$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa File: 985211db-3d6b-313f-ad01-983be935ee5a.roa (raw, json) Hash identifier: nZ4Wap+rd+GWgQbfsQQj5o45JJrmqCDjPY3WvoTSk14= Subject key identifier: 1D:24:60:7F:8D:C1:5D:BC:F1:31:58:28:76:C8:24:17:17:A8:78:E3 Certificate issuer: /CN=dd89d034-c049-4b11-917d-e035f703312f Certificate serial: 010D0C9F43285849E22531483FAF334F14786900 Authority key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 13394 IP address blocks: 204.63.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:31:48:3f:af:33:4f:14:78:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd89d034-c049-4b11-917d-e035f703312f Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=919d40fd-241b-4299-9089-ced3763c6087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:08:1c:28:40:a6:13:96:74:79:61:0e:31: b3:6b:05:b5:7a:42:d2:af:f5:ee:a2:e0:60:e3:34: 8e:5d:8d:2c:c2:9e:08:c7:28:6f:9d:58:70:c8:37: 8a:cd:05:d9:85:d7:35:e5:a9:32:b0:b7:57:55:d8: 84:f0:e1:3a:fd:a2:6a:43:64:60:42:bb:76:36:4c: c0:ad:2f:0a:3f:0c:cd:b1:e9:1d:42:69:0f:97:79: f7:85:c4:1b:b7:6a:93:f8:62:16:fc:db:dd:89:b4: 12:fb:86:1b:3b:eb:f5:71:3d:06:56:e5:1b:1a:e3: 7f:1b:b2:88:fd:84:36:2d:e4:19:74:64:e3:89:28: 28:f4:df:7f:4b:f0:45:53:31:45:b2:aa:af:a7:13: 0c:e9:40:7c:76:71:32:60:cf:81:64:39:78:7e:28: 67:84:ea:03:0d:87:b2:7b:cd:b0:30:02:13:3f:1d: 1c:c0:af:6a:65:d7:ad:e3:90:7d:b7:38:df:1d:2a: 74:00:f6:65:0f:d5:80:cd:20:e4:9f:62:19:a4:46: f6:34:ae:f6:fd:1d:23:34:6c:13:d3:dc:91:af:9a: c8:46:9b:0f:87:56:ac:78:80:0b:1e:47:23:43:1d: 05:dc:17:9a:64:18:bf:22:33:11:53:98:68:47:b8: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:24:60:7F:8D:C1:5D:BC:F1:31:58:28:76:C8:24:17:17:A8:78:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl X509v3 Authority Key Identifier: keyid:FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer sbgp-ipAddrBlock: critical IPv4: 204.63.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:42:51:c4:cc:44:dd:36:b2:04:0b:7b:47:dc:16:c0:ed:12: 3e:e1:bf:63:b8:49:1a:43:6c:42:e9:c6:51:0e:1f:6c:9d:0c: 6f:9d:6c:48:c5:dd:eb:b7:6b:b3:7b:6c:3b:8a:ad:c0:b7:c8: 97:0d:c5:8e:5f:48:ff:f5:21:56:d9:e9:42:01:cd:6a:e2:45: 6b:eb:87:1b:bd:39:be:67:16:cc:9f:d2:22:be:bd:1d:19:e7: 89:63:2e:c2:d6:ff:e1:1c:cb:d5:dc:b1:93:f6:d2:23:62:89: 44:eb:2e:a0:1c:1c:83:25:2b:92:b5:43:f4:b1:b1:19:b6:1b: a7:19:a9:7f:8d:cc:4a:e0:c9:7f:a6:60:34:5c:f7:b0:25:ac: d0:db:77:25:c8:f1:4f:67:63:37:06:15:53:5e:e0:b7:42:14: cc:e2:ae:36:ae:c2:a6:1c:79:d9:db:a5:29:85:1f:74:57:45: 3b:14:61:2f:ab:b3:a1:76:25:61:22:6d:cd:94:9e:a2:df:f9: 69:ef:e4:4f:a7:23:e0:05:36:65:87:d9:ff:ae:8b:2d:1d:be: 65:75:36:c3:f0:c9:3b:30:14:f1:9d:13:24:f4:25:7f:f9:1d: b8:0f:9a:7e:4d:f3:10:6d:91:25:d6:29:d6:d8:ba:2c:76:f3: 81:34:6d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTFIP68zTxR4aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMz MTJmMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk OTE5ZDQwZmQtMjQxYi00Mjk5LTkwODktY2VkMzc2M2M2MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g4IHChAphOWdHlhDjGzawW1ekLSr/XuouBg 4zSOXY0swp4IxyhvnVhwyDeKzQXZhdc15akysLdXVdiE8OE6/aJqQ2RgQrt2NkzA rS8KPwzNsekdQmkPl3n3hcQbt2qT+GIW/NvdibQS+4YbO+v1cT0GVuUbGuN/G7KI /YQ2LeQZdGTjiSgo9N9/S/BFUzFFsqqvpxMM6UB8dnEyYM+BZDl4fihnhOoDDYey e82wMAITPx0cwK9qZdet45B9tzjfHSp0APZlD9WAzSDkn2IZpEb2NK72/R0jNGwT 09yRr5rIRpsPh1aseIALHkcjQx0F3BeaZBi/IjMRU5hoR7iTCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0kYH+NwV288TFYKHbIJBcXqHjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5 ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvOTg1MjExZGItM2Q2Yi0z MTNmLWFkMDEtOTgzYmU5MzVlZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQ4OWQwMzQtYzA0OS00YjExLTkx N2QtZTAzNWY3MDMzMTJmL2RkODlkMDM0LWMwNDktNGIxMS05MTdkLWUwMzVmNzAz MzEyZi5jcmwwHwYDVR0jBBgwFoAU/S02zOzuANwpZCaofC+s5h8OsfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1 ZjcwMzMxMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzD/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBCUcTMRN02sgQLe0fcFsDtEj7hv2O4SRpDbELpxlEOH2ydDG+dbEjF 3eu3a7N7bDuKrcC3yJcNxY5fSP/1IVbZ6UIBzWriRWvrhxu9Ob5nFsyf0iK+vR0Z 54ljLsLW/+Ecy9XcsZP20iNiiUTrLqAcHIMlK5K1Q/SxsRm2G6cZqX+NzErgyX+m YDRc97AlrNDbdyXI8U9nYzcGFVNe4LdCFMzirjauwqYcednbpSmFH3RXRTsUYS+r s6F2JWEibc2UnqLf+Wnv5E+nI+AFNmWH2f+uiy0dvmV1NsPwyTswFPGdEyT0JX/5 HbgPmn5N8xBtkSXWKdbYuix284E0bSM= -----END CERTIFICATE-----Generated at Sun Jun 15 11:52:24 2025 by rpki-client