$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa File: f45bc517-864a-32c1-b059-db26a9dffa20.roa (raw, json) Hash identifier: v9NpduPSapgka9DUaLzT49Bhsfi0ed1MQ1Uqhdq+AJs= Subject key identifier: 95:EC:64:3A:61:85:F2:1C:96:7B:2F:9E:56:FF:7A:E9:C6:22:70:4E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849D594EC787C4C00C23EFE9900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 3938 IP address blocks: 204.141.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ec:78:7c:4c:00:c2:3e:fe:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=790bd1c3-6793-436b-972d-3e4b65b32b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:5b:df:f8:f0:14:02:29:bd:6d:d8:80:b9: e3:dd:b5:8d:c2:e4:ca:f9:de:ef:92:ad:96:cd:7d: 86:f0:51:32:75:b3:af:23:66:de:c5:ee:6d:7b:97: 76:5b:02:d8:f4:75:0b:10:02:80:b7:1d:1b:aa:5b: 49:a9:5d:16:9c:69:21:81:6e:39:35:8d:76:0c:1f: 0b:30:5a:72:1d:22:0e:ca:7e:09:d1:51:a2:f3:97: 6b:01:3e:ed:da:64:0d:f2:6d:0f:db:ec:d4:ff:91: b8:63:23:ed:ce:0e:46:81:18:f8:2f:4d:8e:10:07: ed:02:66:fe:c3:c3:92:a3:79:3e:b3:06:20:ee:fb: b3:64:e4:18:88:2d:af:95:f8:3c:03:55:59:a1:a4: 94:71:01:91:9f:ea:4c:74:60:65:79:91:11:ad:23: 26:87:cf:74:6a:a8:3d:6c:04:a7:fa:7d:5b:70:3c: 44:26:be:07:62:2a:19:59:82:76:b9:7a:c4:43:00: 89:ab:fa:be:01:01:85:99:81:5f:ce:ad:77:db:c5: 5e:7b:ea:f8:5c:9e:da:f4:d1:e8:70:0f:7d:58:1c: 05:c8:f5:f2:d1:da:36:32:03:ff:7f:75:c1:6b:0e: 57:be:46:46:f6:1b:da:73:6b:3c:71:fb:c4:8f:bd: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EC:64:3A:61:85:F2:1C:96:7B:2F:9E:56:FF:7A:E9:C6:22:70:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a5:4a:33:5d:be:d7:eb:f5:5a:68:ba:58:9a:82:37:04:fe: c2:c1:34:dc:a5:fb:d0:95:27:20:c9:9f:25:3d:56:d4:d4:e6: 10:82:17:ff:7a:f4:6d:8d:22:86:fb:3b:66:95:4b:a4:c5:41: 47:d7:74:e6:62:98:99:ac:13:5a:e5:fc:f1:3a:1c:ac:97:25: c8:d5:92:cd:31:6d:7c:79:8b:11:96:6e:d9:2e:21:cd:64:ec: e8:63:5e:c1:e1:08:aa:a7:4a:31:cd:35:69:6a:8c:8d:b4:9e: a3:57:3d:e2:96:f4:91:83:a0:5f:30:ac:93:a1:c6:32:c6:10: 75:bf:c8:2c:1a:ff:5d:03:e6:2c:a7:34:35:6e:e9:f0:4f:c8: 62:e6:da:54:0a:3d:af:55:c7:d6:c2:ff:d8:48:0c:f5:91:6d: 82:46:d1:8c:26:f0:62:91:7f:78:51:0a:04:95:8d:dd:3f:fc: cd:cc:7f:ab:ae:cb:88:ff:4e:b3:7d:45:01:a7:04:7e:1c:f6: f4:30:b8:bc:4a:70:ee:0c:76:0a:ed:51:f6:c3:48:75:92:b1: fd:d0:b9:9a:e7:49:2d:50:d3:50:20:1b:56:e7:21:16:1b:07: 3c:4c:85:b7:cc:32:3e:9b:94:26:e4:f2:32:44:c5:9b:bd:45: da:b3:6f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOx4fEwAwj7+mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NzkwYmQxYzMtNjc5My00MzZiLTk3MmQtM2U0YjY1YjMyYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKdb3/jwFAIpvW3YgLnj3bWNwuTK+d7vkq2W zX2G8FEydbOvI2bexe5te5d2WwLY9HULEAKAtx0bqltJqV0WnGkhgW45NY12DB8L MFpyHSIOyn4J0VGi85drAT7t2mQN8m0P2+zU/5G4YyPtzg5GgRj4L02OEAftAmb+ w8OSo3k+swYg7vuzZOQYiC2vlfg8A1VZoaSUcQGRn+pMdGBleZERrSMmh890aqg9 bASn+n1bcDxEJr4HYioZWYJ2uXrEQwCJq/q+AQGFmYFfzq1328Vee+r4XJ7a9NHo cA99WBwFyPXy0do2MgP/f3XBaw5XvkZG9hvac2s8cfvEj72o1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXsZDphhfIclnsvnlb/eunGInBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjQ1YmM1MTctODY0YS0z MmMxLWIwNTktZGIyNmE5ZGZmYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+lSjNdvtfr9VpouliagjcE/sLBNNyl+9CVJyDJnyU9VtTU5hCCF/96 9G2NIob7O2aVS6TFQUfXdOZimJmsE1rl/PE6HKyXJcjVks0xbXx5ixGWbtkuIc1k 7OhjXsHhCKqnSjHNNWlqjI20nqNXPeKW9JGDoF8wrJOhxjLGEHW/yCwa/10D5iyn NDVu6fBPyGLm2lQKPa9Vx9bC/9hIDPWRbYJG0Ywm8GKRf3hRCgSVjd0//M3Mf6uu y4j/TrN9RQGnBH4c9vQwuLxKcO4MdgrtUfbDSHWSsf3QuZrnSS1Q01AgG1bnIRYb BzxMhbfMMj6blCbk8jJExZu9Rdqzb3k= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:13 2025 by rpki-client