$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa File: d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa (raw, json) Hash identifier: OEJT04wzSyohcWoxL0JNprOSwwDdWTbxYI6vWIM2KLE= Subject key identifier: C0:48:A7:AE:A2:55:72:23:23:5D:3B:F5:A8:E7:F1:B0:1B:33:57:8E Certificate issuer: /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Certificate serial: 010D0C9F43285849CE9A437FB4E36F1D7AFF3140 Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 394770 IP address blocks: 204.58.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:43:7f:b4:e3:6f:1d:7a:ff:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=c2d5d498-a1cc-4a6e-895b-1c532088bb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c0:ed:6e:b6:9e:f5:df:c4:75:3d:94:67:5d: bd:8a:36:40:48:7a:41:c0:ee:55:ac:c1:f2:11:f0: 93:a3:1a:18:d2:a3:cf:99:e2:a5:9d:78:f0:e9:c5: ed:8a:f0:72:f7:af:c6:69:4e:f7:4c:32:b8:7b:c1: ca:ff:57:9e:f4:5a:f7:bd:86:13:c4:23:a1:28:80: 1a:fe:56:bb:eb:9b:a0:35:7a:bb:5d:25:27:dd:6d: 25:00:f6:ef:6d:71:aa:20:90:9e:0b:33:29:46:1b: a1:68:90:db:95:5f:12:b8:52:54:05:98:9f:a8:c1: 3e:0f:39:f9:ae:6b:9c:71:4e:fb:9b:0c:b5:37:53: 8e:cb:03:b7:5f:86:a5:ae:96:e9:5d:03:73:20:ab: 53:f9:e2:cc:ae:e8:0e:e5:01:3b:34:29:68:96:3e: cc:c3:d6:a4:ac:b6:c2:06:f4:8c:ec:57:99:a2:42: 33:95:ff:cd:3a:c2:8b:41:71:10:59:f5:12:e5:04: 4f:90:9c:7d:75:b0:f9:e0:d4:2b:df:93:c9:e0:da: 3e:2f:9f:9b:24:cb:4f:20:25:df:85:7d:db:27:d2: 30:c5:fe:0f:84:ea:b3:9b:e8:72:f4:94:d6:ab:26: 59:2f:b0:80:b5:91:75:63:b4:2d:7d:35:31:45:f0: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:48:A7:AE:A2:55:72:23:23:5D:3B:F5:A8:E7:F1:B0:1B:33:57:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl X509v3 Authority Key Identifier: keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer sbgp-ipAddrBlock: critical IPv4: 204.58.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:18:f6:b7:f2:d2:67:c6:de:a5:a3:61:5f:5c:ee:e4:83:47: 5c:39:bf:41:f3:42:12:fb:da:23:43:16:af:6e:72:3d:ca:2a: 5d:c8:94:49:ee:12:a7:7b:73:d8:b2:70:3c:59:c7:8d:bb:6a: eb:60:fc:74:96:d8:70:ad:7a:07:c8:de:7d:85:29:51:ce:a1: f7:dc:76:a4:c2:e4:ed:56:16:c6:42:18:0b:58:3e:35:5f:63: 55:ca:0f:15:c7:3f:4a:c3:9b:a5:e4:b1:20:e5:c1:f5:71:59: 4a:c7:3b:ef:fa:7d:ae:08:66:65:7c:83:0e:72:85:ed:a0:a7: 0d:e4:79:a6:5c:05:70:dc:94:fc:82:fb:07:c3:b5:b6:c4:5b: 29:9f:80:96:6f:e0:b3:74:48:68:08:93:48:a7:5d:74:f9:95: 7a:f0:f7:df:c0:c4:6e:ef:22:0a:7e:14:e5:47:da:dd:24:ec: d3:e5:d6:eb:55:b9:8c:fd:f6:3e:11:be:79:18:7c:43:e5:c3: 5d:ec:0f:7d:68:6e:b3:e2:8b:6b:37:aa:30:44:c3:04:dd:11: c0:0f:16:af:2d:2f:29:6b:b7:d4:4b:10:14:e8:66:39:73:0c: 44:ad:01:6c:bb:04:df:3d:bf:12:5b:1b:92:d7:d4:b2:cc:37: 67:bf:54:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkN/tONvHXr/MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1ZTZlODctNWY2NS00OTNiLWI2NjQtNWExMjgxOWNk YWE0MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YzJkNWQ0OTgtYTFjYy00YTZlLTg5NWItMWM1MzIwODhiYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMDtbrae9d/EdT2UZ129ijZASHpBwO5VrMHy EfCToxoY0qPPmeKlnXjw6cXtivBy96/GaU73TDK4e8HK/1ee9Fr3vYYTxCOhKIAa /la765ugNXq7XSUn3W0lAPbvbXGqIJCeCzMpRhuhaJDblV8SuFJUBZifqME+Dzn5 rmuccU77mwy1N1OOywO3X4alrpbpXQNzIKtT+eLMrugO5QE7NClolj7Mw9akrLbC BvSM7FeZokIzlf/NOsKLQXEQWfUS5QRPkJx9dbD54NQr35PJ4No+L5+bJMtPICXf hX3bJ9Iwxf4PhOqzm+hy9JTWqyZZL7CAtZF1Y7QtfTUxRfBIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBIp66iVXIjI1079ajn8bAbM1eOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVl NmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEyODE5Y2RhYTQvZDdmZjQzMDctZGExOS0z YjhmLTgxYTEtNWExMGFiNzBkOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWU1ZTZlODctNWY2NS00OTNiLWI2 NjQtNWExMjgxOWNkYWE0LzllNWU2ZTg3LTVmNjUtNDkzYi1iNjY0LTVhMTI4MTlj ZGFhNC5jcmwwHwYDVR0jBBgwFoAUl9Icz4rNdOOPsJMgf8bCkeBFoTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVlNmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEy ODE5Y2RhYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMY9rfy0mfG3qWjYV9c7uSDR1w5v0HzQhL72iNDFq9ucj3KKl3IlEnu Eqd7c9iycDxZx427autg/HSW2HCtegfI3n2FKVHOoffcdqTC5O1WFsZCGAtYPjVf Y1XKDxXHP0rDm6XksSDlwfVxWUrHO+/6fa4IZmV8gw5yhe2gpw3keaZcBXDclPyC +wfDtbbEWymfgJZv4LN0SGgIk0inXXT5lXrw99/AxG7vIgp+FOVH2t0k7NPl1utV uYz99j4RvnkYfEPlw13sD31obrPii2s3qjBEwwTdEcAPFq8tLylrt9RLEBToZjlz DEStAWy7BN89vxJbG5LX1LLMN2e/VEE= -----END CERTIFICATE-----Generated at Sun Jun 15 16:38:37 2025 by rpki-client