$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa File: b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa (raw, json) Hash identifier: NAAOFdNcCU2lFOUEe+KuaAkbsvzeb5ZqV3wTJ/2+sr8= Subject key identifier: D6:57:5E:39:BE:BA:4B:CF:57:9F:BA:3F:E0:E4:63:A6:E8:E4:D4:64 Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F4328584A331AE935F6E6480D88724F74 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 20055 IP address blocks: 204.11.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e9:35:f6:e6:48:0d:88:72:4f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=e8b948f2-5c1b-4813-a641-2f1d82d337c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:0b:54:1e:fd:c1:d4:f4:97:c3:ee:fd:72: 36:59:ac:e9:84:94:de:ee:cc:fe:87:b4:25:e3:b9: 8c:e5:e2:b3:22:b5:ae:eb:dd:c7:16:d4:3c:68:1a: ec:a4:00:97:7d:8d:56:9b:e9:88:a0:2d:6f:d2:7f: 38:3b:0e:62:be:44:85:1c:f7:b4:83:79:a0:a4:96: 9b:22:a0:79:15:f6:c5:9a:d7:9e:5d:bd:2b:3a:ab: 1a:c8:b9:1f:7c:66:48:44:52:3f:26:c8:2c:c4:35: 36:61:fc:bf:fb:82:0b:4a:6b:18:b7:f1:ab:d7:a5: ba:80:32:c6:1a:da:10:17:8d:f5:b1:db:bd:5c:e4: 98:d1:92:2e:ba:4e:90:f4:bd:e0:9a:96:32:1e:b5: 61:f2:6a:f4:b7:d8:13:73:f0:22:9a:04:55:a6:cf: b2:85:3d:5a:2a:02:eb:5f:fc:18:b7:b2:43:07:b3: 5d:1d:fc:f5:34:4e:0f:af:df:37:80:d8:77:1a:d6: 1c:80:94:19:d9:f2:be:47:3c:74:78:ea:92:d9:79: 23:b7:b4:60:cc:84:b9:34:57:43:97:9d:b9:60:b8: d9:0a:24:3a:17:ff:cd:64:61:f4:85:16:2d:28:ae: 78:de:99:32:8c:9f:48:24:c4:51:3c:35:20:65:d8: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:5E:39:BE:BA:4B:CF:57:9F:BA:3F:E0:E4:63:A6:E8:E4:D4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 204.11.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:46:a0:53:ee:ec:77:7f:b9:eb:23:67:67:b4:96:9b:b1:7b: cb:11:bf:bc:23:10:a6:3e:57:53:63:4b:97:b7:4b:92:4f:41: 41:95:85:22:9d:1c:fe:48:e2:4f:eb:51:c9:12:9e:58:60:c9: 84:02:5a:6e:7e:4b:a2:59:9f:e3:0b:ad:35:40:e0:90:9c:5f: 20:d4:51:84:6d:9f:ca:be:23:79:39:83:dc:20:d4:c1:e4:28: 39:66:a5:eb:16:9b:17:46:a6:5b:1a:ab:a6:d4:2f:d1:c8:2c: 21:94:71:ec:8b:99:cb:96:72:34:ff:98:d8:b9:54:ec:76:fd: a5:be:29:82:d9:c3:34:b9:d6:07:4b:ab:a5:3e:43:67:57:06: 6f:99:3e:96:72:29:11:f9:a4:af:0d:3d:26:40:71:10:47:88: ce:51:ff:47:2c:25:42:50:45:dd:07:0b:33:e6:03:3a:3c:0f: 8d:2f:9b:92:0a:81:4e:61:16:db:aa:84:18:7a:ef:5f:a6:15: db:46:22:7b:d9:89:01:46:26:b5:98:2e:0e:f0:53:9c:1c:1b: fa:59:80:ef:ec:cb:fd:03:0f:71:ad:32:39:57:27:93:08:d4: 87:dd:24:90:1a:91:1c:f7:ca:20:89:cb:06:87:20:30:6e:8f: b3:89:7e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuk19uZIDYhyT3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZThiOTQ4ZjItNWMxYi00ODEzLWE2NDEtMmYxZDgyZDMzN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5wLVB79wdT0l8Pu/XI2WazphJTe7sz+h7Ql 47mM5eKzIrWu693HFtQ8aBrspACXfY1Wm+mIoC1v0n84Ow5ivkSFHPe0g3mgpJab IqB5FfbFmteeXb0rOqsayLkffGZIRFI/JsgsxDU2Yfy/+4ILSmsYt/Gr16W6gDLG GtoQF431sdu9XOSY0ZIuuk6Q9L3gmpYyHrVh8mr0t9gTc/AimgRVps+yhT1aKgLr X/wYt7JDB7NdHfz1NE4Pr983gNh3GtYcgJQZ2fK+Rzx0eOqS2Xkjt7RgzIS5NFdD l525YLjZCiQ6F//NZGH0hRYtKK543pkyjJ9IJMRRPDUgZdiazwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZXXjm+ukvPV5+6P+DkY6bo5NRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvYjI3MDhhY2YtZjU5Yy0z YjRmLTlmMTEtMDFiYWFhNmI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVGoFPu7Hd/uesjZ2e0lpuxe8sRv7wjEKY+V1NjS5e3S5JPQUGVhSKd HP5I4k/rUckSnlhgyYQCWm5+S6JZn+MLrTVA4JCcXyDUUYRtn8q+I3k5g9wg1MHk KDlmpesWmxdGplsaq6bUL9HILCGUceyLmcuWcjT/mNi5VOx2/aW+KYLZwzS51gdL q6U+Q2dXBm+ZPpZyKRH5pK8NPSZAcRBHiM5R/0csJUJQRd0HCzPmAzo8D40vm5IK gU5hFtuqhBh671+mFdtGInvZiQFGJrWYLg7wU5wcG/pZgO/sy/0DD3GtMjlXJ5MI 1IfdJJAakRz3yiCJywaHIDBuj7OJfhk= -----END CERTIFICATE-----Generated at Mon Jun 16 00:03:42 2025 by rpki-client