$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa File: bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa (raw, json) Hash identifier: pIir9gDvaWPeFghWwfd+CQsfK1nIdOqAVEcirRDnE6A= Subject key identifier: 0A:D0:58:2A:D8:AC:52:B1:BB:3E:0C:38:37:4B:93:90:40:33:62:BD Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584A03A557C84052CA9613A8CD40 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 23158 IP address blocks: 204.154.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:57:c8:40:52:ca:96:13:a8:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=b61cd98b-3fde-494a-ae70-4219811df603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:16:4e:f1:7c:85:fd:2b:3c:d8:04:18:ff: 5f:3b:0b:24:5f:1f:8d:a6:35:ae:37:05:6a:15:4a: cf:d7:28:36:cb:8a:20:17:d6:c1:4c:70:1e:6e:26: a3:d8:bc:79:90:fd:11:7a:86:e7:af:63:69:a6:1f: 51:13:5a:56:9d:49:32:4d:0c:6c:86:98:1d:0b:c8: cd:1e:60:05:7f:67:ca:51:3a:7b:5d:f0:26:e3:4a: f1:25:ea:61:19:59:23:dd:2f:20:13:a8:ec:2c:ba: 26:28:bc:6f:6f:34:da:25:ab:1c:23:e0:24:42:c0: 1a:0d:7c:f8:ab:97:7b:09:6a:4a:5d:86:9a:73:e5: e7:95:9f:5b:8e:bf:c1:1b:af:f7:51:9b:af:6d:8a: 1a:73:4b:f1:6f:84:bc:57:72:0e:c5:04:26:74:70: 28:6d:97:68:9c:71:89:de:49:36:3b:2d:3c:9c:10: fd:73:46:13:b0:b3:0e:4c:8e:c2:68:88:02:b9:c2: 45:de:cb:23:55:8e:43:bf:bd:00:e6:b8:ae:0d:83: 35:bc:e0:13:76:95:9e:dc:23:d2:77:5b:72:89:ae: ec:cb:63:ac:7a:ef:28:b2:0c:aa:cb:b8:8f:50:a7: 69:ec:71:f7:e5:95:ab:24:01:90:fe:00:f7:5f:3f: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D0:58:2A:D8:AC:52:B1:BB:3E:0C:38:37:4B:93:90:40:33:62:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 204.154.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:07:8b:aa:63:76:1d:a2:4b:8b:e1:91:f9:60:04:14:06:5f: 7a:44:be:50:d3:a5:17:de:2c:b2:1d:3a:8f:b0:ee:f4:a2:60: a5:96:8f:43:d0:7a:de:1c:71:d5:b7:f0:87:5e:1c:1f:87:b5: 5c:15:bb:ff:19:3f:d1:21:d4:50:3d:96:9c:3c:30:e8:3b:ab: f8:b4:5e:e4:ec:bf:5b:b9:27:45:34:88:df:94:13:be:1b:7f: 2a:aa:63:e9:98:23:e6:9b:6d:0a:ba:b1:92:31:51:8e:d2:a3: 1f:7c:ea:06:16:c6:e0:5c:20:d1:ca:e0:d9:3f:a2:29:80:4e: 3d:cc:6d:58:4e:a7:2a:53:2d:0f:91:7f:4d:7e:98:17:6c:80: a9:27:cb:b0:8a:41:da:b9:49:6b:2b:d4:1f:63:9e:28:29:4f: 25:23:b5:b0:a0:54:9a:7a:b2:ac:bf:7e:49:f0:b4:1a:a9:20: 52:c5:43:1e:65:e9:c9:fc:43:ea:63:20:01:36:ba:b2:19:a9: b6:97:01:aa:b6:dd:df:14:49:bf:9e:5b:e5:70:66:04:c6:d7: d5:89:89:c0:ac:fd:a5:c2:7a:47:81:f4:ae:df:6c:0e:ce:4f: dd:a8:ed:19:e6:dc:dc:f2:77:16:1a:5f:4e:9f:50:90:5a:60: 54:4f:88:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVfIQFLKlhOozUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YjYxY2Q5OGItM2ZkZS00OTRhLWFlNzAtNDIxOTgxMWRmNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7wWTvF8hf0rPNgEGP9fOwskXx+NpjWuNwVq FUrP1yg2y4ogF9bBTHAebiaj2Lx5kP0Reobnr2Npph9RE1pWnUkyTQxshpgdC8jN HmAFf2fKUTp7XfAm40rxJephGVkj3S8gE6jsLLomKLxvbzTaJascI+AkQsAaDXz4 q5d7CWpKXYaac+XnlZ9bjr/BG6/3UZuvbYoac0vxb4S8V3IOxQQmdHAobZdonHGJ 3kk2Oy08nBD9c0YTsLMOTI7CaIgCucJF3ssjVY5Dv70A5riuDYM1vOATdpWe3CPS d1tyia7sy2Oseu8osgyqy7iPUKdp7HH35ZWrJAGQ/gD3Xz8bjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArQWCrYrFKxuz4MODdLk5BAM2K9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvYmMxMWJlMmUtYTQxYi0z YjEyLThhZTEtYTJhMjE1MmJjNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcHi6pjdh2iS4vhkflgBBQGX3pEvlDTpRfeLLIdOo+w7vSiYKWWj0PQ et4ccdW38IdeHB+HtVwVu/8ZP9Eh1FA9lpw8MOg7q/i0XuTsv1u5J0U0iN+UE74b fyqqY+mYI+abbQq6sZIxUY7Sox986gYWxuBcINHK4Nk/oimATj3MbVhOpypTLQ+R f01+mBdsgKkny7CKQdq5SWsr1B9jnigpTyUjtbCgVJp6sqy/fknwtBqpIFLFQx5l 6cn8Q+pjIAE2urIZqbaXAaq23d8USb+eW+VwZgTG19WJicCs/aXCekeB9K7fbA7O T92o7Rnm3NzydxYaX06fUJBaYFRPiGs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:59:16 2025 by rpki-client