$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa File: 844a594c-7e4b-3b8f-aaee-aec765543f6a.roa (raw, json) Hash identifier: mZv5FzvGKzoM6t5+UFMxmT02TzW41yV0ApsCK1tz9VU= Subject key identifier: 77:B3:9D:C6:78:DA:DD:32:3D:63:B9:53:C8:38:1E:94:5E:9A:00:AF Certificate issuer: /CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Certificate serial: 010D0C9F4328584A2EEAB8B25FD479EA1F813640 Authority key identifier: 33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 376 IP address blocks: 204.19.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:b8:b2:5f:d4:79:ea:1f:81:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=4fc83e22-4a20-4b5e-81dd-080ce72aee7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:2f:1d:21:07:19:4d:73:42:26:47:28:98: 34:a3:24:5a:9b:66:07:9b:1a:6e:78:2b:01:41:43: 9e:22:c5:ee:4d:59:da:12:ab:c9:9d:09:78:2e:bd: f9:14:ea:6c:d9:bd:06:c6:04:01:9b:95:77:27:dc: 44:8b:53:18:50:47:87:d4:6a:f6:e7:57:3a:12:5a: 43:a2:2e:70:f0:48:0c:49:81:84:d6:92:0d:cc:71: 8b:de:c6:6f:ac:24:c4:01:f0:2e:29:41:9a:2f:76: e2:d8:93:60:fc:d5:ea:8e:87:3f:6e:c4:5b:1a:54: d7:b6:39:87:80:1c:a0:56:e6:93:57:56:26:ea:74: 78:da:7b:a4:73:d3:78:1d:56:dd:c1:7f:c9:2f:ad: 31:65:13:a1:ed:05:a4:d6:6d:0e:02:44:be:2a:e8: 21:9c:3e:07:b9:24:3e:31:60:63:1e:f0:e6:3b:c1: 61:76:08:f1:b8:52:62:1b:de:f7:08:2a:b3:08:6b: 56:94:b6:da:04:3f:62:17:c7:5b:9f:0f:b8:59:a9: 50:3c:a2:f3:8c:e5:8f:2e:78:73:68:7b:a0:e1:7d: cc:3a:41:ff:a1:25:db:d2:04:5c:80:71:c2:83:69: da:88:fc:2d:85:79:54:98:29:b8:00:f3:23:ff:33: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B3:9D:C6:78:DA:DD:32:3D:63:B9:53:C8:38:1E:94:5E:9A:00:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl X509v3 Authority Key Identifier: keyid:33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer sbgp-ipAddrBlock: critical IPv4: 204.19.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:23:7b:d5:a1:14:f1:8f:35:85:46:78:e5:f1:49:c8:0c:2c: 1c:8b:72:e5:0c:8a:09:dd:59:26:d7:1c:e9:7d:78:cf:bb:92: 65:43:fd:d2:81:58:e5:91:9f:03:b5:00:31:4c:a0:67:6b:09: 66:75:7f:ff:9c:24:2e:bc:45:1f:66:5b:12:43:b7:ba:f0:a3: d8:4d:8f:37:40:c1:96:6f:43:c9:bb:d5:dd:51:1e:48:08:6b: 03:3d:46:de:64:1b:e0:10:b9:33:f0:66:86:0d:e5:9d:94:ae: 62:8e:66:96:97:49:a8:44:de:08:27:04:ff:2c:d1:70:37:7f: ab:00:5d:7e:a6:70:59:8c:56:36:1f:2c:11:cd:aa:f5:04:4f: a8:34:1c:83:bf:80:36:d8:0a:bb:3f:f3:0f:bd:ae:4c:0d:6e: ff:dc:eb:69:0c:5a:9f:7d:4b:c4:7f:dd:60:85:07:97:d7:4d: b0:e2:b9:49:d0:66:67:cc:6d:eb:09:69:3e:c2:16:3e:bd:75: 43:f5:cb:12:7d:f9:52:5a:9c:b4:13:b8:b1:93:df:bb:00:f5: f8:59:99:70:38:4a:d6:92:eb:ca:c6:e2:38:81:73:66:f5:27: 8f:8d:21:4c:30:59:6a:a1:ee:4f:d5:1c:d8:10:53:a2:3a:b4: 59:50:90:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6riyX9R56h+BNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTgyOTFkNGQtZGE0OC00YjI1LTg0ZDYtM2RmODhmMmZl ZDU0MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk NGZjODNlMjItNGEyMC00YjVlLTgxZGQtMDgwY2U3MmFlZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWMvHSEHGU1zQiZHKJg0oyRam2YHmxpueCsB QUOeIsXuTVnaEqvJnQl4Lr35FOps2b0GxgQBm5V3J9xEi1MYUEeH1Gr251c6ElpD oi5w8EgMSYGE1pINzHGL3sZvrCTEAfAuKUGaL3bi2JNg/NXqjoc/bsRbGlTXtjmH gBygVuaTV1Ym6nR42nukc9N4HVbdwX/JL60xZROh7QWk1m0OAkS+KughnD4HuSQ+ MWBjHvDmO8FhdgjxuFJiG973CCqzCGtWlLbaBD9iF8dbnw+4WalQPKLzjOWPLnhz aHug4X3MOkH/oSXb0gRcgHHCg2naiPwthXlUmCm4APMj/zP87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHezncZ42t0yPWO5U8g4HpRemgCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xODI5 MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4OGYyZmVkNTQvODQ0YTU5NGMtN2U0Yi0z YjhmLWFhZWUtYWVjNzY1NTQzZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTgyOTFkNGQtZGE0OC00YjI1LTg0 ZDYtM2RmODhmMmZlZDU0LzE4MjkxZDRkLWRhNDgtNGIyNS04NGQ2LTNkZjg4ZjJm ZWQ1NC5jcmwwHwYDVR0jBBgwFoAUM9lgbdXMKovJHNAJgMgAwq5YgtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xODI5MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4 OGYyZmVkNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgje9WhFPGPNYVGeOXxScgMLByLcuUMigndWSbXHOl9eM+7kmVD/dKB WOWRnwO1ADFMoGdrCWZ1f/+cJC68RR9mWxJDt7rwo9hNjzdAwZZvQ8m71d1RHkgI awM9Rt5kG+AQuTPwZoYN5Z2UrmKOZpaXSahE3ggnBP8s0XA3f6sAXX6mcFmMVjYf LBHNqvUET6g0HIO/gDbYCrs/8w+9rkwNbv/c62kMWp99S8R/3WCFB5fXTbDiuUnQ ZmfMbesJaT7CFj69dUP1yxJ9+VJanLQTuLGT37sA9fhZmXA4StaS68rG4jiBc2b1 J4+NIUwwWWqh7k/VHNgQU6I6tFlQkJI= -----END CERTIFICATE-----Generated at Mon Jun 16 11:56:30 2025 by rpki-client