$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa File: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (raw, json) Hash identifier: frzEvqbT2iEIr6FHJTZyugYx1OJoJsQoI1fjKYcTVDM= Subject key identifier: 44:C6:62:FC:43:59:2D:69:1A:CE:D6:24:78:81:BF:AB:7A:4A:1E:FF Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584A07D53245026D10DA33BDAB00 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 18587 IP address blocks: 204.209.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:32:45:02:6d:10:da:33:bd:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=22e376f3-f71e-4866-8ad5-1d72fa01a379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7a:c6:85:5e:54:6f:cf:8c:a3:ce:3e:69:73: ad:aa:60:28:16:a3:94:a0:5a:46:4d:31:8c:5e:cf: 44:41:a8:d9:77:c3:82:66:76:ad:93:d8:60:72:3c: 74:94:e7:b8:1c:51:a3:8d:21:fb:91:d8:6a:8a:28: 9c:9f:9f:8f:b8:b4:0a:17:5a:84:fa:78:d1:d9:f5: ce:23:47:f2:fb:e2:e1:91:c9:36:85:49:4b:1e:d8: bd:e3:90:4b:66:2b:ad:6f:00:c4:90:49:20:0e:22: 22:6f:f0:60:79:ae:0c:a3:fb:90:81:97:92:79:3b: 41:57:fd:28:3d:97:5a:55:a8:93:8b:73:48:ea:13: 0d:d1:32:f9:9f:f3:09:17:28:0d:8e:a6:eb:d2:59: 2b:0d:d8:c5:cd:1c:d0:ec:ce:62:9f:81:9d:d2:58: 2f:57:fe:d5:7b:4b:5b:11:6b:79:43:21:b0:ee:fd: 18:38:e7:d6:68:02:f9:c7:d5:09:f9:d9:a0:0a:de: 6c:06:15:a6:8b:2e:2b:63:28:be:47:2a:9a:9b:79: 8f:30:ad:20:b5:cd:39:8b:c4:cc:8c:e3:a2:1c:e8: 1c:a3:69:75:eb:08:01:0c:94:5d:13:af:7b:d4:28: d8:5a:f7:da:1b:1e:5a:90:57:9d:e8:60:00:5e:c6: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C6:62:FC:43:59:2D:69:1A:CE:D6:24:78:81:BF:AB:7A:4A:1E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9c:5e:6e:d7:20:ad:c7:a2:8f:06:13:54:d5:9c:1e:fe:9e: d6:40:f5:63:d5:bf:0d:57:aa:23:fe:2a:1c:9f:16:c6:e8:86: 23:8c:fe:53:46:da:74:52:4f:d4:b3:a7:21:f1:37:f6:db:0a: f4:bb:c7:d8:bf:21:f3:37:5a:08:5b:60:14:1e:26:bb:57:a6: ad:67:a5:81:41:e0:45:9a:eb:fe:6c:d4:c7:7b:f1:17:0b:0c: 12:7a:1a:e2:00:91:3a:a6:e9:3d:50:9d:3a:9a:8c:8a:58:42: a4:71:36:97:24:3e:94:e2:28:77:13:34:b8:aa:e4:3e:88:ae: 78:ef:ec:e6:4b:fc:86:d9:ff:58:52:a8:68:fe:c5:65:34:80: 94:ab:cf:6c:b9:3d:e0:60:26:8f:1a:c5:f8:b7:49:a1:3e:ba: f3:a2:88:77:28:97:cd:cf:ee:9a:9a:dd:fd:b5:85:37:08:ee: ec:68:95:3f:ae:49:2a:f2:f4:01:84:cc:70:88:28:8a:ef:03: 0b:ec:ec:74:5d:76:10:ae:8f:ab:56:18:08:8f:59:6f:a0:81: 4c:e4:bf:4c:1d:10:aa:72:b0:c3:32:85:af:9a:ad:89:c5:7a: 9d:c4:fa:44:d5:37:b9:57:25:7d:d1:18:5d:ba:14:8a:64:72: 10:94:a3:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TJFAm0Q2jO9qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MjJlMzc2ZjMtZjcxZS00ODY2LThhZDUtMWQ3MmZhMDFhMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXrGhV5Ub8+Mo84+aXOtqmAoFqOUoFpGTTGM Xs9EQajZd8OCZnatk9hgcjx0lOe4HFGjjSH7kdhqiiicn5+PuLQKF1qE+njR2fXO I0fy++Lhkck2hUlLHti945BLZiutbwDEkEkgDiIib/Bgea4Mo/uQgZeSeTtBV/0o PZdaVaiTi3NI6hMN0TL5n/MJFygNjqbr0lkrDdjFzRzQ7M5in4Gd0lgvV/7Ve0tb EWt5QyGw7v0YOOfWaAL5x9UJ+dmgCt5sBhWmiy4rYyi+Ryqam3mPMK0gtc05i8TM jOOiHOgco2l16wgBDJRdE6971CjYWvfaGx5akFed6GAAXsb/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETGYvxDWS1pGs7WJHiBv6t6Sh7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMmIyYWMxMWItZTQ4ZS0z ZDdiLWJiNDctNzRiODgyOTg2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKcXm7XIK3Hoo8GE1TVnB7+ntZA9WPVvw1XqiP+KhyfFsbohiOM/lNG 2nRST9SzpyHxN/bbCvS7x9i/IfM3WghbYBQeJrtXpq1npYFB4EWa6/5s1Md78RcL DBJ6GuIAkTqm6T1QnTqajIpYQqRxNpckPpTiKHcTNLiq5D6Irnjv7OZL/IbZ/1hS qGj+xWU0gJSrz2y5PeBgJo8axfi3SaE+uvOiiHcol83P7pqa3f21hTcI7uxolT+u SSry9AGEzHCIKIrvAwvs7HRddhCuj6tWGAiPWW+ggUzkv0wdEKpysMMyha+arYnF ep3E+kTVN7lXJX3RGF26FIpkchCUo1Q= -----END CERTIFICATE-----Generated at Mon Jun 16 12:24:37 2025 by rpki-client