$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa File: cf4be9dc-75c5-3f44-b4d0-65e111847482.roa (raw, json) Hash identifier: QPTESzS6RjTnS6KhvDc4+MJrieHypwXzRU7jCJ5X5e8= Subject key identifier: 89:B1:6D:4F:46:95:A5:C6:16:77:0D:D7:8D:C1:CE:10:03:0A:CE:4C Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584A23C01AFE9FFC4A3158AF9C80 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 4922 IP address blocks: 204.111.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1a:fe:9f:fc:4a:31:58:af:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=61ebd947-effa-4640-8fd0-c4478654493b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:0c:8a:cd:24:1d:b4:89:9b:14:98:8e:85: 10:28:d7:6a:0e:02:b1:6b:df:4f:01:2a:04:18:ed: 3f:45:d9:4f:51:7f:33:dd:98:06:99:72:68:70:6a: 35:62:81:bc:dd:7b:b6:d8:d9:b7:0a:6a:05:58:67: cc:05:4c:1e:ca:ca:55:b6:60:18:cb:64:10:6c:4b: d2:7e:5c:5f:8c:44:6e:44:9d:ef:21:07:89:4b:4b: 63:26:bb:6b:ed:12:51:2b:4e:1f:34:f5:42:c7:2d: a5:31:3b:7e:77:3d:fa:d9:57:bc:fc:52:c3:fc:e4: 7f:33:1e:f3:f5:27:58:00:fb:ef:f8:ea:5f:06:b6: 1c:2a:38:45:a4:59:36:9f:51:a7:56:c8:30:27:c1: 43:04:a7:2a:69:d9:8b:bd:26:00:a6:0f:e3:44:ef: 55:42:ea:6f:a1:81:23:6a:ce:c0:7f:ed:57:7c:0f: da:f9:20:58:7e:9e:89:16:8b:8e:dc:4f:66:73:84: 1a:32:fe:97:c5:3d:30:70:21:c2:c2:dc:d8:bb:a0: 6a:1a:32:c2:25:59:2b:c7:0d:4d:d7:09:f8:68:de: d9:c0:ab:8d:61:57:27:2e:4e:c1:cb:cf:95:6a:24: 79:70:2d:d6:ca:71:f3:12:13:a4:64:34:ea:f9:1c: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B1:6D:4F:46:95:A5:C6:16:77:0D:D7:8D:C1:CE:10:03:0A:CE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 204.111.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8c:14:19:13:e5:22:b1:b3:c8:e4:c4:b9:fd:80:3c:ab:83: f1:e4:d0:33:61:77:d0:53:73:0b:89:b5:b2:24:66:0f:7b:a7: 43:9c:1d:3f:25:5b:77:45:8c:6b:49:1a:8e:b6:c4:8c:bc:18: 75:db:9b:bc:33:61:97:b0:84:39:60:8b:44:ac:f4:55:d6:10: 4d:57:30:e9:40:3a:68:60:d6:13:a0:a7:86:52:32:bc:33:7e: ed:f1:b9:44:8d:20:9a:6c:d7:fa:52:af:e0:45:87:89:af:7d: 9a:76:ba:73:46:0b:73:e9:b1:75:43:21:de:6f:66:42:85:0e: ae:25:14:99:78:f7:c7:07:d5:72:ab:32:9e:7e:ee:9e:e0:4a: 0d:1b:22:f9:26:2c:ca:38:3d:1d:42:5d:bf:c2:d7:60:79:e0: dc:aa:c5:80:0c:ee:7a:5a:05:3a:db:8c:d1:f2:2a:69:a4:91: c8:d5:34:22:2a:ce:7a:8b:82:7d:20:6d:dc:5c:69:d2:b4:9d: 93:6b:28:ef:5a:fb:63:b5:0e:b0:0f:34:e9:a8:8f:8b:03:a4: aa:a7:db:ca:8a:51:0c:60:7d:bf:49:3a:b8:e7:5a:b4:4f:d5: e4:2c:c5:82:2f:e8:36:5e:ac:ed:13:b3:1c:6c:62:35:54:e8: 6e:8b:92:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBr+n/xKMVivnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NjFlYmQ5NDctZWZmYS00NjQwLThmZDAtYzQ0Nzg2NTQ0OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH0Mis0kHbSJmxSYjoUQKNdqDgKxa99PASoE GO0/RdlPUX8z3ZgGmXJocGo1YoG83Xu22Nm3CmoFWGfMBUweyspVtmAYy2QQbEvS flxfjERuRJ3vIQeJS0tjJrtr7RJRK04fNPVCxy2lMTt+dz362Ve8/FLD/OR/Mx7z 9SdYAPvv+OpfBrYcKjhFpFk2n1GnVsgwJ8FDBKcqadmLvSYApg/jRO9VQupvoYEj as7Af+1XfA/a+SBYfp6JFouO3E9mc4QaMv6XxT0wcCHCwtzYu6BqGjLCJVkrxw1N 1wn4aN7ZwKuNYVcnLk7By8+VaiR5cC3WynHzEhOkZDTq+RxCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImxbU9GlaXGFncN143BzhADCs5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvY2Y0YmU5ZGMtNzVjNS0z ZjQ0LWI0ZDAtNjVlMTExODQ3NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzG+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWMFBkT5SKxs8jkxLn9gDyrg/Hk0DNhd9BTcwuJtbIkZg97p0OcHT8l W3dFjGtJGo62xIy8GHXbm7wzYZewhDlgi0Ss9FXWEE1XMOlAOmhg1hOgp4ZSMrwz fu3xuUSNIJps1/pSr+BFh4mvfZp2unNGC3PpsXVDId5vZkKFDq4lFJl498cH1XKr Mp5+7p7gSg0bIvkmLMo4PR1CXb/C12B54NyqxYAM7npaBTrbjNHyKmmkkcjVNCIq znqLgn0gbdxcadK0nZNrKO9a+2O1DrAPNOmoj4sDpKqn28qKUQxgfb9JOrjnWrRP 1eQsxYIv6DZerO0TsxxsYjVU6G6LkoY= -----END CERTIFICATE-----Generated at Sun Jun 15 23:14:10 2025 by rpki-client