$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa File: 34c75caf-5f31-3ddf-b113-d584f51f166e.roa (raw, json) Hash identifier: cYlXmmRvpcB0JIsCZ2ydkXyZi366DWwqMhLmPUf4mm8= Subject key identifier: BB:CB:10:90:BD:A1:34:E4:67:8C:6B:EE:DE:5A:A7:D7:FB:75:16:85 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584A18954BC5D6238A9C797D7300 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 8075 IP address blocks: 204.209.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:4b:c5:d6:23:8a:9c:79:7d:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=41816188-bf0a-4db3-ad02-17865f1534a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:62:fd:68:8d:fb:74:e8:f6:02:df:a4:52: 54:21:6a:92:fd:36:b4:dd:e9:e9:b9:81:04:ce:45: 97:50:39:33:03:fd:a2:ff:ae:0d:bd:cf:52:e1:81: ba:d1:12:d9:aa:37:fc:f2:3c:25:1a:e7:12:42:c6: b7:76:43:9f:1e:45:1b:59:cf:5c:df:20:89:94:07: db:b8:a8:13:a9:96:7b:82:d0:7c:b7:90:e5:9f:96: 31:b3:fe:c7:7d:5c:3b:7e:55:d0:81:ed:e1:0d:0e: f6:a2:35:88:df:66:52:a1:42:b2:46:e4:70:e0:67: 5e:a3:90:5b:4c:17:15:49:c3:51:65:dd:ac:b9:db: fe:e1:20:26:ad:4f:17:aa:9a:8d:f2:3f:10:f3:4d: cb:cb:b3:fd:e1:6c:f6:5f:33:97:ba:1d:41:50:57: 7c:0d:26:2b:40:7c:98:c5:1d:1e:6c:4e:8b:33:1b: c0:5d:cd:ee:a6:2f:b4:24:50:8f:77:64:e1:a6:41: a0:1f:9c:b0:00:4b:1b:e1:ef:fd:af:ac:5f:1f:06: e5:33:23:6d:60:ec:d1:85:49:25:c3:11:1d:7e:02: 8a:56:d5:3a:aa:a0:de:fe:a6:29:26:98:93:64:19: f5:f5:fa:71:5b:93:5c:7d:33:8c:30:c3:d6:9e:99: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:10:90:BD:A1:34:E4:67:8C:6B:EE:DE:5A:A7:D7:FB:75:16:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:91:7c:1f:da:84:2e:21:9f:a6:03:e1:42:2e:95:bd:b6:16: f0:c9:bf:93:f1:44:0f:53:ef:9d:c8:23:d1:4d:5a:11:33:d3: b6:75:8a:b3:05:a5:e5:d8:6f:e8:5d:cb:a2:3a:76:8c:02:e8: ec:ca:dd:15:27:ff:b8:2f:cc:65:ac:a3:5c:fc:4b:0f:32:3b: 57:33:6c:f5:f3:2a:c7:8f:90:5d:2f:23:0a:7d:77:17:ea:bd: 74:3b:86:58:e0:d5:b0:4e:27:65:85:0c:40:8a:a4:f2:92:c6: c8:e8:fd:23:a3:f3:18:1c:a3:96:37:d8:60:41:4d:51:39:39: b7:e4:71:1d:05:46:fc:1a:19:d7:c0:8c:f8:a3:7b:bd:eb:0a: 40:44:54:8d:52:94:54:a2:01:6a:ab:29:10:08:9d:fc:7e:4b: ec:35:26:9d:bc:ac:4c:8f:55:ba:cf:b4:e2:8f:8e:6a:2a:f7: bb:98:cf:a2:e5:48:4a:d6:41:72:38:ca:6c:c5:dd:1b:80:5c: d5:25:41:d4:78:bb:23:28:77:6e:34:74:b7:19:c6:4a:9e:8d: 25:4c:89:8b:0a:d1:24:98:f1:31:0a:62:f6:50:38:90:7c:39: d5:8c:c5:56:26:53:6a:49:f9:8d:5c:f2:5b:3f:05:aa:5a:8e: 14:34:f5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUvF1iOKnHl9cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk NDE4MTYxODgtYmYwYS00ZGIzLWFkMDItMTc4NjVmMTUzNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/pi/WiN+3To9gLfpFJUIWqS/Ta03enpuYEE zkWXUDkzA/2i/64Nvc9S4YG60RLZqjf88jwlGucSQsa3dkOfHkUbWc9c3yCJlAfb uKgTqZZ7gtB8t5Dln5Yxs/7HfVw7flXQge3hDQ72ojWI32ZSoUKyRuRw4Gdeo5Bb TBcVScNRZd2sudv+4SAmrU8XqpqN8j8Q803Ly7P94Wz2XzOXuh1BUFd8DSYrQHyY xR0ebE6LMxvAXc3upi+0JFCPd2ThpkGgH5ywAEsb4e/9r6xfHwblMyNtYOzRhUkl wxEdfgKKVtU6qqDe/qYpJpiTZBn19fpxW5NcfTOMMMPWnpkqiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvLEJC9oTTkZ4xr7t5ap9f7dRaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMzRjNzVjYWYtNWYzMS0z ZGRmLWIxMTMtZDU4NGY1MWYxNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyRfB/ahC4hn6YD4UIulb22FvDJv5PxRA9T753II9FNWhEz07Z1irMF peXYb+hdy6I6dowC6OzK3RUn/7gvzGWso1z8Sw8yO1czbPXzKsePkF0vIwp9dxfq vXQ7hljg1bBOJ2WFDECKpPKSxsjo/SOj8xgco5Y32GBBTVE5ObfkcR0FRvwaGdfA jPije73rCkBEVI1SlFSiAWqrKRAInfx+S+w1Jp28rEyPVbrPtOKPjmoq97uYz6Ll SErWQXI4ymzF3RuAXNUlQdR4uyMod240dLcZxkqejSVMiYsK0SSY8TEKYvZQOJB8 OdWMxVYmU2pJ+Y1c8ls/BapajhQ09SA= -----END CERTIFICATE-----Generated at Sun Jun 15 20:43:26 2025 by rpki-client