$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa File: 0077d0e6-3054-34f9-b282-d9e73da3017f.roa (raw, json) Hash identifier: usBPdJ/N+U6lyM7SYA5AGsWttpEVB4UMaYW2BvnfEKQ= Subject key identifier: 3D:B0:55:82:2D:A4:00:68:9F:71:2B:5D:AF:39:8C:87:47:22:C0:E0 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849B57A18E31EC0047926643300 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 36549 IP address blocks: 204.180.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:18:e3:1e:c0:04:79:26:64:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=98a319c1-65c3-42e9-847b-0f2436678b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:52:8f:a4:12:93:10:40:a2:0c:7b:8c:68:0f: 5f:77:16:a5:60:e3:90:b8:8f:f7:31:9b:94:e4:5f: 56:14:d3:ef:43:8d:c3:7d:d5:1f:ef:36:11:ca:a3: 6b:ab:88:c1:ab:2f:8e:65:dc:7f:8c:40:b2:9b:52: 50:2e:b1:28:8e:d8:d7:fd:fa:c8:f4:f7:66:14:0d: 88:bd:ac:cc:c8:61:fd:54:8b:09:eb:e1:d6:8f:cf: 8d:ef:9b:18:05:2a:ac:a7:c2:6a:b3:27:ea:05:71: 47:c9:c7:07:33:e3:79:1a:4e:ca:f5:8b:12:57:51: 24:87:eb:81:3e:0d:f3:68:95:15:c2:91:0f:cb:24: 10:d8:48:ee:7e:21:4a:16:09:ae:6f:88:35:fe:f1: d3:85:85:a0:0d:17:93:f8:9e:5a:95:c9:bd:d6:2a: 13:41:9a:70:ea:f9:b5:20:3b:50:f7:27:b1:65:cd: e3:4d:7e:23:66:22:93:c0:1d:87:17:e7:e5:6d:a7: af:44:36:e2:3a:b9:d1:56:db:fb:ab:27:0d:9b:8d: f0:4c:a8:dd:33:46:88:2b:ca:15:81:ee:55:8b:0a: b0:ab:67:31:94:1c:a3:25:f0:6f:2b:3c:fe:52:bd: a2:4f:6f:5f:70:98:19:35:89:6f:68:4f:00:ab:8c: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B0:55:82:2D:A4:00:68:9F:71:2B:5D:AF:39:8C:87:47:22:C0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.180.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4f:ec:1c:ca:cf:4e:bb:6f:ec:eb:03:0f:e2:43:8a:e4:64: 93:67:64:82:8d:18:06:0a:2a:e3:d0:bc:08:fc:bd:5c:a9:63: 50:bb:c8:93:84:0d:b0:ed:d6:4b:90:89:7d:61:29:c7:58:c1: 8e:60:25:b5:cf:a5:75:27:78:ae:10:8e:30:cf:d1:f7:ea:40: 9b:a2:7e:ab:dd:d9:c8:8f:42:98:2c:b8:d0:3e:31:61:a9:fa: db:76:e0:2c:b9:e3:24:6c:c1:15:e8:cc:b5:4c:fc:9c:30:04: 74:48:74:b6:ac:9a:ce:63:fc:3b:f4:ba:13:78:41:d5:29:47: 41:e1:6b:24:21:ea:90:62:9e:ca:f3:95:37:d3:94:9a:64:3e: 22:07:ac:02:b5:6f:e8:bc:8f:c6:1a:67:02:32:e8:26:e0:cd: 4b:01:69:53:81:f4:91:b0:01:f0:7e:9f:8e:1c:0e:ba:07:62: ba:67:0c:e9:40:f0:92:c7:dc:c0:bf:ba:4f:c3:cb:d8:34:e3: 1e:e4:55:77:30:22:0d:7f:9c:c0:01:a4:78:32:fc:0c:60:b6: 32:2b:fc:8c:57:6b:be:9f:b3:18:97:b1:2c:b1:80:20:4d:86: a6:57:bf:e4:1d:25:46:dc:04:fa:b4:77:9d:7a:65:86:3b:e0: ab:ce:da:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ehjjHsAEeSZkMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk OThhMzE5YzEtNjVjMy00MmU5LTg0N2ItMGYyNDM2Njc4YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFKPpBKTEECiDHuMaA9fdxalYOOQuI/3MZuU 5F9WFNPvQ43DfdUf7zYRyqNrq4jBqy+OZdx/jECym1JQLrEojtjX/frI9PdmFA2I vazMyGH9VIsJ6+HWj8+N75sYBSqsp8JqsyfqBXFHyccHM+N5Gk7K9YsSV1Ekh+uB Pg3zaJUVwpEPyyQQ2EjufiFKFgmub4g1/vHThYWgDReT+J5alcm91ioTQZpw6vm1 IDtQ9yexZc3jTX4jZiKTwB2HF+flbaevRDbiOrnRVtv7qycNm43wTKjdM0aIK8oV ge5Viwqwq2cxlByjJfBvKzz+Ur2iT29fcJgZNYlvaE8Aq4wnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2wVYItpABon3ErXa85jIdHIsDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDA3N2QwZTYtMzA1NC0z NGY5LWIyODItZDllNzNkYTMwMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzLQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtP7BzKz067b+zrAw/iQ4rkZJNnZIKNGAYKKuPQvAj8vVypY1C7yJOE DbDt1kuQiX1hKcdYwY5gJbXPpXUneK4QjjDP0ffqQJuifqvd2ciPQpgsuNA+MWGp +tt24Cy54yRswRXozLVM/JwwBHRIdLasms5j/Dv0uhN4QdUpR0HhayQh6pBinsrz lTfTlJpkPiIHrAK1b+i8j8YaZwIy6CbgzUsBaVOB9JGwAfB+n44cDroHYrpnDOlA 8JLH3MC/uk/Dy9g04x7kVXcwIg1/nMABpHgy/AxgtjIr/IxXa76fsxiXsSyxgCBN hqZXv+QdJUbcBPq0d516ZYY74KvO2kE= -----END CERTIFICATE-----Generated at Mon Jun 16 10:59:09 2025 by rpki-client