$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa File: 2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa (raw, json) Hash identifier: xmdlmOyE4mqfN9lY2y/jBhNhHX2jXmwklQqBFExYu88= Subject key identifier: ED:68:07:C8:38:55:83:FC:50:75:D6:C3:33:B6:6B:D5:D3:6F:71:05 Certificate issuer: /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Certificate serial: 010D0C9F4328584A268AC20CB1742CD3834C7CC0 Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 11248 IP address blocks: 204.8.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c2:0c:b1:74:2c:d3:83:4c:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=4cad7b3a-1119-4194-be7a-8a387587addf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:44:b8:38:9a:7a:2a:0a:50:c7:8f:55:df: a3:8d:1f:51:a7:67:39:eb:fc:0e:e2:9a:81:64:98: ee:94:a9:a8:5e:b6:2c:2d:3f:f0:4b:de:e7:0f:e7: a0:dd:15:92:95:d5:cc:1c:c7:f6:18:df:54:ed:89: 5f:57:58:3d:96:d7:a7:26:f3:5f:24:82:f6:e7:ac: cb:e8:d0:ab:ea:20:49:47:9e:fa:87:92:62:06:ac: ed:ca:69:4c:00:77:92:8d:90:7b:50:29:21:ea:62: ab:6a:e2:83:71:b7:66:e1:48:c3:63:b6:85:40:57: 82:a6:d2:9a:2e:6a:84:1e:60:86:ce:67:58:29:1e: 39:5a:08:81:47:7f:d9:bc:7c:98:0d:90:21:17:90: 38:0d:e7:0a:9d:68:cf:84:c2:d3:86:bf:3e:9f:67: 4b:87:97:41:34:92:72:69:7f:d5:33:e9:21:76:f0: e0:4b:a0:48:30:9a:3f:e1:6e:0f:60:46:64:ae:a0: 6e:3c:f5:9b:2e:0f:b1:74:cb:dc:08:ad:1d:bd:56: 70:1b:10:b6:36:bd:f5:12:17:c9:dd:7a:3a:13:de: 71:28:2b:ed:c0:f2:d5:4c:c8:4c:6e:fb:17:dd:b1: 39:f0:65:cc:44:8d:cc:69:96:31:52:c5:b0:ab:ed: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:07:C8:38:55:83:FC:50:75:D6:C3:33:B6:6B:D5:D3:6F:71:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl X509v3 Authority Key Identifier: keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer sbgp-ipAddrBlock: critical IPv4: 204.8.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d9:b0:40:e6:b7:30:0a:24:92:39:3b:e1:4e:6f:6c:6e:6c: 94:db:60:3e:0c:4a:f7:8d:8b:7b:0a:95:4d:10:dc:b1:4e:fc: 31:63:18:01:58:07:25:39:bf:f5:34:ab:fb:80:b8:7c:cb:fa: 05:29:b6:fc:5f:5f:d7:bd:ed:ed:c5:8f:25:dd:1e:fd:1d:84: 3e:00:e8:3b:cf:27:29:f3:ea:be:ef:37:b1:f2:12:d9:49:07: 27:dc:ce:1a:9b:30:50:36:39:08:50:24:84:4a:8c:58:8a:cd: f5:30:f1:ae:49:ef:7e:e6:a5:58:8d:eb:76:75:65:58:6a:2a: 05:db:70:2a:54:fe:cc:7f:26:d4:80:83:cc:ab:53:35:ab:a6: 06:b6:de:5a:fb:65:9f:b4:69:6b:54:ba:76:15:cf:c4:eb:00: 16:2e:87:1c:f7:6b:2b:76:4b:36:59:fd:b2:89:5f:0c:ba:52: c6:3f:29:c0:16:ca:1e:72:78:91:22:62:1f:bc:e8:d3:86:df: 07:91:9e:76:52:f6:c0:42:54:ef:93:e5:77:4d:d0:0e:0c:e9: f5:63:9e:14:fc:0e:34:3c:2d:43:e5:09:7b:87:68:11:ff:85: d2:4f:54:3c:94:d8:8f:9f:b4:f9:7f:dd:f7:5a:78:35:79:80: 23:e9:fa:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisIMsXQs04NMfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRlZjY3OWEtYjMxNC00YWQ2LTkwYmItZjdkMmJmYzBj ZGExMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NGNhZDdiM2EtMTExOS00MTk0LWJlN2EtOGEzODc1ODdhZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTREuDiaeioKUMePVd+jjR9Rp2c56/wO4pqB ZJjulKmoXrYsLT/wS97nD+eg3RWSldXMHMf2GN9U7YlfV1g9ltenJvNfJIL256zL 6NCr6iBJR576h5JiBqztymlMAHeSjZB7UCkh6mKrauKDcbdm4UjDY7aFQFeCptKa LmqEHmCGzmdYKR45WgiBR3/ZvHyYDZAhF5A4DecKnWjPhMLThr8+n2dLh5dBNJJy aX/VM+khdvDgS6BIMJo/4W4PYEZkrqBuPPWbLg+xdMvcCK0dvVZwGxC2Nr31EhfJ 3Xo6E95xKCvtwPLVTMhMbvsX3bE58GXMRI3MaZYxUsWwq+2xrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1oB8g4VYP8UHXWwzO2a9XTb3EFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVm Njc5YS1iMzE0LTRhZDYtOTBiYi1mN2QyYmZjMGNkYTEvMmYxNzNlMjctZTFkNC0z NzI4LWIxMGMtN2NmNDQ4ZWVlN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjRlZjY3OWEtYjMxNC00YWQ2LTkw YmItZjdkMmJmYzBjZGExL2I0ZWY2NzlhLWIzMTQtNGFkNi05MGJiLWY3ZDJiZmMw Y2RhMS5jcmwwHwYDVR0jBBgwFoAUHw20UM5XU32LvCw/nGuJExAZCIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVmNjc5YS1iMzE0LTRhZDYtOTBiYi1mN2Qy YmZjMGNkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTZsEDmtzAKJJI5O+FOb2xubJTbYD4MSveNi3sKlU0Q3LFO/DFjGAFY ByU5v/U0q/uAuHzL+gUptvxfX9e97e3FjyXdHv0dhD4A6DvPJynz6r7vN7HyEtlJ ByfczhqbMFA2OQhQJIRKjFiKzfUw8a5J737mpViN63Z1ZVhqKgXbcCpU/sx/JtSA g8yrUzWrpga23lr7ZZ+0aWtUunYVz8TrABYuhxz3ayt2SzZZ/bKJXwy6UsY/KcAW yh5yeJEiYh+86NOG3weRnnZS9sBCVO+T5XdN0A4M6fVjnhT8DjQ8LUPlCXuHaBH/ hdJPVDyU2I+ftPl/3fdaeDV5gCPp+pQ= -----END CERTIFICATE-----Generated at Sun Jun 15 21:17:56 2025 by rpki-client