$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa File: 31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa (raw, json) Hash identifier: T7Nz10W6rpAvHrs1e0kVPOw6Zv9Xrp3Z3kl8q+MZ/eY= Subject key identifier: 50:EA:BF:3C:67:A7:69:6A:8A:04:35:70:DD:E9:4D:93:A9:11:37:18 Certificate issuer: /CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55 Certificate serial: 010D0C9F43285849F87A83B24620DFBBD0262C00 Authority key identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 16509 IP address blocks: 204.17.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:83:b2:46:20:df:bb:d0:26:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=7501dd28-981b-49b2-97fb-bc73edbc1396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:65:ba:5a:28:0b:70:42:90:6b:1e:ae:57: 0b:29:36:df:33:9c:ed:c0:a6:9b:d1:4d:33:66:bb: 6a:2f:d0:85:41:b9:5a:05:cc:c1:42:e9:c1:ed:15: 42:9d:12:5b:74:5e:93:c8:b5:92:44:b2:61:31:7e: 75:54:70:9d:3a:98:1a:e0:37:be:a2:ed:40:0a:95: 9d:b6:58:ac:c5:f6:bb:2b:cd:40:1e:aa:6d:9f:e4: ea:dc:13:3d:31:6f:f7:41:7f:52:8f:ce:2d:c5:c2: 72:39:d3:28:ff:ac:a4:a7:54:76:db:71:17:e6:ce: 1b:84:cf:23:fa:3e:d4:6e:f0:c1:61:62:1e:23:45: 9e:12:b3:7f:e9:3a:d5:68:eb:91:bb:b5:af:56:68: 0d:fe:55:09:53:de:91:c8:fc:13:b4:38:a2:68:04: 08:3e:81:04:52:0d:1f:b0:5e:38:ca:91:5b:84:a2: fe:8d:80:19:f9:b0:1e:50:ab:67:a9:44:a2:f0:ce: 92:20:46:a0:3a:0b:40:e7:81:33:1b:27:ee:1b:d3: 86:72:a4:d7:3b:7b:76:a9:97:86:62:d7:1e:4b:00: 07:02:df:71:3a:38:84:b5:96:5a:f8:18:62:8c:0f: f1:0c:41:39:10:47:47:50:9d:8a:a8:b0:f2:95:b2: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EA:BF:3C:67:A7:69:6A:8A:04:35:70:DD:E9:4D:93:A9:11:37:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl X509v3 Authority Key Identifier: keyid:3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer sbgp-ipAddrBlock: critical IPv4: 204.17.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3d:62:83:dd:b8:d9:3c:0b:51:e1:c8:22:b3:42:82:44:1b: 89:1f:07:8a:aa:f8:8a:1b:24:e0:ca:57:68:2e:b1:41:a6:01: 79:f7:61:8f:b1:11:f7:b3:a3:34:43:66:a5:69:37:3b:3f:44: 23:47:b7:e7:2e:a6:5a:9b:8c:91:72:9e:17:10:d1:09:7a:ea: 59:ef:01:a5:92:22:5e:36:9a:f0:55:39:06:80:fe:fb:12:d6: 77:20:87:7f:1a:29:eb:df:5d:3e:94:58:17:79:7f:ce:b7:33: c4:10:3f:e0:13:90:06:ad:47:39:51:f0:b0:bc:21:83:b8:22: fc:17:42:8e:d6:92:a3:e6:5c:e4:9b:94:8b:c2:5b:b1:df:35: f4:49:df:73:90:6e:c9:6b:be:c9:dd:38:dd:d9:e9:ef:8a:b0: 0d:17:02:e9:fc:22:34:2e:3d:9b:06:e8:06:11:74:97:87:1b: 5a:f9:f1:cf:d6:26:42:7c:76:92:47:e1:29:65:5d:19:ca:71: a0:c3:c5:85:db:ca:16:d8:93:df:53:df:7f:57:16:34:28:46: 1c:8a:58:89:76:31:78:f3:d1:21:db:ec:8b:53:4f:c6:a7:cd: c2:06:c0:47:8b:9e:1c:9b:08:7b:9a:c9:98:d7:8b:42:4c:81: d2:b9:b7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoOyRiDfu9AmLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4MTM5YmEtMDZhNy00YjMxLWJhZjctZDQwYWY3MGZk YzU1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NzUwMWRkMjgtOTgxYi00OWIyLTk3ZmItYmM3M2VkYmMxMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ItlulooC3BCkGserlcLKTbfM5ztwKab0U0z ZrtqL9CFQblaBczBQunB7RVCnRJbdF6TyLWSRLJhMX51VHCdOpga4De+ou1ACpWd tlisxfa7K81AHqptn+Tq3BM9MW/3QX9Sj84txcJyOdMo/6ykp1R223EX5s4bhM8j +j7UbvDBYWIeI0WeErN/6TrVaOuRu7WvVmgN/lUJU96RyPwTtDiiaAQIPoEEUg0f sF44ypFbhKL+jYAZ+bAeUKtnqUSi8M6SIEagOgtA54EzGyfuG9OGcqTXO3t2qZeG YtceSwAHAt9xOjiEtZZa+BhijA/xDEE5EEdHUJ2KqLDylbIdjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDqvzxnp2lqigQ1cN3pTZOpETcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjgx MzliYS0wNmE3LTRiMzEtYmFmNy1kNDBhZjcwZmRjNTUvMzFkMDI1ZmQtN2VhNy0z ZjVmLWEyYWItOGFjMzcxMzRiMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4MTM5YmEtMDZhNy00YjMxLWJh ZjctZDQwYWY3MGZkYzU1LzNmODEzOWJhLTA2YTctNGIzMS1iYWY3LWQ0MGFmNzBm ZGM1NS5jcmwwHwYDVR0jBBgwFoAUPZmV4/+hejRvYSI8UPMQM9oeEUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjgxMzliYS0wNmE3LTRiMzEtYmFmNy1kNDBh ZjcwZmRjNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzBEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA9YoPduNk8C1HhyCKzQoJEG4kfB4qq+IobJODKV2gusUGmAXn3YY+x EfezozRDZqVpNzs/RCNHt+cuplqbjJFynhcQ0Ql66lnvAaWSIl42mvBVOQaA/vsS 1ncgh38aKevfXT6UWBd5f863M8QQP+ATkAatRzlR8LC8IYO4IvwXQo7WkqPmXOSb lIvCW7HfNfRJ33OQbslrvsndON3Z6e+KsA0XAun8IjQuPZsG6AYRdJeHG1r58c/W JkJ8dpJH4SllXRnKcaDDxYXbyhbYk99T339XFjQoRhyKWIl2MXjz0SHb7ItTT8an zcIGwEeLnhybCHuayZjXi0JMgdK5t/A= -----END CERTIFICATE-----Generated at Sat Jun 14 06:00:58 2025 by rpki-client