$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa File: 02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa (raw, json) Hash identifier: 3MJKOD06XCCLB3mIy6cNMnTnvgxYlz3SLBzDxowMFM8= Subject key identifier: 96:97:6F:D5:68:95:35:24:C0:AC:BC:57:BE:F4:11:35:A7:80:F7:47 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F715193A57C8D23CE4C1ECE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 3949 IP address blocks: 204.2.23.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:19:3a:57:c8:d2:3c:e4:c1:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=eb85f090-5ff9-455d-93e7-34ece401a2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:59:9f:a3:78:02:5c:0c:82:5e:16:c3:c5: e8:6b:d0:f5:d8:ef:00:39:2a:f1:d5:3d:c9:69:9a: c5:9b:9f:71:5a:ad:64:4c:fd:8f:db:62:d2:49:00: 90:11:1a:c5:ec:ee:bc:34:f2:c8:13:3b:d1:57:68: ab:ac:54:1e:00:a1:66:a7:0e:27:27:b6:b9:99:43: 0d:d7:89:7b:6b:0a:76:5f:a5:d2:77:0f:0e:b3:b6: f3:bf:ea:89:9e:9f:d5:ba:7f:2f:86:6a:4f:c9:8f: 9f:c3:18:b7:9e:d6:dd:36:56:9d:a9:f2:d0:33:28: cd:ab:c8:96:f3:1f:4d:e6:a4:73:43:9e:42:02:8f: dd:e0:55:a8:11:9d:b3:19:57:7a:3f:a6:63:8e:c8: a9:7d:99:08:32:bd:05:f4:b7:df:fb:7a:71:ab:85: e1:cd:05:0f:88:d2:d7:ac:f6:45:01:60:a1:9e:de: f6:f5:54:95:3b:ae:26:95:28:68:da:85:81:8a:81: 49:bb:dd:af:44:58:e4:70:ba:6b:6d:6a:ab:c6:43: 17:43:0d:41:5c:49:9b:11:03:89:99:8f:65:e0:53: 5f:dc:85:fb:0f:35:8c:90:16:24:92:f2:17:d2:06: 46:99:45:7b:df:c1:31:f9:a0:51:a3:01:40:5b:62: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:97:6F:D5:68:95:35:24:C0:AC:BC:57:BE:F4:11:35:A7:80:F7:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.23.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:03:5b:b8:0a:de:c7:cb:93:91:0e:d9:29:85:0c:34:ff:03: 6a:16:d2:9a:b2:94:41:f6:c1:76:de:c9:0b:80:b6:59:60:f4: 3c:b6:b5:fc:c8:e5:0e:11:f3:12:8f:a0:95:e3:18:55:5b:0b: e5:ed:86:54:49:0f:50:7c:91:c3:8c:80:86:58:02:fe:3e:af: 58:c7:28:1b:64:83:7b:29:84:a5:bf:55:a6:8f:00:8f:9d:49: a2:fa:b6:88:86:68:3d:a5:c8:19:f7:5f:89:e6:42:a1:32:23: 73:91:a9:f8:78:a2:b9:7d:6a:1c:88:be:70:76:6d:10:f3:c5: 52:0d:7c:da:68:b6:08:cb:28:ac:d2:76:d7:85:ab:3a:5d:d8: e2:ff:80:81:09:cc:49:e1:57:1f:2a:32:28:29:cc:3d:d8:79: 82:17:22:5d:00:6b:80:42:a1:e6:5c:ab:4e:d0:d4:90:c4:8b: 87:79:2c:46:18:74:57:bb:d6:48:c1:15:9a:ff:e7:32:ae:a6: 72:3a:a5:ea:0b:cf:f8:b3:c9:d3:58:d7:11:37:a0:41:f5:0e: 67:4b:72:1a:c2:72:c2:63:dd:90:b1:43:b5:eb:68:55:1d:63: d7:3c:e5:31:7b:06:9d:3c:71:6f:3b:eb:7c:f5:4d:20:f1:b8: 76:73:b4:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn3FRk6V8jSPOTB7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWI4NWYwOTAtNWZmOS00NTVkLTkzZTctMzRlY2U0MDFhMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZBZn6N4AlwMgl4Ww8Xoa9D12O8AOSrx1T3J aZrFm59xWq1kTP2P22LSSQCQERrF7O68NPLIEzvRV2irrFQeAKFmpw4nJ7a5mUMN 14l7awp2X6XSdw8Os7bzv+qJnp/Vun8vhmpPyY+fwxi3ntbdNladqfLQMyjNq8iW 8x9N5qRzQ55CAo/d4FWoEZ2zGVd6P6ZjjsipfZkIMr0F9Lff+3pxq4XhzQUPiNLX rPZFAWChnt729VSVO64mlSho2oWBioFJu92vRFjkcLprbWqrxkMXQw1BXEmbEQOJ mY9l4FNf3IX7DzWMkBYkkvIX0gZGmUV738Ex+aBRowFAW2JQIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJaXb9VolTUkwKy8V770ETWngPdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDJkODNjZTQtNGVmYy0z MTU1LWJiOGYtYTAxNzQ2YWQ5YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAIX0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZA1u4Ct7Hy5ORDtkphQw0/wNqFtKaspRB9sF23skLgLZZYPQ8trX8 yOUOEfMSj6CV4xhVWwvl7YZUSQ9QfJHDjICGWAL+Pq9YxygbZIN7KYSlv1WmjwCP nUmi+raIhmg9pcgZ91+J5kKhMiNzkan4eKK5fWociL5wdm0Q88VSDXzaaLYIyyis 0nbXhas6Xdji/4CBCcxJ4VcfKjIoKcw92HmCFyJdAGuAQqHmXKtO0NSQxIuHeSxG GHRXu9ZIwRWa/+cyrqZyOqXqC8/4s8nTWNcRN6BB9Q5nS3IawnLCY92QsUO162hV HWPXPOUxewadPHFvO+t89U0g8bh2c7RV -----END CERTIFICATE-----Generated at Sun Jun 15 11:27:49 2025 by rpki-client