$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa File: 685e5fb0-74b7-3641-bd89-1132b33d3635.roa (raw, json) Hash identifier: Gn5Ki35+1Xn57v83rKxZhumXWKIIIEcmkcCUjT6axk0= Subject key identifier: E3:95:BC:30:6A:4E:03:BD:73:59:18:17:AE:CB:4F:85:4C:B2:28:C9 Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584A00DACD82F1A28198D48B8FE0 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 17055 IP address blocks: 204.99.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:cd:82:f1:a2:81:98:d4:8b:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=ba0aaccd-ada0-4a8d-aa8c-e67acabc9b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:13:42:1c:29:4f:2c:54:8d:d9:e0:c5:61: 9c:7f:16:61:c3:f2:95:b2:82:39:35:26:3c:ac:89: ff:96:33:a3:b2:b0:14:08:2e:81:18:eb:fc:b7:79: ad:71:06:35:e9:87:d6:10:ef:e8:e0:19:e1:fd:19: ff:f6:26:fc:ef:db:b6:8c:f5:b9:b3:1a:7a:80:0a: db:40:37:6e:fd:5b:a9:e2:fa:06:20:f9:9a:7d:0f: f8:f8:17:d5:40:9a:a8:25:6e:75:97:26:82:fc:ec: 12:de:26:dd:e3:d5:09:8f:c4:71:63:f5:79:7e:09: 7a:ad:8c:7f:9f:dd:fe:ee:52:96:8e:bd:69:b1:6d: 38:d2:dd:22:a9:7d:e4:e7:ae:08:b7:18:70:35:63: 9a:c8:25:c5:b0:90:f4:67:7f:51:03:e2:0e:14:0b: de:fe:fc:a3:2a:91:78:70:63:bf:7d:e9:85:38:25: 72:18:85:43:b9:32:06:e7:56:f1:65:9e:39:99:96: 8f:b7:48:8b:df:d2:41:d8:64:4c:13:2b:35:8c:b0: aa:96:81:97:7a:19:e5:4a:ee:fe:41:c5:b0:5d:48: 00:40:b4:23:24:ad:24:4f:38:0a:c5:f5:61:ec:29: 0b:18:bd:8c:80:00:2c:33:0d:92:d8:40:19:44:47: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:95:BC:30:6A:4E:03:BD:73:59:18:17:AE:CB:4F:85:4C:B2:28:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 204.99.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:60:77:c2:67:68:3a:c5:00:1d:81:fa:7b:23:10:58:1a:34: c0:56:e9:97:1b:d0:46:af:82:dc:f2:22:0d:b0:4c:fe:37:18: 06:ed:89:1d:4c:0e:72:8a:c2:8c:e5:ee:2e:39:cd:2b:88:50: 94:11:26:5a:3f:8b:28:09:d9:20:f4:1e:fb:ac:d5:63:24:cb: 82:46:c4:79:2b:94:36:1d:c3:9a:99:1a:61:07:ff:45:84:9f: 03:ea:d3:88:6a:0a:86:05:55:4a:95:e3:87:0d:37:07:08:87: a4:d0:52:a8:e2:48:d4:08:32:ba:ad:19:f2:dc:ef:4a:89:3b: fd:e4:c9:53:1d:1d:4b:43:22:28:fb:6b:14:29:5b:cd:99:e5: 82:b6:d7:81:87:28:9b:bb:1c:fa:ef:fa:5d:9e:38:e9:54:69: e7:9f:45:90:af:fa:11:39:4e:51:08:d8:37:32:3d:9b:3b:7e: 7f:49:00:f5:59:0d:cf:fc:c0:d8:24:dc:9c:ac:9e:90:13:16: 72:4f:86:95:1f:90:01:1d:72:98:fd:6d:4f:0f:07:35:16:a5: 4f:95:32:cd:0f:a0:82:3b:b3:2a:10:99:ff:1d:68:cb:73:a1: ea:00:39:7b:60:ba:44:ec:02:5b:ad:d7:f8:2e:4c:d8:88:49: ec:cc:7e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2s2C8aKBmNSLj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YmEwYWFjY2QtYWRhMC00YThkLWFhOGMtZTY3YWNhYmM5YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt0TQhwpTyxUjdngxWGcfxZhw/KVsoI5NSY8 rIn/ljOjsrAUCC6BGOv8t3mtcQY16YfWEO/o4Bnh/Rn/9ib879u2jPW5sxp6gArb QDdu/Vup4voGIPmafQ/4+BfVQJqoJW51lyaC/OwS3ibd49UJj8RxY/V5fgl6rYx/ n93+7lKWjr1psW040t0iqX3k564ItxhwNWOayCXFsJD0Z39RA+IOFAve/vyjKpF4 cGO/femFOCVyGIVDuTIG51bxZZ45mZaPt0iL39JB2GRMEys1jLCqloGXehnlSu7+ QcWwXUgAQLQjJK0kTzgKxfVh7CkLGL2MgAAsMw2S2EAZREdKRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOVvDBqTgO9c1kYF67LT4VMsijJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvNjg1ZTVmYjAtNzRiNy0z NjQxLWJkODktMTEzMmIzM2QzNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzGOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1gd8JnaDrFAB2B+nsjEFgaNMBW6Zcb0EavgtzyIg2wTP43GAbtiR1M DnKKwozl7i45zSuIUJQRJlo/iygJ2SD0Hvus1WMky4JGxHkrlDYdw5qZGmEH/0WE nwPq04hqCoYFVUqV44cNNwcIh6TQUqjiSNQIMrqtGfLc70qJO/3kyVMdHUtDIij7 axQpW82Z5YK214GHKJu7HPrv+l2eOOlUaeefRZCv+hE5TlEI2DcyPZs7fn9JAPVZ Dc/8wNgk3JysnpATFnJPhpUfkAEdcpj9bU8PBzUWpU+VMs0PoII7syoQmf8daMtz oeoAOXtgukTsAlut1/guTNiISezMflQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:03:10 2025 by rpki-client