$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa File: ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa (raw, json) Hash identifier: qckmopMPQxbRDzUWXl7PTC+xDO/hKAjqdqZruQxD79c= Subject key identifier: 4A:19:51:9A:6D:70:EA:91:E6:71:93:EA:99:B8:EA:68:50:93:8F:A7 Certificate issuer: /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Certificate serial: 010D0C9F4328584A268AC1B2AEF4A77CA42EB880 Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 204.8.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c1:b2:ae:f4:a7:7c:a4:2e:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=2d4cd6b7-71f6-4875-bc55-acd22456e890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:90:ec:a0:12:5a:79:87:9f:cc:06:1b:13: 46:ba:ef:7d:0b:2d:ae:bf:c5:66:37:12:ba:12:10: fc:df:e7:d2:aa:82:b2:7f:b7:d6:05:7d:af:bf:86: d2:6c:54:d4:ad:fa:1c:97:db:a5:92:ee:8b:23:26: cb:1a:42:55:80:70:d7:d8:1f:ec:e2:27:74:83:cf: c2:b5:b9:5a:71:64:9b:9d:06:41:7b:3c:a2:7a:06: d1:fa:e0:1f:33:09:85:0e:1f:51:eb:8e:8f:be:95: 1d:68:54:9c:5d:81:bb:47:bf:63:a6:48:1a:81:6a: 2e:84:1e:30:c4:3a:27:d1:35:60:a9:62:84:64:84: 31:36:96:5b:78:ce:a4:b7:b6:3f:d9:37:fb:b0:fe: 66:fb:89:43:da:11:63:ef:ee:e2:15:bc:12:67:6f: 57:f0:15:d0:24:06:c1:03:0b:d4:33:d8:08:64:03: 25:d0:d0:e4:07:a5:ed:58:6f:7a:88:9b:cd:45:22: 23:17:ba:d7:2b:2d:c5:ca:43:f9:b7:70:a6:2f:2f: d8:62:40:0a:90:3c:e7:80:27:0b:9e:18:2a:cf:1f: c8:bb:7d:fd:fe:c4:e3:25:89:d4:ce:22:c3:fb:0e: a2:d0:e3:db:a6:3f:97:c9:52:6f:77:83:35:80:50: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:51:9A:6D:70:EA:91:E6:71:93:EA:99:B8:EA:68:50:93:8F:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl X509v3 Authority Key Identifier: keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer sbgp-ipAddrBlock: critical IPv4: 204.8.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e8:3a:60:48:53:16:cf:6c:4c:90:22:48:7c:57:2c:4e:9a: b0:3d:53:e1:77:13:85:46:df:26:a0:0f:aa:19:c4:9a:92:0b: 8e:a4:fd:b6:94:e7:1c:65:65:ac:8d:ee:e9:64:c7:65:f2:f3: 82:ac:49:79:bd:f9:d6:3c:61:e7:2a:da:b4:db:13:b5:5d:6c: d8:0a:e9:3e:cd:22:bc:a4:5d:61:73:82:47:57:6d:74:42:c6: e0:f2:eb:b3:b9:de:25:67:5a:89:d1:bd:d6:f8:3f:39:e1:e9: 62:70:d5:11:da:93:d9:0a:ac:2a:62:41:5c:12:40:bb:3b:95: 13:65:11:bc:07:fc:30:d2:b1:12:c9:f4:c0:b8:90:8a:a1:54: 99:73:5a:fa:f4:d5:cd:a1:5a:23:f2:56:35:85:b6:05:35:95: f9:37:9e:ab:ca:8a:76:f4:aa:c9:1c:18:fd:86:ef:97:37:f6: 76:57:16:db:d5:72:a5:8e:df:25:69:7a:04:88:9b:16:7d:21: fd:76:5a:0d:7c:ce:f0:6c:a8:4e:cb:58:c2:98:49:76:03:08: 53:ae:83:4b:ca:de:3e:02:a9:de:36:72:a0:47:57:8d:d3:4c: 20:3d:61:dc:9e:f1:0b:21:c3:64:99:5a:2f:b9:93:62:95:bf: e0:22:8d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisGyrvSnfKQuuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRlZjY3OWEtYjMxNC00YWQ2LTkwYmItZjdkMmJmYzBj ZGExMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MmQ0Y2Q2YjctNzFmNi00ODc1LWJjNTUtYWNkMjI0NTZlODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib2Q7KASWnmHn8wGGxNGuu99Cy2uv8VmNxK6 EhD83+fSqoKyf7fWBX2vv4bSbFTUrfocl9ulku6LIybLGkJVgHDX2B/s4id0g8/C tblacWSbnQZBezyiegbR+uAfMwmFDh9R646PvpUdaFScXYG7R79jpkgagWouhB4w xDon0TVgqWKEZIQxNpZbeM6kt7Y/2Tf7sP5m+4lD2hFj7+7iFbwSZ29X8BXQJAbB AwvUM9gIZAMl0NDkB6XtWG96iJvNRSIjF7rXKy3FykP5t3CmLy/YYkAKkDzngCcL nhgqzx/Iu339/sTjJYnUziLD+w6i0OPbpj+XyVJvd4M1gFAURQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoZUZptcOqR5nGT6pm46mhQk4+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVm Njc5YS1iMzE0LTRhZDYtOTBiYi1mN2QyYmZjMGNkYTEvZWY2MmM1ZWEtYmI1Yi0z MWI0LTljMTEtODY3M2JhYmNiMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjRlZjY3OWEtYjMxNC00YWQ2LTkw YmItZjdkMmJmYzBjZGExL2I0ZWY2NzlhLWIzMTQtNGFkNi05MGJiLWY3ZDJiZmMw Y2RhMS5jcmwwHwYDVR0jBBgwFoAUHw20UM5XU32LvCw/nGuJExAZCIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVmNjc5YS1iMzE0LTRhZDYtOTBiYi1mN2Qy YmZjMGNkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGboOmBIUxbPbEyQIkh8VyxOmrA9U+F3E4VG3yagD6oZxJqSC46k/baU 5xxlZayN7ulkx2Xy84KsSXm9+dY8Yecq2rTbE7VdbNgK6T7NIrykXWFzgkdXbXRC xuDy67O53iVnWonRvdb4Pznh6WJw1RHak9kKrCpiQVwSQLs7lRNlEbwH/DDSsRLJ 9MC4kIqhVJlzWvr01c2hWiPyVjWFtgU1lfk3nqvKinb0qskcGP2G75c39nZXFtvV cqWO3yVpegSImxZ9If12Wg18zvBsqE7LWMKYSXYDCFOug0vK3j4Cqd42cqBHV43T TCA9Ydye8Qshw2SZWi+5k2KVv+AijcI= -----END CERTIFICATE-----Generated at Sun Jun 15 11:36:11 2025 by rpki-client