$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa File: 942664f6-20be-3e59-9c12-35186f7f5c0c.roa (raw, json) Hash identifier: FO/XBFRyQ7q4F4fdzqEAmJ29ahVWnHvk8c0eDgHXZ9g= Subject key identifier: 8C:8E:56:49:8A:C4:43:B8:3C:0E:F3:76:A1:FC:59:4F:36:E2:75:80 Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Certificate serial: 010D0C9F43285849806F26833E01D9F2C962D180 Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 393981 IP address blocks: 204.239.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:26:83:3e:01:d9:f2:c9:62:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=21f779eb-2dc7-4ec5-935e-1db06b0580c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:6d:b5:a0:3b:ba:09:de:92:ab:8c:75:ed: 44:b9:da:c1:09:50:69:0d:83:c3:a0:81:45:4b:9c: 65:fb:21:ea:16:49:3c:f4:78:b0:54:b3:2c:d7:44: 23:88:f3:0f:39:6e:f1:b1:84:fe:38:ac:3b:b3:dc: e4:03:29:93:ea:df:39:a8:18:d4:a7:f6:3f:86:e9: 71:c4:8d:92:6e:e6:dc:79:a2:1c:83:64:d4:9f:f0: b2:5e:1f:b9:76:ad:fc:2c:ac:ed:39:74:b3:92:80: 96:f2:fe:3d:60:e4:3e:d3:e7:73:d6:77:5f:62:ee: 9d:76:55:6a:47:2d:32:b8:3a:9e:4f:5b:ef:74:51: c4:4a:e2:3d:72:11:71:94:31:4d:72:3c:7e:4e:20: 37:fd:77:02:ea:4b:28:29:4c:0f:7b:22:c5:be:1e: 20:e0:4d:44:25:9e:be:31:da:d2:b0:d6:d7:14:2a: 21:77:ef:d0:82:76:db:d9:af:e8:f6:a0:b7:42:62: 19:49:33:8a:70:64:0c:e4:3f:b7:f4:73:ea:a2:5b: db:3c:e2:22:48:5d:d6:ca:a6:60:d8:4f:8b:18:48: 07:93:fe:9f:3e:e3:8d:6a:6f:7e:ad:0a:7e:ee:37: f0:ff:d0:22:fa:84:75:3d:bd:c7:aa:83:ab:cf:9a: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8E:56:49:8A:C4:43:B8:3C:0E:F3:76:A1:FC:59:4F:36:E2:75:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl X509v3 Authority Key Identifier: keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer sbgp-ipAddrBlock: critical IPv4: 204.239.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e9:3d:1c:d4:79:64:28:83:c3:53:f6:0b:96:73:c7:96:14: 50:02:cb:4e:85:9b:06:54:7c:21:06:a2:72:b1:ef:97:3a:55: ee:73:cf:02:04:92:de:8a:74:a8:86:c6:13:b1:4d:97:cb:f5: 6c:f2:69:40:03:1b:91:b3:9e:09:e5:76:e0:fa:de:86:9e:39: 94:e0:a0:97:19:fe:14:03:dd:a3:2e:45:69:b5:e2:f5:8e:a6: 5d:75:0e:23:17:d3:e2:28:ee:76:72:e4:68:8e:56:ac:70:17: ce:50:23:8a:4a:3c:85:61:39:e2:41:48:a0:19:86:ee:5b:da: 53:12:5b:f9:b3:37:3b:9c:a6:ce:4e:15:99:70:71:df:50:07: 4d:e6:cd:3c:7a:00:62:dd:f8:6e:34:ce:5c:0f:a4:89:02:0d: 4c:5d:3b:22:76:cb:2b:b3:34:7c:be:84:7b:79:7b:ec:77:17: 63:b3:1f:c2:52:68:4b:1e:e5:b7:b2:59:36:1f:a6:a0:3b:90: 7e:ac:27:5a:60:df:19:3a:9a:97:cf:4a:3a:d6:fe:10:16:fd: c2:57:53:f4:97:60:19:fe:4f:47:3b:7f:43:39:f6:2e:0f:8a: 1a:f7:08:d2:74:da:f5:0c:ba:a1:41:3e:6a:e4:43:b2:28:a6: bd:9f:ca:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyaDPgHZ8sli0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcx OGVmMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MjFmNzc5ZWItMmRjNy00ZWM1LTkzNWUtMWRiMDZiMDU4MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohlttaA7ugnekquMde1EudrBCVBpDYPDoIFF S5xl+yHqFkk89HiwVLMs10QjiPMPOW7xsYT+OKw7s9zkAymT6t85qBjUp/Y/hulx xI2SbubceaIcg2TUn/CyXh+5dq38LKztOXSzkoCW8v49YOQ+0+dz1ndfYu6ddlVq Ry0yuDqeT1vvdFHESuI9chFxlDFNcjx+TiA3/XcC6ksoKUwPeyLFvh4g4E1EJZ6+ MdrSsNbXFCohd+/Qgnbb2a/o9qC3QmIZSTOKcGQM5D+39HPqolvbPOIiSF3WyqZg 2E+LGEgHk/6fPuONam9+rQp+7jfw/9Ai+oR1Pb3HqoOrz5oh1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyOVkmKxEO4PA7zdqH8WU824nWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEw YWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvOTQyNjY0ZjYtMjBiZS0z ZTU5LTljMTItMzUxODZmN2Y1YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGQxMGFjNjctZDhmZi00ZTJlLTky ZTktOTliOGFhMjcxOGVmLzRkMTBhYzY3LWQ4ZmYtNGUyZS05MmU5LTk5YjhhYTI3 MThlZi5jcmwwHwYDVR0jBBgwFoAUL4RfQ6yTgW/6VJUXKva2p0MINvkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4 YWEyNzE4ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO9TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHpPRzUeWQog8NT9guWc8eWFFACy06FmwZUfCEGonKx75c6Ve5zzwIE kt6KdKiGxhOxTZfL9WzyaUADG5GzngnlduD63oaeOZTgoJcZ/hQD3aMuRWm14vWO pl11DiMX0+Io7nZy5GiOVqxwF85QI4pKPIVhOeJBSKAZhu5b2lMSW/mzNzucps5O FZlwcd9QB03mzTx6AGLd+G40zlwPpIkCDUxdOyJ2yyuzNHy+hHt5e+x3F2OzH8JS aEse5beyWTYfpqA7kH6sJ1pg3xk6mpfPSjrW/hAW/cJXU/SXYBn+T0c7f0M59i4P ihr3CNJ02vUMuqFBPmrkQ7Iopr2fygg= -----END CERTIFICATE-----Generated at Sun Jun 15 12:06:36 2025 by rpki-client