$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b251e85-1f51-3588-9b84-3b4131b63e80.roa File: 6b251e85-1f51-3588-9b84-3b4131b63e80.roa (raw, json) Hash identifier: mZaqFurFIoXGimZtO6oeGDbcBLQN7YNlm+C87a0iVJI= Subject key identifier: 20:AA:03:CD:30:25:43:01:E4:68:80:78:5A:30:84:27:A1:AA:A1:E6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A35E58A891E1C8FFDEBF91940 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b251e85-1f51-3588-9b84-3b4131b63e80.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 25645 IP address blocks: 204.2.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:8a:89:1e:1c:8f:fd:eb:f9:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=5845457b-9b41-448b-b6ee-c8a890989b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:86:ff:a4:01:35:19:52:60:f0:85:77:c0: 95:2c:a2:29:fb:4f:ad:52:31:f5:1d:fc:b9:94:93: 88:23:a7:cd:b6:89:77:a2:fb:70:4b:0a:1f:b6:a2: bf:01:a5:33:ae:73:e5:bf:cc:d8:2d:d8:2b:97:12: 22:56:76:b2:ff:39:06:4d:34:22:7a:aa:1d:ec:aa: da:ce:d9:74:e3:3c:51:94:1d:6a:26:90:5e:e7:ab: 44:1a:35:d9:49:33:e6:8c:64:13:93:88:41:a2:23: 2b:6a:88:78:e1:bc:a9:46:18:50:63:6b:8f:5e:02: ad:b4:bf:ea:29:c2:2c:23:2a:3f:e9:f0:e3:74:5d: 36:1a:13:c5:a2:8c:e5:8c:ca:e3:2e:ea:c7:ea:fe: f4:9b:1e:02:27:ab:58:dc:da:15:d4:51:b2:b4:f0: de:d2:14:ad:8c:84:18:df:da:65:32:38:d6:f1:0c: 0a:05:2b:1a:c7:8e:a8:fa:d0:95:83:7a:18:f8:85: b7:0d:53:ad:96:ca:37:c7:20:43:bf:94:bf:85:0f: fe:b0:6e:44:63:6e:03:34:11:9f:13:6f:7a:07:8b: b2:bd:b5:bd:3a:7d:37:c9:c7:d5:c6:65:a0:9f:e6: e9:06:59:cd:82:4d:79:1b:00:94:5a:17:d2:f0:bb: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AA:03:CD:30:25:43:01:E4:68:80:78:5A:30:84:27:A1:AA:A1:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b251e85-1f51-3588-9b84-3b4131b63e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7d:55:ac:ca:f7:39:31:38:82:d5:35:fe:31:6f:52:dd:30: a0:fd:20:fa:63:d7:27:c8:78:eb:7e:bd:10:01:65:1e:7a:a6: 64:5e:78:4a:27:e3:f2:97:4a:7e:68:3c:f7:1d:f3:91:56:6a: ac:56:38:ab:ae:9c:18:a3:8b:00:75:5b:53:b5:55:07:5d:dd: 13:05:66:2b:a0:df:5c:0c:96:b3:26:e6:5a:77:d7:59:48:d2: d4:3e:e0:b3:4d:17:bb:20:29:54:d7:c9:9f:35:e7:3a:7f:f9: c6:2d:89:b9:51:6e:8b:ad:cf:3e:e2:a7:ea:29:34:98:f0:0e: 14:ab:4e:d1:16:1b:cf:36:d8:17:8f:82:29:2c:27:1d:99:e4: 0a:ae:53:5c:e6:f2:1d:33:99:53:6d:7f:e4:5f:8b:d5:84:bb: 81:5b:56:20:7a:71:5d:47:fe:89:40:17:0b:b5:bf:e9:26:98: ea:cc:7c:f8:8e:11:26:3f:56:c4:c6:c6:de:28:cd:51:b5:a0: b6:b7:17:8f:3c:23:41:40:c2:45:c1:38:f0:94:81:8d:d9:a3: 4e:29:ea:a3:88:f4:a6:c6:17:6e:94:eb:3e:e3:59:ba:7a:bf: f4:e2:fd:ab:ce:65:f3:2b:a3:80:bb:f8:f7:a9:83:6f:69:9c: 44:27:a4:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15YqJHhyP/ev5GUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk NTg0NTQ1N2ItOWI0MS00NDhiLWI2ZWUtYzhhODkwOTg5YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQaG/6QBNRlSYPCFd8CVLKIp+0+tUjH1Hfy5 lJOII6fNtol3ovtwSwoftqK/AaUzrnPlv8zYLdgrlxIiVnay/zkGTTQieqod7Kra ztl04zxRlB1qJpBe56tEGjXZSTPmjGQTk4hBoiMraoh44bypRhhQY2uPXgKttL/q KcIsIyo/6fDjdF02GhPFoozljMrjLurH6v70mx4CJ6tY3NoV1FGytPDe0hStjIQY 39plMjjW8QwKBSsax46o+tCVg3oY+IW3DVOtlso3xyBDv5S/hQ/+sG5EY24DNBGf E296B4uyvbW9On03ycfVxmWgn+bpBlnNgk15GwCUWhfS8LsVqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCqA80wJUMB5GiAeFowhCehqqHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmIyNTFlODUtMWY1MS0z NTg4LTliODQtM2I0MTMxYjYzZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV9VazK9zkxOILVNf4xb1LdMKD9IPpj1yfIeOt+vRABZR56pmReeEon 4/KXSn5oPPcd85FWaqxWOKuunBijiwB1W1O1VQdd3RMFZiug31wMlrMm5lp311lI 0tQ+4LNNF7sgKVTXyZ815zp/+cYtiblRboutzz7ip+opNJjwDhSrTtEWG8822BeP giksJx2Z5AquU1zm8h0zmVNtf+Rfi9WEu4FbViB6cV1H/olAFwu1v+kmmOrMfPiO ESY/VsTGxt4ozVG1oLa3F488I0FAwkXBOPCUgY3Zo04p6qOI9KbGF26U6z7jWbp6 v/Ti/avOZfMro4C7+Pepg29pnEQnpKc= -----END CERTIFICATE-----Generated at Tue Jun 17 00:32:35 2025 by rpki-client