$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa File: 08faf29f-43ea-3741-adc8-4b04d7d43597.roa (raw, json) Hash identifier: AAyr6YKtBbfquR19liLP7/ojbQ9jhuRTjh1RGM+Kyzg= Subject key identifier: A4:06:B8:C6:C8:2F:CB:28:A4:25:D4:75:65:03:E1:6E:B9:27:AB:07 Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F4328584A03A54D0432468967FABF49A0 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 204.76.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4d:04:32:46:89:67:fa:bf:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=d9f81b83-07d3-4b74-9c13-1a059a670c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:f6:a3:da:ef:30:32:b9:34:4f:5f:e4:68: 8f:29:45:c3:3c:c8:d3:c3:be:21:85:57:8f:95:ca: f2:4f:c0:bd:46:6e:08:ec:6d:58:25:a1:f2:82:95: 8d:d9:d0:78:a2:f0:57:a9:10:1e:e7:79:49:8f:93: a9:6d:5c:71:d5:0f:d5:20:c4:e4:71:e6:26:73:08: 2b:37:9d:00:2d:e9:3a:30:f9:2b:58:18:69:88:55: 23:02:cc:e4:16:b2:96:bd:d4:3f:00:b0:63:4b:dc: 9a:00:e7:d9:87:fa:b1:a8:0a:e9:e5:57:3e:e0:61: 7f:2f:e8:6d:28:12:d9:95:87:af:00:db:f7:fd:44: da:ff:24:59:8f:8d:09:49:f9:a7:4b:4c:61:82:c1: f5:90:75:a4:ad:91:38:15:a4:2b:ac:a6:c9:61:95: 78:10:87:03:20:09:e2:c9:be:40:ac:f1:9c:81:ea: a3:73:60:93:09:14:c1:d8:ef:38:11:85:54:7c:7e: 2e:87:48:cf:9c:0c:5f:20:ff:94:3c:1c:30:66:a2: da:f1:13:57:61:9e:82:ff:9a:50:4f:12:a9:27:6c: 10:71:72:58:50:15:a1:c6:7b:06:de:55:61:98:d6: 11:e3:e1:db:b9:23:3c:69:a6:93:d1:13:00:f2:ec: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:06:B8:C6:C8:2F:CB:28:A4:25:D4:75:65:03:E1:6E:B9:27:AB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv4: 204.76.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:f8:46:07:db:1b:ae:a1:79:07:67:0e:1f:76:d6:32:6d:07: 0e:01:da:02:01:6e:5d:93:cf:35:45:ab:84:0c:1e:8b:3b:af: 92:7e:48:a4:43:da:5c:7a:ad:1d:5d:18:a3:7e:ae:63:89:38: 46:8a:c6:43:a6:f6:72:92:90:ae:62:80:fe:90:ad:87:b2:c6: 8b:93:9c:4b:9b:70:b0:df:6f:c1:9a:17:24:f0:bf:b8:5c:ca: 04:03:e7:3b:3b:47:09:af:ad:90:0a:de:25:af:aa:17:3a:c8: 7c:f5:e1:a7:18:7a:3e:67:64:23:28:dc:f4:24:33:02:7b:e7: 7e:de:4c:05:1c:5f:b9:1f:3c:e7:f0:a1:6e:c0:b6:6c:01:cd: 97:7b:42:bc:b3:d8:9a:7e:75:f8:ef:a6:82:81:78:aa:be:f1: 5a:97:ae:e5:96:7f:eb:5e:04:4b:25:3a:f2:eb:85:22:99:07: b4:57:99:b5:28:67:95:8c:6c:01:5b:17:3e:24:26:a8:44:67: a8:4d:14:42:98:ff:55:af:e9:7c:6f:2e:b4:c1:5d:3d:8b:80: 8e:75:a6:8a:4c:e3:6a:a8:12:16:c1:66:6e:b9:6d:f3:12:ef: e5:6b:d4:2a:7a:5f:d1:97:d4:56:6b:b3:93:16:b1:93:b3:c0: 66:90:94:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpU0EMkaJZ/q/SaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZDlmODFiODMtMDdkMy00Yjc0LTljMTMtMWEwNTlhNjcwYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpH2o9rvMDK5NE9f5GiPKUXDPMjTw74hhVeP lcryT8C9Rm4I7G1YJaHygpWN2dB4ovBXqRAe53lJj5OpbVxx1Q/VIMTkceYmcwgr N50ALek6MPkrWBhpiFUjAszkFrKWvdQ/ALBjS9yaAOfZh/qxqArp5Vc+4GF/L+ht KBLZlYevANv3/UTa/yRZj40JSfmnS0xhgsH1kHWkrZE4FaQrrKbJYZV4EIcDIAni yb5ArPGcgeqjc2CTCRTB2O84EYVUfH4uh0jPnAxfIP+UPBwwZqLa8RNXYZ6C/5pQ TxKpJ2wQcXJYUBWhxnsG3lVhmNYR4+HbuSM8aaaT0RMA8uzxoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQGuMbIL8sopCXUdWUD4W65J6sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvMDhmYWYyOWYtNDNlYS0z NzQxLWFkYzgtNGIwNGQ3ZDQzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMP4RgfbG66heQdnDh921jJtBw4B2gIBbl2TzzVFq4QMHos7r5J+SKRD 2lx6rR1dGKN+rmOJOEaKxkOm9nKSkK5igP6QrYeyxouTnEubcLDfb8GaFyTwv7hc ygQD5zs7RwmvrZAK3iWvqhc6yHz14acYej5nZCMo3PQkMwJ7537eTAUcX7kfPOfw oW7AtmwBzZd7Qryz2Jp+dfjvpoKBeKq+8VqXruWWf+teBEslOvLrhSKZB7RXmbUo Z5WMbAFbFz4kJqhEZ6hNFEKY/1Wv6XxvLrTBXT2LgI51popM42qoEhbBZm65bfMS 7+Vr1Cp6X9GX1FZrs5MWsZOzwGaQlEY= -----END CERTIFICATE-----Generated at Thu Jun 19 14:27:36 2025 by rpki-client