C0B5DE5015E6E000 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d9:e3:c0:b5:de:50:15:e6:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=5fadae10-a9bc-46e7-9aa8-94e705987516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:98:d3:11:0e:ad:db:3c:95:80:bd:41:69: 2f:65:bd:0b:29:f7:ac:c6:64:50:67:57:f1:e5:66: 1f:f4:85:5a:47:b8:0b:8d:59:ee:25:fb:4a:f2:78: 05:0c:5b:0a:01:f3:60:94:73:59:ab:38:16:f5:42: 63:7d:55:ba:89:03:58:79:43:0b:bd:80:c8:bb:07: b5:03:25:3a:8f:99:ed:ff:16:c1:02:85:cf:6d:3c: ef:ef:f1:9d:08:88:87:a6:d3:17:b3:0c:f3:29:c6: a8:40:fb:ed:57:d3:79:67:45:e2:78:5e:cc:24:65: 7a:f0:8e:09:51:c6:b4:40:80:2e:c6:81:ad:26:3b: e4:22:f3:6f:2e:45:84:89:2b:90:ce:c1:df:b7:2a: 13:63:60:88:43:32:d1:b2:7f:4d:bf:23:c5:6b:e0: 02:1e:de:6e:f1:7b:dc:94:2e:1f:ca:e0:13:bf:4e: 2d:94:76:1c:37:6b:d3:6f:af:ab:4d:59:cf:b6:80: 09:f1:f9:d9:c6:4c:bd:b0:a4:8a:bd:ee:17:67:6f: 00:82:d1:5e:e5:17:b7:f0:6b:76:f8:7a:8c:56:a6: 11:12:21:24:bb:b4:ee:ec:98:c6:5c:f8:12:a3:98: 55:63:00:fd:b1:26:47:e8:99:dc:63:d4:5a:2d:5e: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:8C:95:61:24:29:E2:62:AB:B2:A6:08:13:10:28:1C:0C:D2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7e:7c:ea:9c:64:cd:67:2a:b0:c3:cb:bd:47:5c:05:16:dc: a8:9c:9c:63:c6:23:9e:6f:50:87:71:18:f6:d3:8b:73:aa:6e: c5:63:6f:de:39:94:40:9c:7d:68:c7:9a:fe:f4:12:a5:1c:8c: 53:c2:f9:54:69:2d:b5:c4:c9:0d:a6:8a:d8:9a:d6:04:75:9e: a1:4e:6e:c9:b5:b0:cc:19:4d:8d:28:60:93:84:de:e0:63:ca: 6b:d3:c4:42:13:fc:2f:33:14:75:84:fd:12:95:cb:c0:21:a1: 35:ab:ca:3e:20:de:ce:e9:05:37:cf:ce:cc:fb:b8:11:ac:29: 57:26:47:91:04:6c:92:33:3f:6b:c9:6f:7e:bb:fa:17:c6:27: 7e:22:ad:dc:87:d3:63:a6:67:24:27:ef:73:ff:27:cc:1b:94: d7:53:70:10:48:b8:53:44:95:2b:cb:5c:d2:89:0e:ad:51:a5: 10:c9:43:e5:30:48:e8:af:72:08:ee:b8:e8:78:df:a0:17:75: 82:c3:d3:e2:9c:d2:55:43:40:a2:06:df:8d:1f:fb:05:64:eb: 9b:a9:1b:ff:78:a1:29:96:03:bb:d7:55:1a:bb:52:86:ba:4f: 09:d2:cb:b3:99:09:3b:86:aa:e6:aa:c2:9f:39:48:2a:d9:d3: 36:c0:94:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutnjwLXeUBXm4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NWZhZGFlMTAtYTliYy00NmU3LTlhYTgtOTRlNzA1OTg3NTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU2Y0xEOrds8lYC9QWkvZb0LKfesxmRQZ1fx 5WYf9IVaR7gLjVnuJftK8ngFDFsKAfNglHNZqzgW9UJjfVW6iQNYeUMLvYDIuwe1 AyU6j5nt/xbBAoXPbTzv7/GdCIiHptMXswzzKcaoQPvtV9N5Z0XieF7MJGV68I4J Uca0QIAuxoGtJjvkIvNvLkWEiSuQzsHftyoTY2CIQzLRsn9NvyPFa+ACHt5u8Xvc lC4fyuATv04tlHYcN2vTb6+rTVnPtoAJ8fnZxky9sKSKve4XZ28AgtFe5Re38Gt2 +HqMVqYREiEku7Tu7JjGXPgSo5hVYwD9sSZH6JncY9RaLV4JmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEQjJVhJCniYquypggTECgcDNLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvMTIwOGM2MWQtNzk1ZC0z OWFhLTgzYmQtOTNhOTE0ZTcxMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN+fOqcZM1nKrDDy71HXAUW3KicnGPGI55vUIdxGPbTi3OqbsVjb945 lECcfWjHmv70EqUcjFPC+VRpLbXEyQ2mitia1gR1nqFObsm1sMwZTY0oYJOE3uBj ymvTxEIT/C8zFHWE/RKVy8AhoTWryj4g3s7pBTfPzsz7uBGsKVcmR5EEbJIzP2vJ b367+hfGJ34irdyH02OmZyQn73P/J8wblNdTcBBIuFNElSvLXNKJDq1RpRDJQ+Uw SOivcgjuuOh436AXdYLD0+Kc0lVDQKIG340f+wVk65upG/94oSmWA7vXVRq7Uoa6 TwnSy7OZCTuGquaqwp85SCrZ0zbAlJ4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:51:45 2025 by rpki-client