$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa File: b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa (raw, json) Hash identifier: YtI3cQwYaxagvpbZx0T/foKdDynQgcUmg6n4mxLYByY= Subject key identifier: 24:51:F0:D3:E1:16:E0:96:2A:89:E8:D7:C6:F2:6C:40:18:67:AC:58 Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Certificate serial: 010D0C9F43285849E2253515E128D053A087AE00 Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 53616 IP address blocks: 204.235.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:35:15:e1:28:d0:53:a0:87:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=b5553c6a-63f4-4ec1-9418-192be1c4bf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:b8:c9:d1:1b:00:be:7d:47:3b:b5:80:c9: f9:8d:c0:02:4f:d8:3f:d1:c3:9c:31:ba:77:df:db: 38:5e:43:c7:0d:b4:3f:3c:c5:ba:01:ec:78:e4:8b: f5:e8:aa:e9:56:fa:84:d8:b5:d1:3a:be:b5:db:05: 0a:b2:0e:e4:48:db:e2:bf:fd:74:cd:d8:a6:ab:f3: da:cd:a1:ee:34:e3:8e:55:36:19:39:27:e0:4a:c3: 08:ad:c9:71:fc:74:a7:bb:ca:d5:8e:2b:a2:b6:d1: 9f:cc:a8:4d:e0:4a:ba:a4:94:77:af:86:fc:e4:9d: d6:f8:ca:11:73:cd:6a:50:1c:0d:06:55:b5:42:79: fb:33:8c:d7:3c:5c:c6:40:7f:29:df:db:40:b0:d6: 17:87:ad:33:71:0d:c5:f0:d2:02:1f:28:a3:4b:6f: 73:fd:b9:a6:03:4c:cf:9e:84:39:4b:d7:e1:b1:3b: fa:3c:ab:12:ad:2b:90:9c:7b:24:e4:e4:48:40:72: c0:09:c0:2d:70:53:48:f9:29:0c:0a:04:86:fd:0c: 7a:75:02:b6:c2:5e:63:a6:66:ee:50:a0:be:cc:4f: 36:c9:18:da:26:bb:d5:45:e8:57:cd:5a:22:ee:45: c4:4b:fa:72:59:b8:36:6f:ae:12:0b:6f:77:66:51: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:F0:D3:E1:16:E0:96:2A:89:E8:D7:C6:F2:6C:40:18:67:AC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl X509v3 Authority Key Identifier: keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer sbgp-ipAddrBlock: critical IPv4: 204.235.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ec:30:1d:a1:02:e2:f3:c2:33:37:70:70:79:05:cc:34:77: 20:cd:9b:3a:87:60:ff:49:84:75:76:e1:79:65:9b:66:d7:ae: 56:a9:10:29:9b:c1:27:e1:e2:37:07:d5:9a:23:95:56:f7:64: 1d:a6:74:49:46:d2:ee:40:6b:d6:be:bb:cd:fa:71:21:a7:13: 29:6a:46:d4:af:01:59:cc:1c:99:c0:31:b6:38:af:a3:22:db: dd:05:e1:e3:9c:33:01:16:03:0c:66:86:55:ea:cf:fa:44:b3: 95:25:44:f2:13:00:b8:49:c1:44:cf:1d:6a:a4:52:90:81:99: 12:3f:29:c7:d9:8d:d5:47:51:4e:4b:1b:d6:35:c4:15:66:6a: 61:51:6a:ee:36:f7:2e:0f:07:5c:7f:01:9a:bb:fd:cc:2f:9f: 7b:c9:34:e6:f1:fd:4d:8b:5d:f6:4d:0c:aa:4b:dd:cd:1e:c2: 60:f6:8a:67:a0:91:e1:43:71:e7:3b:f3:76:84:4d:ca:2d:32: 61:74:c3:ff:14:d7:08:3c:65:26:7b:7c:92:c9:ed:47:20:07: d0:c7:b2:55:f7:1f:d8:26:5b:3f:f1:47:17:20:76:58:00:23: 6c:95:a9:99:15:39:c5:cc:23:df:a3:b6:ac:8d:ca:37:d1:08: df:8c:e5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTUV4SjQU6CHrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyZjVhNGMtOTE3ZS00YjkwLTgwMjItMzkxODQ3YWU1 Njk5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YjU1NTNjNmEtNjNmNC00ZWMxLTk0MTgtMTkyYmUxYzRiZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ+4ydEbAL59Rzu1gMn5jcACT9g/0cOcMbp3 39s4XkPHDbQ/PMW6Aex45Iv16KrpVvqE2LXROr612wUKsg7kSNviv/10zdimq/Pa zaHuNOOOVTYZOSfgSsMIrclx/HSnu8rVjiuittGfzKhN4Eq6pJR3r4b85J3W+MoR c81qUBwNBlW1Qnn7M4zXPFzGQH8p39tAsNYXh60zcQ3F8NICHyijS29z/bmmA0zP noQ5S9fhsTv6PKsSrSuQnHsk5ORIQHLACcAtcFNI+SkMCgSG/Qx6dQK2wl5jpmbu UKC+zE82yRjaJrvVRehXzVoi7kXES/pyWbg2b64SC293ZlHOpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRR8NPhFuCWKono18bybEAYZ6xYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYzJm NWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4NDdhZTU2OTkvYjI0ZDI3OGQtYjhjNC0z NzY0LTlmYTgtODU0MmZjNjZiMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGMyZjVhNGMtOTE3ZS00YjkwLTgw MjItMzkxODQ3YWU1Njk5LzBjMmY1YTRjLTkxN2UtNGI5MC04MDIyLTM5MTg0N2Fl NTY5OS5jcmwwHwYDVR0jBBgwFoAUKnfTBPDpKIyedYcM4/xf3RQLd6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYzJmNWE0Yy05MTdlLTRiOTAtODAyMi0zOTE4 NDdhZTU2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOvzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDsMB2hAuLzwjM3cHB5Bcw0dyDNmzqHYP9JhHV24Xllm2bXrlapECmb wSfh4jcH1ZojlVb3ZB2mdElG0u5Aa9a+u836cSGnEylqRtSvAVnMHJnAMbY4r6Mi 290F4eOcMwEWAwxmhlXqz/pEs5UlRPITALhJwUTPHWqkUpCBmRI/KcfZjdVHUU5L G9Y1xBVmamFRau429y4PB1x/AZq7/cwvn3vJNObx/U2LXfZNDKpL3c0ewmD2imeg keFDcec783aETcotMmF0w/8U1wg8ZSZ7fJLJ7UcgB9DHslX3H9gmWz/xRxcgdlgA I2yVqZkVOcXMI9+jtqyNyjfRCN+M5ag= -----END CERTIFICATE-----Generated at Sun Jun 15 21:52:30 2025 by rpki-client