$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa File: d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa (raw, json) Hash identifier: O/P8qhv+CUJvO872OD+Qk3qwPLHCGmezAb5h+0VWtN8= Subject key identifier: 74:D9:54:04:B3:AA:F2:A2:9A:20:25:53:35:C6:55:36:DE:A0:20:44 Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1 Certificate serial: 010D0C9F4328584A0C055B04319704D0D7866380 Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 204.11.174.0/24 maxlen: 24 204.11.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5b:04:31:97:04:d0:d7:86:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5b9005ac-e0cb-43f2-88b0-7db9063f771b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a0:c9:d0:e4:5e:d4:91:76:f9:19:de:dc:52: ef:f4:ab:d1:5f:a2:32:bd:3a:16:be:71:7c:63:49: c0:be:56:52:84:d0:45:7e:f6:37:44:57:0d:86:0a: 95:37:b7:d8:b5:79:8a:51:19:7b:5a:e6:43:1e:b4: 2e:0f:09:0f:c6:50:bc:4b:b2:be:3f:94:55:00:36: 7a:53:70:50:d3:b1:be:c3:15:65:99:df:6f:22:1f: 1b:8b:f5:14:f7:dc:48:73:33:9e:1b:94:cb:59:a3: 00:6d:90:d7:c2:6c:71:79:4e:2e:1e:2f:a3:5e:31: e8:47:f3:2c:63:8c:4a:ab:38:30:62:27:3a:99:71: 03:2f:9f:f0:8f:85:51:4f:02:83:f8:62:a3:e1:c4: 32:a5:2f:84:97:d9:ef:9a:70:1d:cf:b8:7c:77:ce: b7:5a:6c:40:5a:27:13:93:79:ae:1b:39:8d:03:db: e6:24:6f:e2:6d:fb:43:56:3a:8a:f3:ec:bf:53:6d: 9a:de:46:76:cd:9f:ad:bf:c6:f3:19:55:bb:85:48: b4:dd:49:d4:5d:b8:89:58:64:57:14:14:f2:27:5e: 53:a4:75:16:d0:c0:61:0b:9e:fc:f0:e5:bd:3d:dd: 47:98:3a:f5:19:a6:53:38:cf:9d:78:23:84:1f:89: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:54:04:B3:AA:F2:A2:9A:20:25:53:35:C6:55:36:DE:A0:20:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl X509v3 Authority Key Identifier: keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4b:24:c1:bb:e5:f4:1b:43:63:49:db:ad:59:06:04:c4:5e: 87:d0:20:cd:3a:ab:3a:74:a9:2d:40:67:0c:7b:9c:7d:e6:14: ab:ea:69:da:99:e5:25:b5:d5:db:41:8a:50:39:3d:8f:be:c9: 49:93:02:f8:f5:c8:02:cb:e0:6c:01:4d:d0:b9:79:8f:81:71: 66:88:52:90:7a:44:66:82:0f:07:03:1f:89:a6:35:58:9c:26: c3:8a:45:9e:d8:18:74:4e:98:2b:aa:ef:1b:7a:66:05:56:b8: 13:4a:81:72:cb:ed:7c:f7:46:86:0a:5d:21:0f:2f:0f:83:9d: a3:e5:c5:54:3e:fe:5d:7f:d7:6e:5d:c5:58:90:2e:0f:5a:2d: 2e:3d:ea:29:b8:62:30:4a:6b:f3:12:7d:36:44:e4:3e:2d:f4: 5a:27:95:ef:d3:b2:fa:5e:7b:74:1e:14:71:0a:06:d0:bd:45: a4:c6:5d:e0:54:da:f5:88:68:51:de:6b:54:df:27:da:71:b6: a4:ed:87:79:ee:cc:c9:f8:ba:b5:2a:62:cd:86:5f:1b:43:33: 05:58:77:2d:78:47:4e:9e:91:89:f7:cd:64:0e:2b:c5:ac:39: b7:03:ad:95:c1:58:88:e8:ae:92:3c:35:94:7e:64:66:85:e9: 6e:d0:e5:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVsEMZcE0NeGY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NjA1NDEtZGZlOS00M2RmLTgyNzctODZkODNhYTYx MGExMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NWI5MDA1YWMtZTBjYi00M2YyLTg4YjAtN2RiOTA2M2Y3NzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqDJ0ORe1JF2+Rne3FLv9KvRX6IyvToWvnF8 Y0nAvlZShNBFfvY3RFcNhgqVN7fYtXmKURl7WuZDHrQuDwkPxlC8S7K+P5RVADZ6 U3BQ07G+wxVlmd9vIh8bi/UU99xIczOeG5TLWaMAbZDXwmxxeU4uHi+jXjHoR/Ms Y4xKqzgwYic6mXEDL5/wj4VRTwKD+GKj4cQypS+El9nvmnAdz7h8d863WmxAWicT k3muGzmNA9vmJG/ibftDVjqK8+y/U22a3kZ2zZ+tv8bzGVW7hUi03UnUXbiJWGRX FBTyJ15TpHUW0MBhC5788OW9Pd1HmDr1GaZTOM+deCOEH4l9ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTZVASzqvKimiAlUzXGVTbeoCBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2 MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4M2FhNjEwYTEvZDkwMDE3YzMtYTc3ZC0z Y2QyLTljNjgtM2Q1MmY2ZWQ2MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1NjA1NDEtZGZlOS00M2RmLTgy NzctODZkODNhYTYxMGExLzhkNTYwNTQxLWRmZTktNDNkZi04Mjc3LTg2ZDgzYWE2 MTBhMS5jcmwwHwYDVR0jBBgwFoAUi7I9L4V+VkiemW6Bz6BLaUihXO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4 M2FhNjEwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAuuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFLJMG75fQbQ2NJ261ZBgTEXofQIM06qzp0qS1AZwx7nH3mFKvqadqZ 5SW11dtBilA5PY++yUmTAvj1yALL4GwBTdC5eY+BcWaIUpB6RGaCDwcDH4mmNVic JsOKRZ7YGHROmCuq7xt6ZgVWuBNKgXLL7Xz3RoYKXSEPLw+DnaPlxVQ+/l1/125d xViQLg9aLS496im4YjBKa/MSfTZE5D4t9Fonle/Tsvpee3QeFHEKBtC9RaTGXeBU 2vWIaFHea1TfJ9pxtqTth3nuzMn4urUqYs2GXxtDMwVYdy14R06ekYn3zWQOK8Ws ObcDrZXBWIjorpI8NZR+ZGaF6W7Q5Yw= -----END CERTIFICATE-----Generated at Sat Jun 14 07:00:15 2025 by rpki-client