$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b188e208-48e7-3a90-86f9-7590ab80804a.roa File: b188e208-48e7-3a90-86f9-7590ab80804a.roa (raw, json) Hash identifier: 3ZZ6XSTfujGykkyLt6NdDwPcdhNuUFNdmFT1dEl/48g= Subject key identifier: BC:A8:7D:D9:DB:AA:65:D1:82:FB:C3:5E:4B:F3:E3:B6:8A:D5:69:3F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A2B0248E1C6DF6F912932ACA0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b188e208-48e7-3a90-86f9-7590ab80804a.roa Signing time: Thu 12 Jun 2025 15:25:07 +0000 ROA not before: Thu 12 Jun 2025 15:25:07 +0000 ROA not after: Wed 10 Sep 2025 15:25:07 +0000 asID: 20115 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2b:02:48:e1:c6:df:6f:91:29:32:ac:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 12 15:25:07 2025 GMT Not After : Sep 10 15:25:07 2025 GMT Subject: CN=397a47f2-5d95-495e-ab9c-94d892c3b61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:37:1e:8e:b7:fc:ba:c4:83:4c:08:c9:ec: bb:fb:55:e4:a0:08:81:43:fe:f5:62:2d:2a:f3:ba: 82:f2:76:26:b5:7b:e7:08:7d:28:55:d2:74:4a:9c: 21:a7:fd:62:5a:33:41:94:27:3f:6f:7b:c0:ba:e7: 26:c2:59:e7:05:f4:a9:3b:b7:2e:b2:56:1d:4d:ca: 13:41:9a:92:c2:fd:69:a5:c5:21:53:87:90:f0:91: 22:e4:e5:03:32:68:16:48:18:e5:8d:ed:f1:cd:a6: 7e:c3:9e:11:7b:5b:90:67:ae:84:bc:a1:6a:1f:c4: 7d:e0:35:69:c7:83:82:36:cb:c7:30:16:44:05:a8: bf:32:4b:91:a0:c9:20:d2:a1:a1:25:fd:0a:0b:ef: 89:e5:77:b4:1a:e3:3c:89:62:9f:75:e6:a5:90:c3: 80:4e:66:d0:41:ae:24:ed:d1:88:fe:f3:16:29:ff: c4:96:6d:f5:71:24:2a:c8:60:df:0c:6d:d6:31:55: 2b:44:a7:2c:ef:12:71:fe:f6:2d:28:ea:e9:2d:0b: 0e:a6:14:71:50:13:96:65:d0:91:5f:a7:3b:53:3d: 5c:9f:8a:b5:ba:59:52:58:35:e9:ee:fa:81:26:91: 7d:f3:a5:3d:66:45:7f:bb:4a:1f:20:2c:2a:18:81: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:7D:D9:DB:AA:65:D1:82:FB:C3:5E:4B:F3:E3:B6:8A:D5:69:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b188e208-48e7-3a90-86f9-7590ab80804a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:01:bc:30:64:7b:c5:a8:a1:7d:f7:81:b0:ee:15:f0:fe:79: b1:ed:22:49:0c:25:cd:a2:8e:6f:54:8b:24:70:c6:90:4d:a7: ea:f0:3d:94:28:10:4d:51:e8:c1:15:70:30:20:f3:ce:9d:a9: ac:15:70:be:30:58:e0:bf:62:c5:e2:ea:4d:68:0c:fd:7a:08: 5b:7d:7d:ca:ea:2e:9d:9a:f2:5d:08:3c:41:e9:51:66:7c:f3: 90:1f:c3:f9:55:e4:3e:1e:5b:67:e7:01:af:75:c6:48:41:7a: 7a:a3:d6:06:e9:78:cf:d2:84:ae:0a:48:2f:c0:d2:d1:1e:0c: 52:60:dc:03:90:7b:c4:fc:9a:5c:9c:e6:68:31:3f:97:0a:98: 2c:68:eb:23:dc:a7:18:ed:74:56:8c:f4:28:a5:08:d9:c8:95: a6:24:db:6a:71:61:11:ff:8e:a0:f4:8b:52:4e:0d:42:0c:dc: db:b4:fe:3f:5c:b6:09:82:90:24:a7:f6:b5:b1:cc:32:72:d7: b5:2a:ef:72:61:60:f1:71:1e:79:39:7a:03:f7:16:ff:80:ed: 0d:65:09:1d:bf:fa:32:b8:74:fa:5e:e9:64:a7:f4:bd:5a:45: f5:e8:9e:70:ad:5c:87:d4:10:dc:0c:59:01:93:8b:7b:b1:dd: eb:fc:3e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEorAkjhxt9vkSkyrKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxMjE1MjUwN1oXDTI1MDkxMDE1MjUwN1owLzEtMCsGA1UEAxMk Mzk3YTQ3ZjItNWQ5NS00OTVlLWFiOWMtOTRkODkyYzNiNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru43Ho63/LrEg0wIyey7+1XkoAiBQ/71Yi0q 87qC8nYmtXvnCH0oVdJ0Spwhp/1iWjNBlCc/b3vAuucmwlnnBfSpO7cuslYdTcoT QZqSwv1ppcUhU4eQ8JEi5OUDMmgWSBjlje3xzaZ+w54Re1uQZ66EvKFqH8R94DVp x4OCNsvHMBZEBai/MkuRoMkg0qGhJf0KC++J5Xe0GuM8iWKfdealkMOATmbQQa4k 7dGI/vMWKf/Elm31cSQqyGDfDG3WMVUrRKcs7xJx/vYtKOrpLQsOphRxUBOWZdCR X6c7Uz1cn4q1ullSWDXp7vqBJpF986U9ZkV/u0ofICwqGIFoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyofdnbqmXRgvvDXkvz47aK1Wk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjE4OGUyMDgtNDhlNy0z YTkwLTg2ZjktNzU5MGFiODA4MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4BvDBke8WooX33gbDuFfD+ebHtIkkMJc2ijm9UiyRwxpBNp+rwPZQo EE1R6MEVcDAg886dqawVcL4wWOC/YsXi6k1oDP16CFt9fcrqLp2a8l0IPEHpUWZ8 85Afw/lV5D4eW2fnAa91xkhBenqj1gbpeM/ShK4KSC/A0tEeDFJg3AOQe8T8mlyc 5mgxP5cKmCxo6yPcpxjtdFaM9CilCNnIlaYk22pxYRH/jqD0i1JODUIM3Nu0/j9c tgmCkCSn9rWxzDJy17Uq73JhYPFxHnk5egP3Fv+A7Q1lCR2/+jK4dPpe6WSn9L1a RfXonnCtXIfUENwMWQGTi3ux3ev8PjQ= -----END CERTIFICATE-----Generated at Sun Jun 15 19:15:12 2025 by rpki-client