$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa File: fd95aa17-d91c-36a8-b5f3-5509f5380040.roa (raw, json) Hash identifier: cb2gBl7HonQjVO1gPIAbTZiXvGtvpwdRvlalzDnG0CU= Subject key identifier: 8A:37:59:E6:B3:9D:EB:64:64:76:62:30:37:94:88:CD:C8:5C:73:17 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584A1653757B3A110F9DD9D7CDA8 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa Signing time: Thu 05 Jun 2025 05:36:42 +0000 ROA not before: Thu 05 Jun 2025 05:36:42 +0000 ROA not after: Wed 03 Sep 2025 05:36:42 +0000 asID: 6407 IP address blocks: 204.48.5.0/24 maxlen: 24 204.48.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:16:53:75:7b:3a:11:0f:9d:d9:d7:cd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Jun 5 05:36:42 2025 GMT Not After : Sep 3 05:36:42 2025 GMT Subject: CN=32f3c74a-9ca3-4d05-8bfa-2c6eb4746a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:c1:44:1d:2d:50:c5:7d:0a:dd:c5:6c:f5: e5:c8:f5:a9:3e:f9:10:a4:52:3f:09:1e:90:2e:f5: 45:83:b8:b9:fd:cb:43:89:23:3d:16:9b:44:82:c6: e0:ea:c0:7a:0c:4a:b9:48:9d:1a:75:ad:06:26:0e: ce:21:20:d4:02:1c:cb:d5:a2:7a:a8:60:40:69:8e: 95:90:09:39:0e:9c:76:f1:d5:b1:c9:55:59:9a:3c: 19:7d:f3:ef:25:c7:d2:c1:13:a3:49:eb:99:9d:14: a7:d8:07:d6:9f:d3:1d:02:d9:98:f6:16:38:c1:89: cb:f8:6d:d5:ce:70:06:61:28:f1:d3:b4:19:8c:a4: cf:cb:77:57:df:7f:20:46:62:60:24:9c:c7:99:b3: 4f:23:c3:1b:8a:1c:f2:a7:cf:2d:f1:11:7d:1f:fd: 01:76:50:5f:e5:d5:51:7f:0e:39:b0:e7:41:40:96: 9c:fe:77:19:bd:53:73:31:1c:aa:c9:d8:65:1c:ae: be:42:7a:37:e5:19:5f:9e:37:18:01:2c:da:40:13: 0c:e9:92:aa:79:14:9f:90:66:85:bd:5d:e6:d9:f8: 74:98:8f:10:d3:27:05:2e:a0:89:ae:f7:85:c2:bd: 22:ac:54:7e:b8:dc:ca:6d:e4:a2:4f:dd:5a:45:c8: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:59:E6:B3:9D:EB:64:64:76:62:30:37:94:88:CD:C8:5C:73:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 204.48.5.0-204.48.6.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:2b:8a:82:ad:0e:3f:20:29:aa:69:c2:12:c5:b4:14:56:73: 03:fc:54:5a:f9:c8:29:23:ca:1b:cb:7d:ff:31:47:4b:45:e5: f8:7a:e0:af:f5:36:fb:c3:e5:7f:a0:ce:51:e2:3c:56:2e:16: 1a:30:bd:a7:b3:a1:31:c7:a5:e6:4f:19:41:da:5b:2c:d8:63: 63:d6:0f:c2:37:16:73:65:78:d6:fe:c4:90:3b:eb:28:80:74: 7e:5b:7c:19:69:78:3c:94:d3:21:7a:86:25:f0:77:0f:04:7c: 06:79:04:31:a1:aa:ab:a8:e7:57:c9:a9:f1:32:54:8f:79:de: ab:b7:c7:12:c4:33:9f:70:6e:1e:ca:9d:e7:cd:51:c7:29:77: c8:20:2a:ce:32:ca:a3:82:6d:42:38:b9:d5:0d:74:5f:69:76: 7d:c2:ed:4f:65:44:ee:af:7c:2a:17:21:7e:57:01:5b:4e:d8: 10:1d:06:c7:55:80:58:41:af:7d:73:9b:86:f2:53:7d:1a:c9: 9e:a9:4a:5a:0e:2d:8f:1c:20:c8:62:47:5c:01:d3:2b:5b:62: 22:3b:e8:8d:15:4b:36:8b:e2:e6:56:fa:62:c6:b3:30:a5:d4: fe:de:ad:41:a3:fb:f1:38:ae:30:bb:0e:b1:1f:09:0e:21:12: e0:12:f7:11 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoWU3V7OhEPndnXzagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDYwNTA1MzY0MloXDTI1MDkwMzA1MzY0MlowLzEtMCsGA1UEAxMk MzJmM2M3NGEtOWNhMy00ZDA1LThiZmEtMmM2ZWI0NzQ2YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAHBRB0tUMV9Ct3FbPXlyPWpPvkQpFI/CR6Q LvVFg7i5/ctDiSM9FptEgsbg6sB6DEq5SJ0ada0GJg7OISDUAhzL1aJ6qGBAaY6V kAk5Dpx28dWxyVVZmjwZffPvJcfSwROjSeuZnRSn2AfWn9MdAtmY9hY4wYnL+G3V znAGYSjx07QZjKTPy3dX338gRmJgJJzHmbNPI8Mbihzyp88t8RF9H/0BdlBf5dVR fw45sOdBQJac/ncZvVNzMRyqydhlHK6+Qno35RlfnjcYASzaQBMM6ZKqeRSfkGaF vV3m2fh0mI8Q0ycFLqCJrveFwr0irFR+uNzKbeSiT91aRcjrdQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIo3WeaznetkZHZiMDeUiM3IXHMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvZmQ5NWFhMTctZDkxYy0z NmE4LWI1ZjMtNTUwOWY1MzgwMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMMAUD BADMMAYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGCuKgq0OPyApqmnCEsW0FFZzA/xUWvnIKSPKG8t9/zFH S0Xl+Hrgr/U2+8Plf6DOUeI8Vi4WGjC9p7OhMcel5k8ZQdpbLNhjY9YPwjcWc2V4 1v7EkDvrKIB0flt8GWl4PJTTIXqGJfB3DwR8BnkEMaGqq6jnV8mp8TJUj3neq7fH EsQzn3BuHsqd581Rxyl3yCAqzjLKo4JtQji51Q10X2l2fcLtT2VE7q98KhchflcB W07YEB0Gx1WAWEGvfXObhvJTfRrJnqlKWg4tjxwgyGJHXAHTK1tiIjvojRVLNovi 5lb6YsazMKXU/t6tQaP78TiuMLsOsR8JDiES4BL3EQ== -----END CERTIFICATE-----Generated at Mon Jun 16 15:43:09 2025 by rpki-client