$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa File: d9ed5857-01ca-3449-a400-25ab44cbe450.roa (raw, json) Hash identifier: 3uwIByHe5uPgaYZN8aZOxyR9CBb0L0jo7w459chxozw= Subject key identifier: 6E:88:53:EE:90:C1:97:35:26:ED:68:A7:E3:18:CA:DF:6B:DD:55:C2 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F43285849F17FD047D99E0F70D8EFA080 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 22925 IP address blocks: 205.201.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d0:47:d9:9e:0f:70:d8:ef:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=4af187eb-991c-461b-b6a8-a0c09f61b54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:78:a9:e0:61:2a:db:37:3b:de:f1:b8:18: bb:8c:4c:96:ae:ed:54:66:12:3b:38:46:8d:ed:6b: 29:56:5e:99:5a:33:2b:a4:a5:36:05:ea:b2:0d:95: b9:c2:f0:ad:21:3c:48:2d:b3:76:8f:e4:1d:ac:6b: 9c:a3:87:df:49:c7:41:cd:29:18:55:f5:68:05:9b: 70:74:34:34:0a:f8:4a:5c:4c:91:b1:15:99:24:26: ed:85:8a:d7:83:a2:94:7d:e4:19:b7:8b:fe:ef:9f: 02:1d:5a:1b:e1:91:11:d1:bc:cd:ab:55:d4:18:47: f7:01:94:aa:07:74:77:b7:7e:fb:85:1a:23:bd:82: 6f:0d:d2:6d:1a:c4:95:da:10:43:a5:a0:e5:85:29: a8:3c:a2:93:68:2f:bb:2d:6b:8d:84:61:54:d0:56: bf:ad:fd:3a:05:84:0b:b8:66:cd:31:2a:44:7b:6c: 08:48:a6:e3:44:4b:dd:6f:64:26:4d:2e:2f:5a:6b: e3:34:eb:3b:ae:38:23:af:d5:03:fb:ef:a5:4f:bd: e4:cb:46:7c:37:d8:53:e0:ed:99:b5:72:08:6d:dd: d1:3b:41:36:da:0e:fb:83:4b:32:ed:4d:40:51:60: 54:73:45:57:28:17:42:90:8b:35:bb:48:1c:7e:50: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:88:53:EE:90:C1:97:35:26:ED:68:A7:E3:18:CA:DF:6B:DD:55:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 205.201.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e4:00:dc:3a:93:30:7b:77:84:24:99:6b:56:a8:1c:a1:e7: 54:cd:b0:20:bb:86:cf:18:e0:85:87:dd:b8:c9:ee:f1:db:13: 3f:be:81:7a:fb:22:fd:af:5d:ab:4e:cc:89:86:2a:80:70:84: a5:0c:50:53:12:46:5b:1b:d9:64:41:0b:35:4a:7e:63:40:ee: c5:14:4f:ab:5f:36:79:82:70:77:ac:c7:89:39:66:39:8a:bd: 16:b1:bb:f5:79:07:a8:d3:f7:7b:57:fe:8a:c8:4b:cc:5a:f3: 96:0c:8b:69:4d:e0:1a:09:a1:ae:65:9a:3f:2b:18:51:67:16: b9:12:2c:db:36:63:11:fe:b7:02:ec:c6:52:b7:c2:e2:3b:7c: ed:53:91:86:e2:e8:ef:a9:09:9a:18:0f:29:eb:e8:b0:c7:4b: 98:ab:29:78:7d:fc:cd:bd:3d:6c:fc:0f:c0:40:bc:fe:cb:4d: 86:85:17:4b:05:11:bd:98:62:87:ab:dc:f2:b5:2c:8f:1f:fa: 89:b8:36:8c:42:52:65:cc:5f:46:c1:40:a8:d9:e6:88:98:78: 6c:3e:4f:7c:93:c4:94:38:5e:eb:4d:48:9f:32:bb:81:b2:1d: f8:7b:f1:78:2d:22:2d:46:89:5a:7d:85:95:65:ab:1d:4b:c2: 64:28:2b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9BH2Z4PcNjvoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NGFmMTg3ZWItOTkxYy00NjFiLWI2YTgtYTBjMDlmNjFiNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhph4qeBhKts3O97xuBi7jEyWru1UZhI7OEaN 7WspVl6ZWjMrpKU2BeqyDZW5wvCtITxILbN2j+QdrGuco4ffScdBzSkYVfVoBZtw dDQ0CvhKXEyRsRWZJCbthYrXg6KUfeQZt4v+758CHVob4ZER0bzNq1XUGEf3AZSq B3R3t377hRojvYJvDdJtGsSV2hBDpaDlhSmoPKKTaC+7LWuNhGFU0Fa/rf06BYQL uGbNMSpEe2wISKbjREvdb2QmTS4vWmvjNOs7rjgjr9UD+++lT73ky0Z8N9hT4O2Z tXIIbd3RO0E22g77g0sy7U1AUWBUc0VXKBdCkIs1u0gcflCRSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6IU+6QwZc1Ju1op+MYyt9r3VXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvZDllZDU4NTctMDFjYS0z NDQ5LWE0MDAtMjVhYjQ0Y2JlNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzcnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXkANw6kzB7d4QkmWtWqByh51TNsCC7hs8Y4IWH3bjJ7vHbEz++gXr7 Iv2vXatOzImGKoBwhKUMUFMSRlsb2WRBCzVKfmNA7sUUT6tfNnmCcHesx4k5ZjmK vRaxu/V5B6jT93tX/orIS8xa85YMi2lN4BoJoa5lmj8rGFFnFrkSLNs2YxH+twLs xlK3wuI7fO1TkYbi6O+pCZoYDynr6LDHS5irKXh9/M29PWz8D8BAvP7LTYaFF0sF Eb2YYoer3PK1LI8f+om4NoxCUmXMX0bBQKjZ5oiYeGw+T3yTxJQ4XutNSJ8yu4Gy Hfh78XgtIi1GiVp9hZVlqx1LwmQoK7Q= -----END CERTIFICATE-----Generated at Mon Jun 16 05:44:05 2025 by rpki-client