$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa File: b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa (raw, json) Hash identifier: OOENrmapvgHKOe1s7/ixEvSk1Ol1XLAyegnac4uH9NM= Subject key identifier: 00:E2:AA:3B:29:C4:C8:91:C5:DF:43:82:24:FF:E2:1D:F2:8D:D1:2A Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849A61F42F78BAE57A5A4575B70 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 204.9.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:f7:8b:ae:57:a5:a4:57:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=ec2da1ac-b42b-4605-903b-2eac5577c204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:16:73:fc:b8:cb:01:1c:16:b5:16:c2:69: 20:0d:c1:c6:e0:11:eb:75:b8:52:70:71:96:97:59: 74:ef:b9:7c:86:05:af:07:a0:1b:98:fb:fd:96:d6: 13:a3:91:a3:d6:82:c8:a0:c3:1c:6d:2d:c3:48:54: d4:0a:04:cb:25:cd:23:90:9a:53:4b:b6:1a:09:68: 72:19:0b:7d:ff:95:3b:63:86:c8:71:18:3d:e4:d6: db:27:05:8e:2e:a7:ee:7d:7f:78:4a:05:58:e8:2a: 1a:f1:58:fa:7b:8e:4b:4e:43:7a:8d:e7:d9:64:bc: 2f:cc:1e:2b:b5:13:d5:af:16:7b:b4:dd:21:d4:1e: 1d:b3:94:96:3e:2c:ae:87:e7:42:ed:1d:4e:f8:66: fb:15:4e:a6:80:c7:c6:e3:06:2f:e3:fe:9a:55:87: 5a:d4:78:b6:ed:6e:16:61:50:a8:e8:38:59:b7:8e: 41:88:17:91:9c:58:61:c6:e2:ee:d2:f9:13:4d:ca: 2a:31:a8:35:d3:e0:15:4d:2d:6e:30:7d:69:31:3b: 86:d8:ce:ad:25:62:18:74:0f:9b:f9:dc:53:4a:0b: 7f:96:0e:71:3d:3e:ac:67:85:6f:2a:40:b5:70:c4: 5e:02:1b:ac:5b:95:92:2d:66:8a:02:24:04:cd:26: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:AA:3B:29:C4:C8:91:C5:DF:43:82:24:FF:E2:1D:F2:8D:D1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 204.9.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:19:2c:87:4f:d6:56:64:ae:fa:03:e7:75:02:9c:96:4a:53: d2:5a:3b:24:13:f1:0c:1a:70:da:6b:4a:5e:4a:f8:99:59:57: 0d:19:20:2b:c9:54:ec:22:d0:e8:b1:03:72:fa:f5:74:1c:29: 88:8a:f7:e7:84:4a:27:44:13:16:4b:9e:4f:7a:f2:ca:2c:f8: 53:1d:ef:dc:8b:62:c8:1a:3e:2f:65:eb:d1:60:0c:c7:20:24: d1:10:58:06:d3:46:b9:a2:c1:e5:54:64:73:da:ec:e9:11:4d: 7b:e0:a7:a5:f6:58:b1:95:17:dd:e7:f7:40:a3:02:77:94:7f: 8b:18:cb:ce:e7:e8:59:cb:c2:11:c9:29:d6:55:a4:62:e4:a3: df:74:6c:89:bb:8e:a5:18:d3:99:88:7d:c9:76:01:18:21:f1: de:43:22:2d:e4:ed:c6:56:e0:e3:2c:bb:35:d4:e5:48:af:8f: 90:13:56:ab:cf:f4:a2:72:4b:0f:77:ed:54:7e:a3:45:fe:f6: 10:86:f9:33:46:3b:8e:b6:7f:05:94:84:f7:ad:73:94:10:3d: 99:4f:79:28:dc:e3:0c:be:94:5f:01:32:bb:8f:1e:69:72:91: 23:7c:b9:f2:31:ec:76:e8:1a:bc:b0:75:d4:48:7b:3a:da:bc: 78:c6:0a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0L3i65XpaRXW3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZWMyZGExYWMtYjQyYi00NjA1LTkwM2ItMmVhYzU1NzdjMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlIWc/y4ywEcFrUWwmkgDcHG4BHrdbhScHGW l1l077l8hgWvB6AbmPv9ltYTo5Gj1oLIoMMcbS3DSFTUCgTLJc0jkJpTS7YaCWhy GQt9/5U7Y4bIcRg95NbbJwWOLqfufX94SgVY6Coa8Vj6e45LTkN6jefZZLwvzB4r tRPVrxZ7tN0h1B4ds5SWPiyuh+dC7R1O+Gb7FU6mgMfG4wYv4/6aVYda1Hi27W4W YVCo6DhZt45BiBeRnFhhxuLu0vkTTcoqMag10+AVTS1uMH1pMTuG2M6tJWIYdA+b +dxTSgt/lg5xPT6sZ4VvKkC1cMReAhusW5WSLWaKAiQEzSazIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADiqjspxMiRxd9DgiT/4h3yjdEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjA2NjkyZjQtYTZkYy0z ZjE3LWJiZGYtOWIzZTBlZjc2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwZLIdP1lZkrvoD53UCnJZKU9JaOyQT8QwacNprSl5K+JlZVw0ZICvJ VOwi0OixA3L69XQcKYiK9+eESidEExZLnk968sos+FMd79yLYsgaPi9l69FgDMcg JNEQWAbTRrmiweVUZHPa7OkRTXvgp6X2WLGVF93n90CjAneUf4sYy87n6FnLwhHJ KdZVpGLko990bIm7jqUY05mIfcl2ARgh8d5DIi3k7cZW4OMsuzXU5Uivj5ATVqvP 9KJySw937VR+o0X+9hCG+TNGO462fwWUhPetc5QQPZlPeSjc4wy+lF8BMruPHmly kSN8ufIx7HboGrywddRIezravHjGCvo= -----END CERTIFICATE-----Generated at Wed Apr 30 05:30:00 2025 by rpki-client