$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa File: dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa (raw, json) Hash identifier: JewoovlmxW/mKHtIvcDQlGb3GuBhkSnMO8GrEyiAyFY= Subject key identifier: 7A:3B:4E:B6:DA:E6:5C:F1:65:91:B5:49:2F:05:2D:95:1D:68:E6:9D Certificate issuer: /CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Certificate serial: 010D0C9F4328584A0C0548DDDD43720FF4F20700 Authority key identifier: 26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 18438 IP address blocks: 204.136.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:48:dd:dd:43:72:0f:f4:f2:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=1de5cbef-e0f5-40d5-8479-e23dd7ada706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:49:4c:21:d4:a4:d9:7f:e2:51:ab:46:e1:2f: b8:4e:67:8a:c3:90:68:be:28:9f:d0:ed:05:95:37: d5:b5:22:83:a0:aa:f0:59:48:f0:dd:c6:ca:a1:b6: f0:34:7d:ce:e3:aa:96:3e:46:29:4d:d0:b9:e4:ca: d0:75:43:33:d0:98:08:cd:48:d1:9b:af:4f:c5:37: 95:62:41:96:45:48:6d:8f:a3:54:f7:d3:b6:e4:60: 7e:c7:aa:85:0e:60:9d:0f:0e:e4:40:71:f8:29:69: 61:fc:c1:d3:b0:cf:a4:c9:bc:e7:cf:6e:3c:37:57: d4:48:b4:3d:68:8c:a6:b9:aa:ca:11:bd:0d:38:30: f3:dc:80:7f:aa:70:52:b3:11:69:5b:71:ae:dc:d3: d0:33:c2:df:07:1e:94:bf:34:eb:27:7c:c2:bb:57: 17:37:fc:40:be:10:d1:69:49:9f:41:22:3d:89:cd: 41:be:23:44:4b:c1:67:c0:fd:6a:3f:b2:cb:34:91: 56:ce:5b:c4:0d:6f:53:2c:d3:a0:53:f9:84:b2:ee: a1:a9:8d:7d:c9:9a:99:d5:04:8c:0d:df:d0:1f:05: 0e:49:12:ee:f6:05:83:58:c4:41:73:96:09:ef:7e: 96:ae:7d:29:8f:5a:78:82:8a:89:12:ca:81:31:47: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3B:4E:B6:DA:E6:5C:F1:65:91:B5:49:2F:05:2D:95:1D:68:E6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl X509v3 Authority Key Identifier: keyid:26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer sbgp-ipAddrBlock: critical IPv4: 204.136.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:2c:34:57:b7:8c:d7:1d:28:5f:8a:0e:91:3c:7c:42:15:9e: 59:d7:5c:00:ea:19:6f:10:97:6a:37:9a:ca:f7:ef:a7:e0:b3: 03:1d:48:30:6f:8d:9a:7c:c5:3c:33:90:8d:19:92:23:c9:c5: 9f:bd:c7:0f:f2:da:67:e0:f3:9d:68:ab:95:1c:12:91:41:b3: 5f:98:97:b3:20:67:0b:07:6f:68:79:62:29:40:c9:be:58:50: e4:8a:5d:59:7f:c7:63:8d:3a:7e:03:b9:a8:79:ba:4e:ba:79: 6a:6e:fd:1e:05:4b:58:ca:a7:e4:3b:f4:df:79:40:01:ea:b3: e2:ba:9a:4c:9b:61:d2:f4:22:44:4e:b5:f8:07:05:f7:27:83: 18:71:99:f4:3e:66:b7:af:fc:3f:10:4c:be:14:58:ce:7d:92: 56:61:3f:d3:69:f3:46:48:2f:2e:0b:1c:05:cc:ce:77:ba:2b: 11:31:ef:e4:71:df:00:cf:08:88:22:70:0c:c3:59:d8:36:c4: d9:e4:d6:1f:b1:45:31:94:ea:5e:18:c9:65:e8:50:8a:af:65: 55:c1:99:57:72:b4:ac:84:60:22:b2:8f:66:b0:df:08:5a:c7: 70:ef:d8:18:74:da:17:c0:09:96:50:3f:d3:13:47:1b:eb:e2: 5c:38:3c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUjd3UNyD/TyBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiM2U1ZWUtMjljOC00OTVlLTk4ZmMtYTIwNmM0ZTE0 OTIyMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MWRlNWNiZWYtZTBmNS00MGQ1LTg0NzktZTIzZGQ3YWRhNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0lMIdSk2X/iUatG4S+4TmeKw5Boviif0O0F lTfVtSKDoKrwWUjw3cbKobbwNH3O46qWPkYpTdC55MrQdUMz0JgIzUjRm69PxTeV YkGWRUhtj6NU99O25GB+x6qFDmCdDw7kQHH4KWlh/MHTsM+kybznz248N1fUSLQ9 aIymuarKEb0NODDz3IB/qnBSsxFpW3Gu3NPQM8LfBx6UvzTrJ3zCu1cXN/xAvhDR aUmfQSI9ic1BviNES8FnwP1qP7LLNJFWzlvEDW9TLNOgU/mEsu6hqY19yZqZ1QSM Dd/QHwUOSRLu9gWDWMRBc5YJ736Wrn0pj1p4goqJEsqBMUfYJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo7Trba5lzxZZG1SS8FLZUdaOadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNGIz ZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2YzRlMTQ5MjIvZGNmMWRjMTAtZTM3NS0z ODQ4LThjNDItYTRlOGQzYTEyNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDRiM2U1ZWUtMjljOC00OTVlLTk4 ZmMtYTIwNmM0ZTE0OTIyL2Q0YjNlNWVlLTI5YzgtNDk1ZS05OGZjLWEyMDZjNGUx NDkyMi5jcmwwHwYDVR0jBBgwFoAUJnF1WwkDvEi8KhzRfc2+lfXLWPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNGIzZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2 YzRlMTQ5MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4sNFe3jNcdKF+KDpE8fEIVnlnXXADqGW8Ql2o3msr376fgswMdSDBv jZp8xTwzkI0ZkiPJxZ+9xw/y2mfg851oq5UcEpFBs1+Yl7MgZwsHb2h5YilAyb5Y UOSKXVl/x2ONOn4Duah5uk66eWpu/R4FS1jKp+Q79N95QAHqs+K6mkybYdL0IkRO tfgHBfcngxhxmfQ+Zrev/D8QTL4UWM59klZhP9Np80ZILy4LHAXMzne6KxEx7+Rx 3wDPCIgicAzDWdg2xNnk1h+xRTGU6l4YyWXoUIqvZVXBmVdytKyEYCKyj2aw3wha x3Dv2Bh02hfACZZQP9MTRxvr4lw4PLo= -----END CERTIFICATE-----Generated at Sun Jun 15 16:43:51 2025 by rpki-client