$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa File: a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa (raw, json) Hash identifier: pWYxEfx80eqI3tH1z7pThrYn27AfO7a5SZVEBEFwz0A= Subject key identifier: 6F:18:42:A7:26:E6:FE:59:E1:69:00:C7:0F:D4:48:66:3D:62:92:F1 Certificate issuer: /CN=bc061f95-a504-48f1-88f1-fae53628511e Certificate serial: 010D0C9F4328584996DC34676440B26EAC686980 Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa Signing time: Sun 20 Apr 2025 13:48:46 +0000 ROA not before: Sun 20 Apr 2025 13:48:46 +0000 ROA not after: Sat 19 Jul 2025 13:48:46 +0000 asID: 398885 IP address blocks: 204.107.12.0/24 maxlen: 24 204.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:dc:34:67:64:40:b2:6e:ac:68:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e Validity Not Before: Apr 20 13:48:46 2025 GMT Not After : Jul 19 13:48:46 2025 GMT Subject: CN=992cf153-6521-4a16-8340-741ea133627f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:05:fb:01:28:f0:1e:b8:47:7b:cb:fa:2b:39: c4:f8:46:d3:4a:02:73:6e:25:99:f2:8f:82:71:95: 51:93:28:58:d3:37:26:29:c1:5c:cb:6c:bd:85:c3: a8:92:5b:31:49:b8:5d:81:e2:c1:63:02:93:82:d3: 80:1d:cd:48:fe:21:59:1e:0d:68:31:6f:aa:2b:46: 10:84:55:d8:68:86:4b:25:10:0d:a1:18:6c:71:6b: 52:0d:1e:b6:76:1a:32:98:83:08:bd:e9:f8:f0:1b: e1:68:42:5a:be:25:12:d3:9e:2e:c2:5f:5f:8c:40: 16:54:14:c0:e8:e5:04:a0:77:c2:96:d1:bc:21:0d: 11:4c:b6:22:80:cf:9a:9b:30:f4:ad:77:d2:c1:1a: e2:57:ca:5b:e5:04:61:1c:45:5b:a2:49:04:be:d0: 8e:58:3c:be:52:9f:b6:08:5d:6d:99:a6:5c:71:68: 9f:2f:81:4f:87:82:fd:84:24:b9:35:77:e5:16:a3: 59:ab:b4:94:92:74:c7:cd:21:da:ed:e8:81:5c:19: 17:00:0f:b2:73:f5:c9:92:ac:11:20:e4:ad:50:eb: ed:ba:d8:aa:e5:d1:2b:03:7c:c5:c3:75:cd:2c:ac: d8:16:31:e7:09:39:c9:dc:aa:10:11:3d:3f:6e:7a: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:18:42:A7:26:E6:FE:59:E1:69:00:C7:0F:D4:48:66:3D:62:92:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl X509v3 Authority Key Identifier: keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer sbgp-ipAddrBlock: critical IPv4: 204.107.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cf:25:c0:6d:7c:14:eb:11:82:a7:17:aa:c1:17:df:89:07: 15:cd:cc:98:df:37:22:b2:1b:a6:be:f1:9c:a2:d6:eb:aa:45: ab:b3:0f:9c:45:4e:c3:87:bc:73:5b:65:99:e1:0b:4e:de:44: 4e:5e:ff:8f:df:ec:3c:6a:5c:db:a1:c4:c6:2a:64:dc:9e:9a: cd:b1:bb:7e:47:43:5f:c6:91:26:9a:53:dc:71:12:e2:25:c6: e9:a5:f9:bd:28:2e:e7:f6:44:84:43:86:28:3a:fe:a0:00:29: 9c:2b:23:7e:29:b5:d7:3e:99:8f:0f:59:69:37:5c:ce:02:9e: 82:2f:df:2f:0b:b0:ae:c9:99:b9:17:be:76:b1:71:f6:52:28: ff:79:cc:b3:cc:34:b9:bc:61:40:04:b4:d7:ac:3f:f4:a1:15: 34:d3:31:24:ba:bd:42:f6:0d:50:2b:9e:86:92:c2:9c:ea:66: ad:08:b4:05:7f:ed:e5:3e:06:7c:8e:f5:e6:99:9e:43:3d:94: 43:cf:d3:f8:9a:a1:8f:95:bc:33:b9:29:0f:4f:a2:3e:89:a5: 0d:6b:3d:f8:93:51:fe:85:ad:43:1b:ed:e5:3c:1d:32:27:e7: 79:d7:69:89:87:ff:90:b3:0d:e4:1a:cd:51:77:bb:bc:05:26: a7:f7:80:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmW3DRnZECybqxoaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMwNjFmOTUtYTUwNC00OGYxLTg4ZjEtZmFlNTM2Mjg1 MTFlMB4XDTI1MDQyMDEzNDg0NloXDTI1MDcxOTEzNDg0NlowLzEtMCsGA1UEAxMk OTkyY2YxNTMtNjUyMS00YTE2LTgzNDAtNzQxZWExMzM2MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgX7ASjwHrhHe8v6KznE+EbTSgJzbiWZ8o+C cZVRkyhY0zcmKcFcy2y9hcOoklsxSbhdgeLBYwKTgtOAHc1I/iFZHg1oMW+qK0YQ hFXYaIZLJRANoRhscWtSDR62dhoymIMIven48BvhaEJaviUS054uwl9fjEAWVBTA 6OUEoHfCltG8IQ0RTLYigM+amzD0rXfSwRriV8pb5QRhHEVbokkEvtCOWDy+Up+2 CF1tmaZccWifL4FPh4L9hCS5NXflFqNZq7SUknTHzSHa7eiBXBkXAA+yc/XJkqwR IOStUOvtutiq5dErA3zFw3XNLKzYFjHnCTnJ3KoQET0/bnqTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8YQqcm5v5Z4WkAxw/USGY9YpLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2 MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1MzYyODUxMWUvYTJjNjRkM2QtZmY1OC0z N2U1LTg3N2YtZjFiMTNlYTMxMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMwNjFmOTUtYTUwNC00OGYxLTg4 ZjEtZmFlNTM2Mjg1MTFlL2JjMDYxZjk1LWE1MDQtNDhmMS04OGYxLWZhZTUzNjI4 NTExZS5jcmwwHwYDVR0jBBgwFoAUFFAVosutB3c4zIGLkq2jLlFK84EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1 MzYyODUxMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/PJcBtfBTrEYKnF6rBF9+JBxXNzJjfNyKyG6a+8Zyi1uuqRauzD5xF TsOHvHNbZZnhC07eRE5e/4/f7DxqXNuhxMYqZNyems2xu35HQ1/GkSaaU9xxEuIl xuml+b0oLuf2RIRDhig6/qAAKZwrI34ptdc+mY8PWWk3XM4CnoIv3y8LsK7JmbkX vnaxcfZSKP95zLPMNLm8YUAEtNesP/ShFTTTMSS6vUL2DVArnoaSwpzqZq0ItAV/ 7eU+BnyO9eaZnkM9lEPP0/iaoY+VvDO5KQ9Poj6JpQ1rPfiTUf6FrUMb7eU8HTIn 53nXaYmH/5CzDeQazVF3u7wFJqf3gC4= -----END CERTIFICATE-----Generated at Tue Apr 29 08:38:28 2025 by rpki-client