$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa File: 8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa (raw, json) Hash identifier: H1p5Y8V0GilKmyEZ3c8M7ozf9Omxc+BzkrnSghGKqTc= Subject key identifier: A4:FF:F5:85:BB:C2:21:57:CD:B5:C5:C2:C6:CD:AB:5F:25:56:34:86 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849FCAA804646019330E2F73E00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 204.2.164.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:80:46:46:01:93:30:e2:f7:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=f473f051-6a06-4d25-932f-b8838a6bf92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:87:e1:35:62:c4:29:9a:44:b4:36:cd:a7: 83:f5:74:90:2e:61:e9:ab:41:56:e1:99:36:ac:87: 22:4a:20:e3:41:68:60:be:10:68:7a:03:e9:02:d8: 2f:fc:b2:59:2f:95:d0:0d:6a:4b:65:84:26:bd:fa: 34:49:e8:a0:a2:c2:4f:56:48:0b:37:a9:f7:20:af: 76:45:64:e1:4a:ab:b9:a5:d7:b0:8a:03:13:ab:b8: 0b:2f:ee:8a:a8:ea:c9:93:14:1e:b5:3c:79:8e:ad: b9:40:7b:6a:8a:6b:c3:13:e6:e3:f4:f1:6f:c2:dd: e9:88:c4:a8:35:a2:68:b3:6f:26:1b:7b:c2:6e:70: 7f:56:8d:5c:ee:07:0f:6c:9c:6b:ba:69:ae:e7:2e: 4c:d2:cc:80:5e:a5:aa:f6:75:a1:89:f6:ec:26:3d: ac:1e:70:7a:1b:34:67:aa:13:1d:cc:24:3e:ad:21: f7:3c:f3:33:7e:c6:ee:32:33:65:48:67:73:df:a6: 6a:b6:ca:1e:b2:72:55:ab:4d:f1:39:54:b1:56:03: ca:df:39:d4:bd:a7:77:be:9f:2b:f0:81:57:64:fa: 2e:68:ea:f3:bc:66:81:1a:9c:c5:18:a4:61:8a:b9: 80:fc:af:26:07:5d:a1:4c:98:d9:72:29:94:00:5e: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FF:F5:85:BB:C2:21:57:CD:B5:C5:C2:C6:CD:AB:5F:25:56:34:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:10:8c:e2:b4:86:15:d1:62:79:e3:00:0c:19:9b:f4:5e:42: 08:d4:79:ba:b2:dd:51:41:a6:dc:cb:8e:b6:81:f3:fc:36:53: 9d:94:cf:9f:67:21:67:6c:d6:bc:37:d0:d8:a2:19:61:64:7f: d6:ed:24:30:f6:49:f8:de:7c:26:9a:20:21:11:51:c4:42:1d: ad:22:49:52:a5:16:f4:02:a0:e1:98:c4:9b:70:10:55:79:25: be:4b:11:f0:1a:f1:e1:5f:e2:44:3c:56:c9:6e:5a:56:0d:40: a1:2a:e0:76:48:25:fc:46:c5:9a:54:d4:05:39:76:4b:ce:d5: 39:2e:7f:ca:fc:c0:18:05:19:0f:2d:72:82:05:2e:82:ee:4b: a7:f0:1e:46:9f:55:ec:fc:cb:4a:e5:42:ee:a9:42:e3:4f:81: d2:eb:d7:b4:d5:c0:31:2f:00:d0:14:a4:47:b7:69:4a:eb:fd: 15:4d:f8:f5:a9:02:85:29:a0:a5:46:0c:8c:f8:55:ac:40:6e: bf:d0:67:5a:3f:83:3a:2e:d4:bd:04:e6:64:23:61:e4:80:e8: 3b:b1:39:95:4d:0e:23:d7:d8:49:82:5e:60:e7:17:d9:ae:9b: 46:42:da:a7:ac:96:89:c3:74:4e:97:8c:16:26:a1:47:7f:f5: e4:a2:12:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qoBGRgGTMOL3PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZjQ3M2YwNTEtNmEwNi00ZDI1LTkzMmYtYjg4MzhhNmJmOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWqH4TVixCmaRLQ2zaeD9XSQLmHpq0FW4Zk2 rIciSiDjQWhgvhBoegPpAtgv/LJZL5XQDWpLZYQmvfo0SeigosJPVkgLN6n3IK92 RWThSqu5pdewigMTq7gLL+6KqOrJkxQetTx5jq25QHtqimvDE+bj9PFvwt3piMSo NaJos28mG3vCbnB/Vo1c7gcPbJxrummu5y5M0syAXqWq9nWhifbsJj2sHnB6GzRn qhMdzCQ+rSH3PPMzfsbuMjNlSGdz36ZqtsoesnJVq03xOVSxVgPK3znUvad3vp8r 8IFXZPouaOrzvGaBGpzFGKRhirmA/K8mB12hTJjZcimUAF7QLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT/9YW7wiFXzbXFwsbNq18lVjSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODE2NzgyMGYtZGJhOS0z MjAyLTg3NjgtN2VlOWIwZTVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8QjOK0hhXRYnnjAAwZm/ReQgjUebqy3VFBptzLjraB8/w2U52Uz59n IWds1rw30NiiGWFkf9btJDD2SfjefCaaICERUcRCHa0iSVKlFvQCoOGYxJtwEFV5 Jb5LEfAa8eFf4kQ8VsluWlYNQKEq4HZIJfxGxZpU1AU5dkvO1Tkuf8r8wBgFGQ8t coIFLoLuS6fwHkafVez8y0rlQu6pQuNPgdLr17TVwDEvANAUpEe3aUrr/RVN+PWp AoUpoKVGDIz4VaxAbr/QZ1o/gzou1L0E5mQjYeSA6DuxOZVNDiPX2EmCXmDnF9mu m0ZC2qeslonDdE6XjBYmoUd/9eSiEhg= -----END CERTIFICATE-----Generated at Sun Jun 15 11:37:40 2025 by rpki-client