$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa File: acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa (raw, json) Hash identifier: CYNx+jDoGiV1B4cUHX3qhuE9nNJfVx6AYMuh3ZBS2L0= Subject key identifier: E5:2A:54:14:6B:1F:4B:FF:9F:DE:7D:37:B3:B3:46:7D:88:92:C3:02 Certificate issuer: /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539 Certificate serial: 010D0C9F43285849D1650604D84C2457A95E4F00 Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 205.201.40.0/24 maxlen: 24 205.201.41.0/24 maxlen: 24 205.201.42.0/24 maxlen: 24 205.201.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:06:04:d8:4c:24:57:a9:5e:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=1d32835e-89e8-400f-a846-a32b4087ddb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:c4:c0:76:bb:92:36:2a:1c:63:b3:7d:e6: 88:9b:c6:6a:99:11:37:6a:59:25:b2:fa:ad:b4:ea: f4:a9:d0:63:ce:18:d6:b4:fe:b5:51:b9:4c:9f:25: a7:95:80:73:69:9a:c5:c6:82:4c:62:ff:5a:c3:42: c2:01:ec:9d:a4:b2:52:ab:10:79:4d:80:02:70:55: f5:2c:27:c2:1a:fc:79:a8:4f:72:4e:83:49:61:6c: 50:e8:64:10:e5:fc:45:f7:08:f6:27:15:42:f5:26: b9:98:29:cf:de:1d:0b:3e:fe:ff:2b:79:09:5c:df: 5a:59:98:0f:70:61:fa:5c:b2:ae:78:66:57:69:30: c7:30:6f:dc:3f:ff:50:bf:ed:a2:b4:d5:bd:99:eb: 73:05:07:38:e2:89:1d:26:5d:91:61:14:82:9e:17: a0:bf:32:9c:99:55:6d:76:81:e3:a6:1d:a6:f1:9a: 45:db:fe:29:e5:48:26:73:bb:ad:6e:7a:93:b5:1a: 2e:8d:2d:02:3a:19:41:31:c3:f5:ad:ea:1a:5c:bf: a3:cd:c0:3c:28:57:ed:70:32:12:01:ff:28:cd:95: 19:fe:12:2c:5e:34:7a:85:a5:a4:7d:b1:02:fb:4d: 07:2e:6b:ec:34:28:ec:a1:f5:25:6e:ca:ea:86:95: 4b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2A:54:14:6B:1F:4B:FF:9F:DE:7D:37:B3:B3:46:7D:88:92:C3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl X509v3 Authority Key Identifier: keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer sbgp-ipAddrBlock: critical IPv4: 205.201.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:70:95:72:99:18:cb:5b:ac:71:ea:e9:cc:e2:dd:99:9c:9f: 9a:87:36:9e:b2:24:a8:b1:50:d2:40:bb:5c:c6:3b:79:4a:e8: b8:6f:0b:eb:81:ac:bc:71:74:a9:7b:17:d0:f3:12:59:52:a1: 49:75:d2:20:4e:e3:83:76:16:b6:7f:34:bb:37:40:95:e0:6a: d9:20:b5:73:d2:b3:48:46:30:12:df:d1:5e:5f:67:de:c3:b3: ac:42:f4:84:95:21:d3:0a:a9:90:e9:da:46:27:39:7d:f6:0a: b1:05:2f:3e:80:d6:8c:f7:e8:09:9b:d0:4b:38:f6:df:4a:8c: 92:d1:da:4a:f5:f7:fd:c3:03:b5:60:bb:71:bf:b9:23:b1:80: c2:8d:01:1c:23:13:d2:eb:35:6a:2c:db:40:2b:1f:a8:f5:0a: 13:e2:1a:d7:a3:5f:16:6f:09:fc:29:8e:f6:82:60:9e:15:92: 72:0b:71:25:a3:ca:0c:04:d4:26:d0:c0:ae:ad:99:03:1b:57: ee:d3:11:65:7c:1d:c1:a3:3e:dc:18:eb:73:53:1b:ef:d2:25: d5:92:c7:df:c5:60:db:29:a0:8a:5b:6c:86:ef:31:1b:4d:c0: f7:11:33:f0:32:03:83:30:f8:8d:ce:5a:69:3c:1a:01:af:be: d9:a4:e5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQYE2EwkV6leTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlYTcwOTktZDJlNS00NWUxLThjMWUtYTgyMDZmNTQ5 NTM5MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MWQzMjgzNWUtODllOC00MDBmLWE4NDYtYTMyYjQwODdkZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN/EwHa7kjYqHGOzfeaIm8ZqmRE3alklsvqt tOr0qdBjzhjWtP61UblMnyWnlYBzaZrFxoJMYv9aw0LCAeydpLJSqxB5TYACcFX1 LCfCGvx5qE9yToNJYWxQ6GQQ5fxF9wj2JxVC9Sa5mCnP3h0LPv7/K3kJXN9aWZgP cGH6XLKueGZXaTDHMG/cP/9Qv+2itNW9metzBQc44okdJl2RYRSCnhegvzKcmVVt doHjph2m8ZpF2/4p5Ugmc7utbnqTtRoujS0COhlBMcP1reoaXL+jzcA8KFftcDIS Af8ozZUZ/hIsXjR6haWkfbEC+00HLmvsNCjsofUlbsrqhpVL8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUqVBRrH0v/n959N7OzRn2IksMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVh NzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIwNmY1NDk1MzkvYWNhYWUxMDAtMGM1Ni0z NmQ5LTk3YTYtYWE4N2NjN2EzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmRlYTcwOTktZDJlNS00NWUxLThj MWUtYTgyMDZmNTQ5NTM5L2ZkZWE3MDk5LWQyZTUtNDVlMS04YzFlLWE4MjA2ZjU0 OTUzOS5jcmwwHwYDVR0jBBgwFoAUUxlbQ+NFauATsk2o+FU2Z/wB9SgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVhNzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIw NmY1NDk1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzckoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpwlXKZGMtbrHHq6czi3Zmcn5qHNp6yJKixUNJAu1zGO3lK6LhvC+uB rLxxdKl7F9DzEllSoUl10iBO44N2FrZ/NLs3QJXgatkgtXPSs0hGMBLf0V5fZ97D s6xC9ISVIdMKqZDp2kYnOX32CrEFLz6A1oz36Amb0Es49t9KjJLR2kr19/3DA7Vg u3G/uSOxgMKNARwjE9LrNWos20ArH6j1ChPiGtejXxZvCfwpjvaCYJ4VknILcSWj ygwE1CbQwK6tmQMbV+7TEWV8HcGjPtwY63NTG+/SJdWSx9/FYNspoIpbbIbvMRtN wPcRM/AyA4Mw+I3OWmk8GgGvvtmk5Q4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:10:32 2025 by rpki-client