$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17929bc7-9ff3-3d9b-bf8c-7012de5af388.roa File: 17929bc7-9ff3-3d9b-bf8c-7012de5af388.roa (raw, json) Hash identifier: nz3PNgk2bskTvK/0Hq8Cm21ZQGorZvTG99+ggl462LM= Subject key identifier: 49:9B:36:15:49:4D:C5:B3:69:9F:8F:FD:4E:9A:8B:C8:0F:1F:E8:E8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A25AF5CC89062B945E67C8300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17929bc7-9ff3-3d9b-bf8c-7012de5af388.roa Signing time: Tue 10 Jun 2025 17:39:00 +0000 ROA not before: Tue 10 Jun 2025 17:39:00 +0000 ROA not after: Mon 08 Sep 2025 17:39:00 +0000 asID: 3939 IP address blocks: 204.2.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:af:5c:c8:90:62:b9:45:e6:7c:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 10 17:39:00 2025 GMT Not After : Sep 8 17:39:00 2025 GMT Subject: CN=74c8e600-02fb-42ce-91a3-dc8ef5d83197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:19:20:02:e5:10:a6:1f:63:c4:09:c8:a6: aa:c2:c2:f5:26:21:b5:ff:b1:39:c0:dd:fd:3d:a4: 53:d6:00:f3:d1:fe:ec:74:5c:b1:ce:34:fa:68:ec: cf:e5:d1:cd:0a:97:4c:3b:b8:40:d6:8c:e0:fd:be: 89:26:9a:35:92:b3:d1:77:95:98:1c:66:34:bd:e2: 7e:79:52:cc:42:82:26:07:71:6e:92:e1:ff:28:e2: 43:74:34:11:c5:2f:0c:46:5e:03:14:6f:95:72:78: 9f:08:f9:fe:a1:75:d2:0c:7f:24:74:18:8f:6d:34: ca:7c:23:e7:88:17:f7:0f:64:93:24:d1:7e:d8:2d: c3:e1:09:5c:df:ed:62:64:0a:07:d0:f8:25:b6:31: ca:ca:12:a9:14:1c:46:c1:26:ab:9a:cd:78:d0:08: 0f:82:81:5c:15:ee:ab:b3:97:70:c5:17:47:01:38: e3:22:7b:ca:65:1d:49:f9:84:2f:9e:e1:76:54:7f: a0:a0:48:d9:e3:96:7b:86:37:56:24:3d:e3:61:5a: d9:55:b7:e8:49:1c:a8:ef:4c:59:96:a1:2a:ae:58: 62:a9:17:39:97:d9:66:8d:ca:c7:3b:d4:a4:37:24: c6:ae:84:45:07:54:53:a4:49:13:12:16:0e:2e:cc: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9B:36:15:49:4D:C5:B3:69:9F:8F:FD:4E:9A:8B:C8:0F:1F:E8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17929bc7-9ff3-3d9b-bf8c-7012de5af388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:69:bb:db:49:c2:87:e4:79:21:2b:6f:ed:bb:13:6c:ee:f1: 1d:4e:44:04:97:1b:73:8b:0a:09:08:45:20:48:21:5b:70:aa: 9a:76:e0:ad:a2:3e:ba:e0:3f:ab:25:64:cb:f9:55:36:c1:ab: 82:e9:7f:29:42:6b:ed:32:ac:07:ba:7f:c9:fc:f0:c4:89:89: d7:9c:14:a2:54:a2:4b:96:f0:43:7b:07:36:9d:97:f2:47:35: f4:c7:21:37:60:8b:59:33:33:fb:1d:4d:3d:d7:54:f8:ad:3c: ac:b9:b8:bf:19:ee:67:68:03:b4:9a:15:15:6e:fc:df:b0:1d: 3a:8d:8a:71:4f:e7:2e:e1:90:c7:67:11:92:84:9e:b5:a6:46: 51:7a:f6:7f:42:e8:85:5d:ff:71:aa:2b:a0:7f:f0:e4:d2:30: fd:ef:75:eb:e4:48:ae:83:75:b8:52:f8:0a:bb:9b:bb:f8:bd: f8:1e:56:75:86:7f:9d:47:53:5c:1e:f2:32:70:3b:aa:74:49: 98:53:b9:03:33:cd:12:0f:d5:c0:8f:6a:d9:8e:96:a8:e3:dd: 68:94:9c:eb:f8:ec:eb:68:78:75:d7:71:6c:6e:f6:78:63:29: 9b:67:a7:74:73:8e:a8:08:08:28:4d:0e:bc:58:80:a9:8e:33: 02:91:9b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolr1zIkGK5ReZ8gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxMDE3MzkwMFoXDTI1MDkwODE3MzkwMFowLzEtMCsGA1UEAxMk NzRjOGU2MDAtMDJmYi00MmNlLTkxYTMtZGM4ZWY1ZDgzMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUwZIALlEKYfY8QJyKaqwsL1JiG1/7E5wN39 PaRT1gDz0f7sdFyxzjT6aOzP5dHNCpdMO7hA1ozg/b6JJpo1krPRd5WYHGY0veJ+ eVLMQoImB3FukuH/KOJDdDQRxS8MRl4DFG+VcnifCPn+oXXSDH8kdBiPbTTKfCPn iBf3D2STJNF+2C3D4Qlc3+1iZAoH0PgltjHKyhKpFBxGwSarms140AgPgoFcFe6r s5dwxRdHATjjInvKZR1J+YQvnuF2VH+goEjZ45Z7hjdWJD3jYVrZVbfoSRyo70xZ lqEqrlhiqRc5l9lmjcrHO9SkNyTGroRFB1RTpEkTEhYOLsxKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmbNhVJTcWzaZ+P/U6ai8gPH+joMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTc5MjliYzctOWZmMy0z ZDliLWJmOGMtNzAxMmRlNWFmMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzALuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRpu9tJwofkeSErb+27E2zu8R1ORASXG3OLCgkIRSBIIVtwqpp24K2i PrrgP6slZMv5VTbBq4LpfylCa+0yrAe6f8n88MSJidecFKJUokuW8EN7Bzadl/JH NfTHITdgi1kzM/sdTT3XVPitPKy5uL8Z7mdoA7SaFRVu/N+wHTqNinFP5y7hkMdn EZKEnrWmRlF69n9C6IVd/3GqK6B/8OTSMP3vdevkSK6DdbhS+Aq7m7v4vfgeVnWG f51HU1we8jJwO6p0SZhTuQMzzRIP1cCPatmOlqjj3WiUnOv47OtoeHXXcWxu9nhj KZtnp3RzjqgICChNDrxYgKmOMwKRm/A= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:38 2025 by rpki-client