$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa File: 2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa (raw, json) Hash identifier: 7eVoYBZ86wPBiIbc4WYO9DSnNh6PKBXzL9aikdRMgnU= Subject key identifier: 95:97:BC:D0:1B:4E:26:C7:7A:74:4D:23:02:45:16:3F:65:4C:DC:A7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849FCAA7E797D1F57EC5763EB40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 204.141.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7e:79:7d:1f:57:ec:57:63:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=b38ecf86-eb75-45d2-bed9-2f1ba10863de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:3b:c0:31:93:56:62:8a:3d:82:54:e6:6b: b2:ad:76:69:4f:a0:51:ce:8b:46:91:ac:60:06:0a: a4:c5:ff:11:9e:2c:46:ef:16:77:58:a0:89:fb:45: 37:2d:a1:e8:ea:18:fa:1e:0e:73:81:05:a8:51:fc: f4:1f:5f:72:d8:fe:ec:f1:42:9c:d2:78:d3:6b:80: 44:df:88:12:25:56:15:41:c3:92:95:07:6e:6a:8e: 39:ac:06:59:89:03:78:fb:ac:71:54:42:1a:4e:91: b4:62:d6:a3:29:ca:21:c1:8d:bd:84:54:c5:27:94: 78:11:0b:ad:4d:5e:6e:f2:e6:1f:b1:a4:d9:ec:36: ae:bd:d9:55:02:eb:fc:77:62:0e:d4:64:b1:5b:e4: 29:cf:d0:48:64:60:8f:91:06:58:62:37:8a:8d:7b: 25:b1:b7:c3:3a:2c:83:c1:d2:8f:3b:f6:34:57:0d: ee:45:aa:ad:33:ca:56:e1:bf:a2:c1:cf:ec:19:a6: 30:31:c3:d2:ed:a4:2c:d1:db:e8:5d:e8:52:5b:1b: b2:b9:2c:05:0c:bc:ce:93:1b:09:73:be:55:75:aa: 6a:d8:fc:6e:1e:9c:5a:1a:38:93:86:5a:bd:6a:d7: 93:38:e8:67:91:7e:13:d1:d2:d6:5f:06:e8:70:71: f4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:97:BC:D0:1B:4E:26:C7:7A:74:4D:23:02:45:16:3F:65:4C:DC:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e231d0a-b1d6-3b7b-957c-430eafda0f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9a:94:41:ee:85:90:50:4c:c8:82:a6:77:9f:a1:1a:22:a6: 10:09:8b:ce:9e:9d:96:bd:ce:94:e2:f5:94:e2:b5:38:96:18: a1:0a:5b:7f:b7:bc:51:5f:a0:b8:c7:00:e7:11:02:b7:73:40: 01:66:e2:c3:90:3b:14:d4:3e:65:68:f8:10:d8:fd:8e:32:d9: 01:00:bc:8d:72:63:49:54:38:0d:7d:67:b3:0c:10:f2:3b:a6: 6c:c0:a8:e0:9b:d9:aa:14:35:cd:e9:bb:f9:e2:95:32:e8:e3: db:fd:bb:2f:6b:d4:31:53:01:d3:57:3d:99:de:98:7f:d4:43: 80:7e:7b:8a:db:60:8c:51:4b:4a:35:19:ad:4f:c4:30:29:7d: bb:a2:1a:62:01:2c:32:61:63:18:18:68:85:03:11:b5:43:47: f5:9c:cb:f2:3d:dd:ac:48:fa:1d:05:e1:10:72:ae:2b:e8:24: bd:e7:2f:f4:22:87:a7:de:cd:2d:bd:50:1a:c7:77:7a:4c:93: 56:08:9d:6f:e5:3e:72:73:55:e1:bb:e0:12:d8:21:b6:e1:65: b3:19:6d:cd:98:0a:e8:35:ac:b9:f4:60:81:14:33:9f:b7:5b: 20:d3:b8:6f:08:97:95:bb:d3:e0:c2:d1:5d:d6:ac:d1:a6:51: 50:ad:7f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn55fR9X7Fdj60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk YjM4ZWNmODYtZWI3NS00NWQyLWJlZDktMmYxYmExMDg2M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEk7wDGTVmKKPYJU5muyrXZpT6BRzotGkaxg Bgqkxf8RnixG7xZ3WKCJ+0U3LaHo6hj6Hg5zgQWoUfz0H19y2P7s8UKc0njTa4BE 34gSJVYVQcOSlQduao45rAZZiQN4+6xxVEIaTpG0YtajKcohwY29hFTFJ5R4EQut TV5u8uYfsaTZ7DauvdlVAuv8d2IO1GSxW+Qpz9BIZGCPkQZYYjeKjXslsbfDOiyD wdKPO/Y0Vw3uRaqtM8pW4b+iwc/sGaYwMcPS7aQs0dvoXehSWxuyuSwFDLzOkxsJ c75Vdapq2PxuHpxaGjiThlq9ateTOOhnkX4T0dLWXwbocHH0kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWXvNAbTibHenRNIwJFFj9lTNynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmUyMzFkMGEtYjFkNi0z YjdiLTk1N2MtNDMwZWFmZGEwZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2alEHuhZBQTMiCpnefoRoiphAJi86enZa9zpTi9ZTitTiWGKEKW3+3 vFFfoLjHAOcRArdzQAFm4sOQOxTUPmVo+BDY/Y4y2QEAvI1yY0lUOA19Z7MMEPI7 pmzAqOCb2aoUNc3pu/nilTLo49v9uy9r1DFTAdNXPZnemH/UQ4B+e4rbYIxRS0o1 Ga1PxDApfbuiGmIBLDJhYxgYaIUDEbVDR/Wcy/I93axI+h0F4RByrivoJL3nL/Qi h6fezS29UBrHd3pMk1YInW/lPnJzVeG74BLYIbbhZbMZbc2YCug1rLn0YIEUM5+3 WyDTuG8Il5W70+DC0V3WrNGmUVCtfxc= -----END CERTIFICATE-----Generated at Sun Jun 15 11:25:07 2025 by rpki-client