$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51698de7-eabd-373d-889d-3b96203d4eb6.roa File: 51698de7-eabd-373d-889d-3b96203d4eb6.roa (raw, json) Hash identifier: ZfBKF4Ql1w8RqU2mwZzOzpCExWlUq2TBBrXhAw0fTA4= Subject key identifier: EE:D2:3B:84:D2:B4:F2:D6:76:F6:F3:63:D9:4E:D3:4D:02:90:38:15 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A8B0B4D173286B4DF6A7346E0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51698de7-eabd-373d-889d-3b96203d4eb6.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 400810 IP address blocks: 204.2.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4d:17:32:86:b4:df:6a:73:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=7e7c3a4d-9f8d-4a46-acfd-7714e52937cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:10:0a:43:79:79:b5:a2:da:48:8c:6a:c6:21: c0:df:a6:16:75:9a:e2:b2:34:77:d3:eb:7d:e8:fd: af:3a:2a:39:b3:ec:9d:1e:37:a1:2e:d3:7c:39:7d: 50:96:bb:d5:29:e2:68:8f:24:52:ed:7a:02:c7:9e: 88:8c:bd:ff:37:44:97:2b:31:fd:67:98:25:b7:d6: aa:4d:96:74:10:cb:57:eb:56:7e:85:e0:d8:b5:13: e1:ed:fc:0d:70:8a:cb:a9:5f:a3:35:34:93:4f:2b: 28:1e:ea:d7:38:7d:e6:22:1b:1e:53:03:31:f3:28: a9:b5:f1:72:74:ee:78:c9:26:6c:bd:53:41:c0:b7: ce:e1:17:fa:c5:77:6a:eb:28:04:b8:80:fa:e3:44: d1:10:43:a1:f6:bc:3c:3d:49:e4:81:dd:84:d9:c4: ed:15:62:14:ac:62:16:cd:a0:da:48:e6:42:14:2e: 60:85:96:eb:c1:43:c7:68:44:e9:e0:34:59:ce:2a: 76:1d:c1:61:bc:ae:de:f1:e6:c0:bd:5c:36:f8:2c: 5c:82:8d:38:df:67:51:30:92:21:1b:af:80:e7:5c: c8:be:1d:d1:89:74:ef:52:9e:20:1e:83:e0:04:25: ac:ac:0d:ba:c8:39:82:c6:7f:49:65:ae:5f:81:39: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D2:3B:84:D2:B4:F2:D6:76:F6:F3:63:D9:4E:D3:4D:02:90:38:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51698de7-eabd-373d-889d-3b96203d4eb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:04:9e:f3:a6:c2:d4:2f:ff:62:5a:37:9b:cb:3b:e2:32:3c: 6c:76:2a:41:3c:ec:6c:f3:ce:a3:d1:a7:0f:07:2e:e6:7d:3b: 0c:d2:95:9c:7e:ff:a5:0e:33:32:36:77:ac:03:44:10:6c:d8: 47:1d:18:98:d4:fb:2c:9a:70:b1:21:e9:1c:2d:f1:78:dc:71: cf:04:bb:76:3a:73:e6:ae:56:3e:37:45:49:3d:33:7e:16:02: ed:73:cc:27:ab:a1:ab:96:98:b9:08:35:18:c8:43:f8:6a:8f: 02:48:b2:73:3a:86:66:39:20:60:4d:8f:57:6c:27:16:7c:95: 18:7b:da:ae:36:aa:f6:6f:03:50:21:c1:1c:dc:2c:4b:29:d4: 47:58:97:3e:1e:88:00:79:3c:1c:93:6c:cd:56:f7:74:3a:0b: 6e:cb:29:2f:7c:a3:29:18:00:4a:7a:7f:e4:24:73:6c:66:d9: c1:09:0c:ef:c5:f8:75:1c:c2:18:3e:20:30:62:93:0e:c2:ac: 0e:a7:c6:a2:a6:18:bd:93:ca:a3:eb:73:af:5b:7d:67:a4:93: af:a8:4c:88:db:b8:31:b4:fa:5f:7f:0b:ea:ce:d7:a7:87:c1: 67:3d:6e:45:d7:5a:e0:6d:34:0d:5c:ba:f3:fb:5e:84:03:ee: b6:e5:19:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC00XMoa032pzRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk N2U3YzNhNGQtOWY4ZC00YTQ2LWFjZmQtNzcxNGU1MjkzN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBAKQ3l5taLaSIxqxiHA36YWdZrisjR30+t9 6P2vOio5s+ydHjehLtN8OX1QlrvVKeJojyRS7XoCx56IjL3/N0SXKzH9Z5glt9aq TZZ0EMtX61Z+heDYtRPh7fwNcIrLqV+jNTSTTysoHurXOH3mIhseUwMx8yiptfFy dO54ySZsvVNBwLfO4Rf6xXdq6ygEuID640TREEOh9rw8PUnkgd2E2cTtFWIUrGIW zaDaSOZCFC5ghZbrwUPHaETp4DRZzip2HcFhvK7e8ebAvVw2+Cxcgo0432dRMJIh G6+A51zIvh3RiXTvUp4gHoPgBCWsrA26yDmCxn9JZa5fgTnbtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7SO4TStPLWdvbzY9lO000CkDgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTE2OThkZTctZWFiZC0z NzNkLTg4OWQtM2I5NjIwM2Q0ZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzALkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4EnvOmwtQv/2JaN5vLO+IyPGx2KkE87GzzzqPRpw8HLuZ9OwzSlZx+ /6UOMzI2d6wDRBBs2EcdGJjU+yyacLEh6Rwt8Xjccc8Eu3Y6c+auVj43RUk9M34W Au1zzCeroauWmLkINRjIQ/hqjwJIsnM6hmY5IGBNj1dsJxZ8lRh72q42qvZvA1Ah wRzcLEsp1EdYlz4eiAB5PByTbM1W93Q6C27LKS98oykYAEp6f+Qkc2xm2cEJDO/F +HUcwhg+IDBikw7CrA6nxqKmGL2TyqPrc69bfWekk6+oTIjbuDG0+l9/C+rO16eH wWc9bkXXWuBtNA1cuvP7XoQD7rblGdc= -----END CERTIFICATE-----Generated at Wed Aug 6 04:16:54 2025 by rpki-client