$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa File: a98302e0-6fdd-34c6-ae18-5ecfece042af.roa (raw, json) Hash identifier: XmtPz//BcWI5Pk9HZWydemFaF/1nbW1jPMXAOWisQ8c= Subject key identifier: 49:D9:8F:05:C3:71:B6:B0:2D:96:7C:96:4D:66:DD:BE:4A:FC:40:68 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285849CE9A469C96DD5C6D47DEAF40 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7782 IP address blocks: 204.17.139.0/24 maxlen: 24 204.17.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:46:9c:96:dd:5c:6d:47:de:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=18c0c4e4-f539-488d-93d8-60115817da11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:e4:3d:20:80:3a:a0:36:42:a6:6b:ea:67: 28:1d:83:77:55:e6:dd:83:84:2a:09:a5:ee:32:fe: 37:33:93:58:98:fa:71:be:63:f9:f2:1b:94:82:13: e1:10:27:b1:64:be:26:9c:5a:aa:4c:f8:94:5e:f4: 3f:50:62:a1:95:29:ea:6b:14:3a:aa:21:36:36:17: b8:5c:2b:a2:53:8d:2c:4f:37:1c:62:ba:9e:fc:37: a3:ec:76:1a:fc:2d:20:fe:3d:3a:34:0c:34:7c:00: 7f:d3:c2:50:86:7d:76:28:f6:9d:15:bb:48:fc:ee: d2:c0:1c:e7:2d:77:36:7f:8d:4c:4f:62:e7:e7:7a: 31:49:82:2d:28:b0:5e:ae:30:03:aa:85:49:69:95: f1:30:50:38:cf:2f:69:6e:f7:c7:a2:ee:33:98:b9: ed:40:10:52:d3:44:ba:e4:d2:83:bf:d6:59:df:1f: fd:3c:57:0c:33:bf:a3:57:40:53:b0:12:a5:69:9e: c9:27:18:f4:30:16:70:7a:f7:55:75:2d:9b:5c:0c: 53:e4:70:0e:2e:e7:53:34:4e:4e:9e:47:42:b3:f6: dc:e9:e2:09:66:38:15:18:10:32:15:f7:b9:fe:96: f9:e5:d6:8f:83:67:53:9d:46:76:6a:e4:64:b2:91: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D9:8F:05:C3:71:B6:B0:2D:96:7C:96:4D:66:DD:BE:4A:FC:40:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 204.17.139.0-204.17.140.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0b:ba:2d:27:4e:1e:ba:ad:5f:fb:32:3d:07:e6:4f:a6:46: e5:c4:a4:5e:fd:c9:d9:92:ca:04:13:d0:5f:d5:99:4a:8f:ef: 0f:45:0d:84:63:95:f1:70:de:10:ab:84:8c:66:af:1e:da:f5: 2a:cb:44:90:45:98:11:37:ba:bd:a6:a9:32:5b:4a:48:99:7a: 00:d5:a3:c8:db:98:d6:69:09:07:46:a0:3b:43:0f:5d:0d:be: 79:0c:3d:e5:6c:24:e0:00:50:ff:8b:b3:a5:85:c5:4f:57:96: e8:2e:34:aa:94:5c:9e:17:dc:ce:d8:2f:8a:c3:ad:c0:bf:51: 09:cd:01:40:ea:f2:2e:1f:6f:c6:17:77:6b:a0:6c:bb:92:64: 82:ae:e3:40:13:a0:81:88:d2:98:b9:82:df:b3:b7:2d:2e:53: 71:3a:0d:8b:86:70:06:9d:52:88:e5:fd:4b:4a:5c:2d:2b:f1: e8:24:14:64:72:a5:62:1d:8d:57:39:8d:f9:28:e5:f0:ff:13: dd:ce:16:ea:c6:98:f3:42:79:5d:47:24:fc:4f:08:eb:e1:14: d1:bc:34:96:8a:ea:a0:84:92:c4:36:d4:ed:e4:26:9e:f4:dd: fb:58:e9:d7:d0:2d:be:f5:aa:5d:c3:e9:44:80:31:60:18:d3: e7:80:c8:8c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnOmkaclt1cbUfer0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MThjMGM0ZTQtZjUzOS00ODhkLTkzZDgtNjAxMTU4MTdkYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvbkPSCAOqA2QqZr6mcoHYN3Vebdg4QqCaXu Mv43M5NYmPpxvmP58huUghPhECexZL4mnFqqTPiUXvQ/UGKhlSnqaxQ6qiE2Nhe4 XCuiU40sTzccYrqe/Dej7HYa/C0g/j06NAw0fAB/08JQhn12KPadFbtI/O7SwBzn LXc2f41MT2Ln53oxSYItKLBerjADqoVJaZXxMFA4zy9pbvfHou4zmLntQBBS00S6 5NKDv9ZZ3x/9PFcMM7+jV0BTsBKlaZ7JJxj0MBZwevdVdS2bXAxT5HAOLudTNE5O nkdCs/bc6eIJZjgVGBAyFfe5/pb55daPg2dTnUZ2auRkspHtHwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEnZjwXDcbawLZZ8lk1m3b5K/EBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYTk4MzAyZTAtNmZkZC0z NGM2LWFlMTgtNWVjZmVjZTA0MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMEYsD BADMEYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAiAu6LSdOHrqtX/syPQfmT6ZG5cSkXv3J2ZLKBBPQX9WZ So/vD0UNhGOV8XDeEKuEjGavHtr1KstEkEWYETe6vaapMltKSJl6ANWjyNuY1mkJ B0agO0MPXQ2+eQw95Wwk4ABQ/4uzpYXFT1eW6C40qpRcnhfcztgvisOtwL9RCc0B QOryLh9vxhd3a6Bsu5Jkgq7jQBOggYjSmLmC37O3LS5TcToNi4ZwBp1SiOX9S0pc LSvx6CQUZHKlYh2NVzmN+Sjl8P8T3c4W6saY80J5XUck/E8I6+EU0bw0lorqoISS xDbU7eQmnvTd+1jp19AtvvWqXcPpRIAxYBjT54DIjA== -----END CERTIFICATE-----Generated at Sun Jun 15 16:01:03 2025 by rpki-client