$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa File: dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa (raw, json) Hash identifier: 5O/v2tiT9hPqR1qf2zdjDcsqySQNTvfXddL1X6SwGLY= Subject key identifier: FA:51:4C:97:D3:3A:AC:E3:17:D3:1D:2C:9B:77:3C:2E:DC:D5:FB:25 Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584A00DACD7452A830995F361500 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 17055 IP address blocks: 204.99.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:cd:74:52:a8:30:99:5f:36:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=813e1ac6-abd3-4305-b4ac-81d05cfc23f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:83:1b:8c:80:50:97:72:2a:6c:0b:90:c6: 41:71:89:a4:80:70:62:f9:56:c7:5f:19:30:48:8b: 7d:81:c3:14:65:f6:9a:94:a9:ca:70:0b:83:8f:68: 3e:79:f9:13:d3:cf:e0:d3:92:63:ec:20:a6:34:62: 0a:0f:b3:ac:c7:44:93:f6:89:73:9e:67:6c:df:44: 81:b5:cb:2f:1c:bf:2a:6c:de:d5:bf:8e:41:c5:95: c1:78:17:71:11:3b:29:44:01:8a:48:e0:ef:70:08: da:92:ac:81:27:c0:ab:3e:f6:0a:9e:9b:6c:8d:e5: 0f:ff:27:1c:5f:bd:c8:68:f7:40:b4:83:5e:7e:f1: be:09:3c:94:4b:9a:a6:50:23:f5:eb:2e:85:a8:d5: 44:85:03:4a:08:f8:52:ca:40:c5:86:69:7d:1b:7f: 3b:4e:6c:8c:e1:6a:c3:b3:5d:65:40:1c:c9:4f:ed: bb:3d:53:54:cd:07:a4:d8:10:ba:f3:55:44:16:f9: 61:ba:22:40:fc:c8:63:23:f3:01:a3:d7:55:6d:d3: 5e:c9:1d:59:10:85:92:09:90:f6:25:bf:0d:14:69: c4:d8:1f:6a:01:6e:6f:e0:e4:f9:c2:d4:a8:05:14: 89:8a:d2:b0:3f:e1:cc:0f:54:1f:72:3b:50:64:07: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:51:4C:97:D3:3A:AC:E3:17:D3:1D:2C:9B:77:3C:2E:DC:D5:FB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 204.99.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0e:bb:1b:ee:64:da:b6:ac:70:57:5a:98:bf:13:41:9c:d3: 06:41:7e:70:b9:21:40:24:59:7d:c8:09:86:77:b8:03:d9:f1: d5:a0:2f:ed:b6:12:6f:bd:ff:ae:0d:8e:d5:09:f4:e3:50:84: cf:94:93:6e:a1:0b:77:3d:69:20:39:3d:7f:78:5b:45:58:71: a0:8b:a3:53:5d:fb:5a:92:f5:06:19:5f:18:80:2d:6e:78:6a: 31:e7:7e:d7:f8:01:6c:12:26:7d:3b:ae:ac:58:b5:69:b4:89: ec:15:be:51:ca:6b:77:05:47:56:ca:18:ed:c6:2b:83:70:99: 02:98:1d:6e:bf:52:ab:ed:6e:02:86:c8:0f:48:a4:7e:13:3f: bf:60:b5:d4:90:9b:27:62:54:34:4d:48:43:3e:93:85:b9:0b: b2:6e:ce:24:8a:9d:2e:db:f8:6e:81:10:b6:33:ce:de:66:bc: 67:b4:33:4a:2b:76:da:5f:8a:c9:b4:dc:58:1d:d7:18:18:4b: 17:fc:13:7b:74:b2:a9:28:0b:18:4f:5f:04:3b:5a:26:97:38: 12:4d:43:41:7e:14:22:93:d5:05:19:ae:10:b8:fb:0e:03:56: c3:b4:c9:52:0b:f9:cf:e5:2f:0a:d9:57:f2:f1:0a:75:a2:1b: 67:b6:06:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2s10UqgwmV82FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODEzZTFhYzYtYWJkMy00MzA1LWI0YWMtODFkMDVjZmMyM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO+DG4yAUJdyKmwLkMZBcYmkgHBi+VbHXxkw SIt9gcMUZfaalKnKcAuDj2g+efkT08/g05Jj7CCmNGIKD7Osx0ST9olznmds30SB tcsvHL8qbN7Vv45BxZXBeBdxETspRAGKSODvcAjakqyBJ8CrPvYKnptsjeUP/ycc X73IaPdAtINefvG+CTyUS5qmUCP16y6FqNVEhQNKCPhSykDFhml9G387TmyM4WrD s11lQBzJT+27PVNUzQek2BC681VEFvlhuiJA/MhjI/MBo9dVbdNeyR1ZEIWSCZD2 Jb8NFGnE2B9qAW5v4OT5wtSoBRSJitKwP+HMD1QfcjtQZAeWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpRTJfTOqzjF9MdLJt3PC7c1fslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvZGZiODlkMzYtZTgzMS0z ZmNlLWFhZTAtY2ZmMzg0MmExYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsOuxvuZNq2rHBXWpi/E0Gc0wZBfnC5IUAkWX3ICYZ3uAPZ8dWgL+22 Em+9/64NjtUJ9ONQhM+Uk26hC3c9aSA5PX94W0VYcaCLo1Nd+1qS9QYZXxiALW54 ajHnftf4AWwSJn07rqxYtWm0iewVvlHKa3cFR1bKGO3GK4NwmQKYHW6/UqvtbgKG yA9IpH4TP79gtdSQmydiVDRNSEM+k4W5C7JuziSKnS7b+G6BELYzzt5mvGe0M0or dtpfism03Fgd1xgYSxf8E3t0sqkoCxhPXwQ7WiaXOBJNQ0F+FCKT1QUZrhC4+w4D VsO0yVIL+c/lLwrZV/LxCnWiG2e2Bi8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:01:09 2025 by rpki-client