$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ef72f3dd-4d0c-3459-a054-577ef0c2b3b8.roa File: ef72f3dd-4d0c-3459-a054-577ef0c2b3b8.roa (raw, json) Hash identifier: J19FlGEXCVIJBbL4nQa6dKrevGLw6HL3L9NbkoX7KPc= Subject key identifier: BC:DA:12:DD:66:13:B9:01:36:EB:E3:28:DE:75:EA:23:4B:BF:22:A9 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584A2ABAD2147DBC9FE1BDBDCA00 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ef72f3dd-4d0c-3459-a054-577ef0c2b3b8.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 204.77.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d2:14:7d:bc:9f:e1:bd:bd:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=15b3050c-4cb1-422c-a64d-2d76f7715727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:aa:8e:ba:d0:74:b8:43:89:d6:cb:16:fa: 9d:e3:28:76:df:80:7c:e6:54:f4:4d:27:ce:69:60: 4b:f5:ba:6e:e4:bd:e0:2b:70:05:30:16:b4:a6:c0: 27:bb:e0:97:53:32:0b:53:41:63:85:dc:95:40:d0: 6b:94:b8:b0:23:a4:cf:6b:07:f1:1f:79:87:c4:71: 47:60:73:66:05:cd:d4:da:de:dd:1e:15:87:80:57: 92:49:98:35:92:97:9a:08:cd:cb:78:7f:2e:6f:98: d5:46:c8:8a:71:8c:43:80:32:40:4d:d8:b9:41:a1: 76:01:87:03:d5:c0:2f:95:60:b1:51:fb:0b:04:f2: 61:f2:88:a3:4c:2d:5d:31:c4:a3:81:00:73:41:7d: bf:5c:10:a2:1f:2c:b3:05:70:46:7a:94:5a:fa:99: 44:88:7a:ca:f3:6d:8a:5a:d5:67:b5:1e:b1:53:ba: 8a:bc:2e:77:34:1c:6d:bf:04:bd:40:7f:92:15:5d: 3e:e1:1b:6f:06:b2:e4:36:75:f2:5d:a3:36:9b:32: 91:94:54:25:d1:80:12:52:b4:c2:71:77:51:01:88: 1a:6e:82:5b:93:67:ea:0e:c7:d8:b0:c6:9e:05:2f: c1:cb:f1:e8:e8:ff:1d:1c:3f:e8:62:8a:a0:69:67: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:12:DD:66:13:B9:01:36:EB:E3:28:DE:75:EA:23:4B:BF:22:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ef72f3dd-4d0c-3459-a054-577ef0c2b3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6a:8c:3f:cc:a6:af:24:f8:14:b4:de:d1:32:84:e1:36:dc: 06:53:98:72:fe:ee:5d:51:75:72:9a:2a:64:0a:78:22:7d:6a: 2b:04:77:a3:4d:71:45:53:2e:fb:52:e3:7d:38:3c:0d:9c:46: 1b:ea:36:12:f8:66:f3:54:44:30:83:1a:04:2a:40:a0:55:03: 39:5c:9f:e2:e7:c0:09:de:fd:91:0a:27:00:a9:2d:49:8b:3b: ea:56:5f:c3:b3:14:f0:b2:71:7a:cc:a5:9f:2b:15:cb:ce:2d: 02:80:58:72:24:0d:2a:d6:74:1f:8a:41:d8:8c:de:45:5b:4e: d5:23:26:13:5a:38:b1:21:da:d9:28:b1:df:df:38:07:fb:47: e6:f0:43:5d:29:bf:ea:d4:60:71:d4:7c:20:b9:26:a2:5d:bd: f1:07:5e:01:12:64:97:63:1d:9e:f2:f5:56:0f:27:98:cc:05: e4:23:0b:f4:d6:9b:07:28:19:bf:e7:82:1d:14:d1:2a:01:c0: cf:da:37:ca:dd:5a:e3:91:16:44:a9:15:c1:ac:ef:5c:b4:9f: c6:06:ed:77:5f:a3:95:73:f6:26:0f:6a:1e:31:a0:55:67:43: 55:27:e7:b8:a5:63:5d:dc:e4:1d:73:ea:69:75:40:96:cc:c3: 45:df:cd:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutIUfbyf4b29ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MTViMzA1MGMtNGNiMS00MjJjLWE2NGQtMmQ3NmY3NzE1NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlWqjrrQdLhDidbLFvqd4yh234B85lT0TSfO aWBL9bpu5L3gK3AFMBa0psAnu+CXUzILU0FjhdyVQNBrlLiwI6TPawfxH3mHxHFH YHNmBc3U2t7dHhWHgFeSSZg1kpeaCM3LeH8ub5jVRsiKcYxDgDJATdi5QaF2AYcD 1cAvlWCxUfsLBPJh8oijTC1dMcSjgQBzQX2/XBCiHyyzBXBGepRa+plEiHrK822K WtVntR6xU7qKvC53NBxtvwS9QH+SFV0+4RtvBrLkNnXyXaM2mzKRlFQl0YASUrTC cXdRAYgaboJbk2fqDsfYsMaeBS/By/Ho6P8dHD/oYoqgaWfrGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzaEt1mE7kBNuvjKN516iNLvyKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvZWY3MmYzZGQtNGQwYy0z NDU5LWEwNTQtNTc3ZWYwYzJiM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxqjD/Mpq8k+BS03tEyhOE23AZTmHL+7l1RdXKaKmQKeCJ9aisEd6NN cUVTLvtS4304PA2cRhvqNhL4ZvNURDCDGgQqQKBVAzlcn+LnwAne/ZEKJwCpLUmL O+pWX8OzFPCycXrMpZ8rFcvOLQKAWHIkDSrWdB+KQdiM3kVbTtUjJhNaOLEh2tko sd/fOAf7R+bwQ10pv+rUYHHUfCC5JqJdvfEHXgESZJdjHZ7y9VYPJ5jMBeQjC/TW mwcoGb/ngh0U0SoBwM/aN8rdWuORFkSpFcGs71y0n8YG7Xdfo5Vz9iYPah4xoFVn Q1Un57ilY13c5B1z6ml1QJbMw0XfzQ4= -----END CERTIFICATE-----Generated at Sun Jun 15 08:59:10 2025 by rpki-client