$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa File: fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa (raw, json) Hash identifier: qy4GTQnqaMeh9D0yep45kGSaTx1jY8FPnBN9G6L2LgU= Subject key identifier: 12:FA:38:A1:A0:3C:E8:1B:25:4E:F8:CB:24:E6:B8:11:4A:EE:02:7C Certificate issuer: /CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Certificate serial: 010D0C9F4328584A2C201671C5C6991C1AA4B800 Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 40339 IP address blocks: 202.83.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:16:71:c5:c6:99:1c:1a:a4:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=4dc62c12-fa9a-4e02-bb29-7ebe374521bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:ad:ef:cc:f8:f6:b0:77:3d:49:7c:a5:05: f7:06:13:3f:7e:2e:0f:69:c1:1e:ac:b3:3a:ea:f9: 84:bb:e0:db:cc:95:1a:be:f0:83:52:55:53:f5:ff: c0:33:3d:ab:bd:de:d6:74:6e:f2:b1:2b:fc:88:82: 66:b8:64:b6:46:f4:79:55:c1:f4:ad:ac:61:8b:dc: b7:ba:ca:e1:bf:81:58:21:5f:84:08:30:b8:98:07: 05:f7:9c:03:9b:66:97:4a:bf:9b:e9:70:62:4b:d7: 7a:c1:5a:df:8f:6d:27:96:7e:8f:c7:30:3d:65:54: 73:09:e0:e0:9d:e4:3d:b4:a4:0a:01:71:0c:57:b0: a6:56:a5:db:7e:a8:08:6b:76:4f:36:58:73:5b:d9: 11:5f:46:d1:53:26:6b:ca:35:dc:2d:3e:05:c7:3e: 26:1f:85:64:b3:b2:72:d9:ac:c8:8d:54:e9:0e:8a: 71:75:5b:9d:b1:44:b3:6c:d6:46:aa:95:d2:b4:16: a2:1e:ff:d2:0d:36:3f:9d:55:bb:43:47:6f:3c:03: 10:31:09:fa:78:2e:d5:02:66:12:f2:c5:01:c6:3c: 7f:d3:c9:51:0e:74:ef:eb:e6:6e:f7:93:06:b0:9c: fa:5f:e3:a7:05:ab:56:b7:15:1e:db:38:a0:b6:2a: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FA:38:A1:A0:3C:E8:1B:25:4E:F8:CB:24:E6:B8:11:4A:EE:02:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl X509v3 Authority Key Identifier: keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer sbgp-ipAddrBlock: critical IPv4: 202.83.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b2:01:9f:14:0a:a1:3e:fa:36:b6:3d:7f:11:62:48:e8:aa: a9:d2:3d:c2:d5:d2:72:c0:f6:c8:0d:7a:57:fa:1d:25:a0:34: af:a4:a8:d0:80:7c:b8:85:ba:67:6c:59:91:4b:e6:6b:3b:3d: 40:b2:e9:25:12:f2:ac:6b:cd:5c:d1:d8:d9:b4:a8:2a:72:eb: c8:62:92:50:40:e7:65:00:8a:35:48:aa:19:49:60:36:38:ba: 74:33:f3:8c:92:59:7c:b0:9d:aa:90:a7:83:47:77:e9:61:88: 49:be:a9:d6:6f:bd:25:ec:2f:fc:a0:76:1c:f6:0d:8f:c1:9c: b4:5e:f4:7f:79:65:a2:52:79:d6:0e:de:54:df:aa:9b:f1:59: eb:24:20:7f:ab:81:8c:b7:0b:8d:b8:61:66:ea:b6:4d:69:2c: 01:04:e9:00:38:6d:c3:81:02:3e:65:36:a6:8b:ad:21:10:64: 1d:86:04:37:53:b7:87:c4:c0:7f:bb:28:95:95:c8:ac:3b:82: 9c:da:5b:de:fa:a5:87:9b:42:53:08:8a:8a:96:bd:be:04:f6: aa:cf:7e:9a:a5:35:76:80:01:0f:52:7c:22:7d:ef:a8:5a:55: 4b:40:e8:c1:4e:99:cd:09:22:94:9f:1d:0b:f0:2f:47:f7:87: d2:a6:0c:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBZxxcaZHBqkuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRlZjlhZTItZjAyNy00MDI4LWE3MDUtZGIxZTM0NjNh MzgyMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NGRjNjJjMTItZmE5YS00ZTAyLWJiMjktN2ViZTM3NDUyMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldyt78z49rB3PUl8pQX3BhM/fi4PacEerLM6 6vmEu+DbzJUavvCDUlVT9f/AMz2rvd7WdG7ysSv8iIJmuGS2RvR5VcH0raxhi9y3 usrhv4FYIV+ECDC4mAcF95wDm2aXSr+b6XBiS9d6wVrfj20nln6PxzA9ZVRzCeDg neQ9tKQKAXEMV7CmVqXbfqgIa3ZPNlhzW9kRX0bRUyZryjXcLT4Fxz4mH4Vks7Jy 2azIjVTpDopxdVudsUSzbNZGqpXStBaiHv/SDTY/nVW7Q0dvPAMQMQn6eC7VAmYS 8sUBxjx/08lRDnTv6+Zu95MGsJz6X+OnBatWtxUe2zigtip4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL6OKGgPOgbJU74yyTmuBFK7gJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVm OWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFlMzQ2M2EzODIvZmQ1YzViMDItZDdiYy0z MmE3LTlhMzYtZWExZDBjZmE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjRlZjlhZTItZjAyNy00MDI4LWE3 MDUtZGIxZTM0NjNhMzgyL2Y0ZWY5YWUyLWYwMjctNDAyOC1hNzA1LWRiMWUzNDYz YTM4Mi5jcmwwHwYDVR0jBBgwFoAUeENjXzX3pbZuOXvTYhshzKLlkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVmOWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFl MzQ2M2EzODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDylNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiyAZ8UCqE++ja2PX8RYkjoqqnSPcLV0nLA9sgNelf6HSWgNK+kqNCA fLiFumdsWZFL5ms7PUCy6SUS8qxrzVzR2Nm0qCpy68hiklBA52UAijVIqhlJYDY4 unQz84ySWXywnaqQp4NHd+lhiEm+qdZvvSXsL/ygdhz2DY/BnLRe9H95ZaJSedYO 3lTfqpvxWeskIH+rgYy3C424YWbqtk1pLAEE6QA4bcOBAj5lNqaLrSEQZB2GBDdT t4fEwH+7KJWVyKw7gpzaW976pYebQlMIioqWvb4E9qrPfpqlNXaAAQ9SfCJ976ha VUtA6MFOmc0JIpSfHQvwL0f3h9KmDJs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:00:56 2025 by rpki-client