$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21573aa3-a118-3ab3-9f35-a9a123a2761d.roa File: 21573aa3-a118-3ab3-9f35-a9a123a2761d.roa (raw, json) Hash identifier: 3a5+7nn1OmCOk+ALHzqCSgwoTi1guionu5LuUtVqlcI= Subject key identifier: 38:52:41:B0:E4:C6:8F:40:2B:11:90:0D:38:2E:ED:90:19:3B:03:31 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849DDF4D80D23999309E6635000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21573aa3-a118-3ab3-9f35-a9a123a2761d.roa Signing time: Fri 16 May 2025 01:00:46 +0000 ROA not before: Fri 16 May 2025 01:00:46 +0000 ROA not after: Thu 14 Aug 2025 01:00:46 +0000 asID: 401152 IP address blocks: 205.186.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:f4:d8:0d:23:99:93:09:e6:63:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 16 01:00:46 2025 GMT Not After : Aug 14 01:00:46 2025 GMT Subject: CN=4fb38411-4e36-4614-bb3b-f189cba11404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:7d:e3:05:8a:87:21:21:6b:1e:2d:00:2c: 08:7d:f1:31:b1:60:b9:f3:20:aa:ae:21:6d:cb:34: 98:46:d1:b6:dc:88:be:f1:86:5b:8c:14:fc:c4:99: 98:de:ef:69:0b:04:01:69:d8:90:57:ca:13:e8:bf: a5:66:57:6f:db:ce:a2:b7:d9:65:bd:ee:b8:bd:94: 4c:b3:bf:b7:b1:fd:e2:29:13:2c:b9:a2:03:f0:c0: ed:4d:e7:eb:6e:6c:91:f3:2e:4e:b5:e6:79:6d:3e: e9:b2:c7:36:d9:dc:6f:70:a8:37:0f:83:06:1e:8a: aa:8b:6f:ea:dc:96:2e:0c:d5:f8:2b:40:8c:44:ac: db:40:ad:62:60:af:c6:65:66:96:43:7f:91:93:72: 74:96:4b:11:86:2b:be:3d:a5:d8:9f:4c:76:05:ef: 9a:33:75:43:f4:bf:b7:94:af:ea:46:ae:1d:9f:b6: 41:cf:3d:c2:75:e4:52:a9:ff:37:85:b1:6a:55:2a: ad:f8:a9:33:e2:15:d9:19:c4:be:c6:54:f5:6a:64: 69:23:45:51:63:2c:33:9f:82:bd:c3:13:10:58:8a: 08:55:de:16:27:9b:e8:61:41:5b:c6:4b:3c:4a:ef: 9a:d9:6d:a1:5f:da:a0:02:49:6f:cc:e2:50:08:a8: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:52:41:B0:E4:C6:8F:40:2B:11:90:0D:38:2E:ED:90:19:3B:03:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21573aa3-a118-3ab3-9f35-a9a123a2761d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 205.186.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c2:c7:1f:8c:00:01:66:eb:12:2c:d5:17:e5:d1:5c:8c:e8: 2e:51:99:83:e4:b0:30:93:a2:cc:f2:7a:56:48:48:cb:fb:4c: ef:93:8a:a4:38:82:9e:75:79:68:6f:c6:66:b8:f3:c9:3c:98: 82:45:1b:65:c6:0d:35:79:39:4e:c7:de:c6:90:02:70:31:a7: 9c:8f:d8:6f:8b:ec:90:1c:7b:b5:56:64:0a:af:5e:70:08:06: c6:f2:b2:82:03:11:03:bc:89:73:af:98:4c:a3:41:49:a4:18: 51:74:f4:c4:d5:c8:03:11:9d:4f:b9:49:3b:20:88:e4:aa:3b: 27:47:04:57:79:bf:a1:57:c9:05:0a:23:48:a3:79:3b:de:19: cf:fb:ad:04:1a:9b:3b:cb:60:fe:ae:86:b0:a9:b5:a2:19:93: 26:69:17:f6:7a:c8:d9:ee:5d:f3:d6:be:0a:ab:a1:34:cd:29: fa:e0:f2:cb:30:12:d1:de:6e:c0:20:42:3b:e4:b8:84:0f:b9: 25:6e:62:7f:af:4a:46:15:a0:39:32:1f:ee:19:8f:b2:12:5e: 1e:d2:ed:da:51:f6:34:f0:26:11:4d:9c:28:b0:5a:65:89:cc: d2:00:b4:77:6d:0d:98:f0:eb:cb:61:6a:12:69:08:a0:d9:b3: d5:c2:31:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnd9NgNI5mTCeZjUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk NGZiMzg0MTEtNGUzNi00NjE0LWJiM2ItZjE4OWNiYTExNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAp94wWKhyEhax4tACwIffExsWC58yCqriFt yzSYRtG23Ii+8YZbjBT8xJmY3u9pCwQBadiQV8oT6L+lZldv286it9llve64vZRM s7+3sf3iKRMsuaID8MDtTefrbmyR8y5OteZ5bT7pssc22dxvcKg3D4MGHoqqi2/q 3JYuDNX4K0CMRKzbQK1iYK/GZWaWQ3+Rk3J0lksRhiu+PaXYn0x2Be+aM3VD9L+3 lK/qRq4dn7ZBzz3CdeRSqf83hbFqVSqt+Kkz4hXZGcS+xlT1amRpI0VRYywzn4K9 wxMQWIoIVd4WJ5voYUFbxks8Su+a2W2hX9qgAklvzOJQCKgTFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhSQbDkxo9AKxGQDTgu7ZAZOwMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjE1NzNhYTMtYTExOC0z YWIzLTlmMzUtYTlhMTIzYTI3NjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzbpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTCxx+MAAFm6xIs1Rfl0VyM6C5RmYPksDCToszyelZISMv7TO+TiqQ4 gp51eWhvxma488k8mIJFG2XGDTV5OU7H3saQAnAxp5yP2G+L7JAce7VWZAqvXnAI BsbysoIDEQO8iXOvmEyjQUmkGFF09MTVyAMRnU+5STsgiOSqOydHBFd5v6FXyQUK I0ijeTveGc/7rQQamzvLYP6uhrCptaIZkyZpF/Z6yNnuXfPWvgqroTTNKfrg8ssw EtHebsAgQjvkuIQPuSVuYn+vSkYVoDkyH+4Zj7ISXh7S7dpR9jTwJhFNnCiwWmWJ zNIAtHdtDZjw68thahJpCKDZs9XCMYI= -----END CERTIFICATE-----Generated at Sun Jun 15 05:05:26 2025 by rpki-client