$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/860b2f2f-9923-356c-9ec9-b029a80aba79.roa File: 860b2f2f-9923-356c-9ec9-b029a80aba79.roa (raw, json) Hash identifier: 2TJFZ2Y7s/GIjjlLXQZfYKaqpm9Q2a3SiVMdcftwH8I= Subject key identifier: 63:E3:DC:9B:B4:55:7D:12:02:B3:31:35:0B:BF:02:CD:FC:27:A7:72 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A2B0149362620AB1A48115F80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/860b2f2f-9923-356c-9ec9-b029a80aba79.roa Signing time: Thu 12 Jun 2025 15:23:07 +0000 ROA not before: Thu 12 Jun 2025 15:23:07 +0000 ROA not after: Wed 10 Sep 2025 15:23:07 +0000 asID: 11404 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2b:01:49:36:26:20:ab:1a:48:11:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 12 15:23:07 2025 GMT Not After : Sep 10 15:23:07 2025 GMT Subject: CN=c6416c9e-ceae-4e7f-8f10-df041c119d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:5e:9e:55:9c:a3:49:1f:d3:cb:a7:1e:49: 6c:02:c3:4b:58:d4:8b:bc:ab:74:a9:f3:6f:ce:3a: 7d:ae:16:ac:39:bb:15:f9:0f:7a:f9:54:31:fa:81: e2:8a:cb:ce:ce:95:1d:53:3a:77:37:3e:bb:e5:fa: e4:76:1d:d1:3a:fd:15:c5:d8:2d:6e:e5:9d:1b:55: ce:24:47:e6:b0:15:02:d5:43:43:dd:1c:9a:aa:4d: 92:d2:53:14:3a:f0:9c:13:05:9c:26:fa:d3:0a:ed: 68:b9:7f:ca:4d:89:ca:52:c4:64:1a:0e:6c:8a:cf: 86:4f:3c:09:eb:96:b8:81:94:77:6e:88:3b:e0:16: 1f:9e:71:71:f5:5e:5d:a7:e9:c9:2d:05:85:3b:1b: ca:49:e3:44:09:c0:e5:7b:d0:7b:c4:e0:9f:80:c4: 82:47:92:da:37:9d:bd:b4:74:03:cd:7d:50:bb:51: ca:d4:41:82:7c:4b:fd:39:e4:b1:5d:c8:6a:cd:9f: 35:39:0f:dc:8f:98:9a:21:f4:58:80:c8:e0:3c:5b: d6:74:e6:18:3d:ef:eb:04:96:8c:f3:83:2c:d9:a4: 94:ce:f4:a9:f0:ea:71:98:18:ab:47:2b:28:9d:6b: e6:1f:85:0d:83:d8:81:d3:05:30:e8:9c:a7:50:07: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:DC:9B:B4:55:7D:12:02:B3:31:35:0B:BF:02:CD:FC:27:A7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/860b2f2f-9923-356c-9ec9-b029a80aba79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1c:d0:59:2d:08:84:5d:b3:c9:dd:f5:46:67:7e:30:c3:c5: 23:1a:9e:8e:61:5d:35:f5:25:45:7e:e2:81:ae:be:a2:1a:41: 61:34:31:eb:7d:fb:81:bf:28:53:ba:1f:cf:c4:a7:e7:44:5f: 99:d3:75:87:ff:d7:fe:cc:92:8a:af:db:2e:09:b9:19:85:fa: 9c:ee:07:16:15:58:78:ed:47:db:7a:c1:c2:0b:87:1e:c9:f5: d3:27:14:29:80:8c:53:06:40:95:f2:04:30:92:09:73:6f:fd: f4:f9:dd:19:f5:d7:67:08:88:aa:8d:ac:38:78:07:f2:dc:34: 72:51:c9:1e:59:65:7d:8a:2a:6f:f5:2b:c6:df:b2:2f:ad:13: 76:41:c0:e5:b2:6a:f6:28:5f:d5:74:43:d3:3a:7e:d0:d3:59: 94:bd:3a:42:a9:e3:66:50:d6:59:02:6f:44:19:30:b8:51:a4: 99:5a:0b:f5:3b:77:eb:7a:d5:cc:1a:fd:15:2b:de:14:d8:21: d6:84:4e:e6:52:14:9f:1c:2a:58:30:0a:80:b4:14:ff:fe:16: f9:c5:7a:b5:40:a7:ad:71:78:1b:fd:4a:b2:3d:3c:e8:c3:04: a4:af:97:65:fd:2c:ef:53:88:79:ba:9a:40:04:73:a4:2f:fa: 89:d0:bc:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEorAUk2JiCrGkgRX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxMjE1MjMwN1oXDTI1MDkxMDE1MjMwN1owLzEtMCsGA1UEAxMk YzY0MTZjOWUtY2VhZS00ZTdmLThmMTAtZGYwNDFjMTE5ZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27VenlWco0kf08unHklsAsNLWNSLvKt0qfNv zjp9rhasObsV+Q96+VQx+oHiisvOzpUdUzp3Nz675frkdh3ROv0VxdgtbuWdG1XO JEfmsBUC1UND3Ryaqk2S0lMUOvCcEwWcJvrTCu1ouX/KTYnKUsRkGg5sis+GTzwJ 65a4gZR3bog74BYfnnFx9V5dp+nJLQWFOxvKSeNECcDle9B7xOCfgMSCR5LaN529 tHQDzX1Qu1HK1EGCfEv9OeSxXchqzZ81OQ/cj5iaIfRYgMjgPFvWdOYYPe/rBJaM 84Ms2aSUzvSp8OpxmBirRysonWvmH4UNg9iB0wUw6JynUAerJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPj3Ju0VX0SArMxNQu/As38J6dyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODYwYjJmMmYtOTkyMy0z NTZjLTllYzktYjAyOWE4MGFiYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUc0FktCIRds8nd9UZnfjDDxSMano5hXTX1JUV+4oGuvqIaQWE0Met9 +4G/KFO6H8/Ep+dEX5nTdYf/1/7Mkoqv2y4JuRmF+pzuBxYVWHjtR9t6wcILhx7J 9dMnFCmAjFMGQJXyBDCSCXNv/fT53Rn112cIiKqNrDh4B/LcNHJRyR5ZZX2KKm/1 K8bfsi+tE3ZBwOWyavYoX9V0Q9M6ftDTWZS9OkKp42ZQ1lkCb0QZMLhRpJlaC/U7 d+t61cwa/RUr3hTYIdaETuZSFJ8cKlgwCoC0FP/+FvnFerVAp61xeBv9SrI9POjD BKSvl2X9LO9TiHm6mkAEc6Qv+onQvFw= -----END CERTIFICATE-----Generated at Sun Jun 15 13:14:01 2025 by rpki-client