$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa File: ca248d62-3f50-35a2-9999-0258d4f72f02.roa (raw, json) Hash identifier: VXQ6Ubk8UuvCwE+MG5mA9q2Oad++wdVZ5POp6FdhJeM= Subject key identifier: AE:AA:CA:AB:B8:1D:64:C1:66:2D:BB:A2:27:59:74:12:98:15:B9:32 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F43285849DC8FCC0443040DD792326500 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 8014 IP address blocks: 204.236.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:cc:04:43:04:0d:d7:92:32:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=ad253b37-e15e-4336-a9f4-6d84dddfbfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:67:a1:61:1d:89:6a:6f:a4:f1:d1:6d:73: 47:fe:11:6c:01:75:0f:10:b3:96:41:b2:c6:2a:fd: d8:03:78:b7:a1:c9:f5:5d:53:58:b7:89:cf:8c:19: 89:83:f6:6d:6b:4f:23:22:84:61:5a:5e:43:ce:bb: 60:3b:f3:f5:b2:05:6d:06:f9:bd:7f:37:8b:0e:fc: 88:c7:92:58:8b:01:d8:6c:4c:df:7e:a4:19:71:2f: 2c:1c:28:98:56:d7:f5:a4:0f:31:8e:93:66:b4:d2: 88:bd:03:9d:68:ff:bb:ca:e4:78:70:17:78:ab:62: fc:13:fb:0a:43:7d:9b:42:a0:48:16:45:09:68:e5: ec:40:9f:28:c2:78:68:cd:15:ef:e7:a2:d5:21:e0: 7d:bf:3d:77:43:25:a7:e0:43:46:4b:d1:ac:e8:2c: d4:c1:04:3e:dc:64:b5:0b:00:10:cf:95:61:a9:19: 8b:41:48:5e:59:3f:ad:7e:5f:86:28:94:a2:97:ac: 0a:1d:5f:22:ea:cd:84:02:96:e8:c1:e3:93:6e:3c: 42:aa:70:64:1c:12:6b:2d:c0:09:05:2d:80:38:56: 74:c4:50:ec:39:e0:e1:f7:35:9d:7c:a1:0b:9e:7a: d7:8b:9a:03:ea:1f:1d:ab:43:7a:55:55:9b:06:72: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:CA:AB:B8:1D:64:C1:66:2D:BB:A2:27:59:74:12:98:15:B9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5c:be:9a:43:f0:2b:fd:71:c8:d6:83:04:65:70:57:22:2c: 02:07:26:dd:1c:e4:09:30:65:44:ee:89:c4:08:5a:f4:94:b5: 47:d5:4e:e9:32:07:dd:4b:cb:c3:0b:49:f2:85:06:f2:6a:7d: 99:c5:66:e3:84:c8:f4:8c:06:d1:9a:32:72:6b:6d:fd:b1:0c: bf:2e:18:b3:19:2f:50:c6:20:a9:ba:96:1b:5b:ce:e3:b9:c1: be:c6:00:5e:8e:7f:f4:53:65:19:bd:24:f7:d5:6f:9c:d2:1a: be:4c:f5:f3:62:c8:db:de:af:14:2e:bd:c3:e1:26:4c:39:0a: c1:fc:f7:d7:97:ce:82:ea:bd:5c:4b:97:5b:e4:12:51:83:16: 1d:5c:cb:3d:52:43:7a:f6:33:3f:7d:f7:9a:5f:1a:e9:9d:5b: e9:86:0b:41:b6:e7:51:1a:e9:08:d2:a4:4d:ff:d9:72:2e:40: 44:08:97:e6:a7:66:2a:07:ce:d9:a6:e6:27:5f:e7:fe:45:9c: 54:bd:f1:04:d9:e6:7f:f6:6d:6a:77:af:ff:3b:c6:41:8f:02: 0d:c6:98:25:0b:e6:9a:97:9b:a3:1b:33:e0:ac:b0:60:6f:41: 37:86:08:47:09:ca:f4:f9:d8:32:93:92:a7:fc:98:c3:ad:00: b1:52:34:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8wEQwQN15IyZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YWQyNTNiMzctZTE1ZS00MzM2LWE5ZjQtNmQ4NGRkZGZiZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnRnoWEdiWpvpPHRbXNH/hFsAXUPELOWQbLG Kv3YA3i3ocn1XVNYt4nPjBmJg/Zta08jIoRhWl5DzrtgO/P1sgVtBvm9fzeLDvyI x5JYiwHYbEzffqQZcS8sHCiYVtf1pA8xjpNmtNKIvQOdaP+7yuR4cBd4q2L8E/sK Q32bQqBIFkUJaOXsQJ8ownhozRXv56LVIeB9vz13QyWn4ENGS9Gs6CzUwQQ+3GS1 CwAQz5VhqRmLQUheWT+tfl+GKJSil6wKHV8i6s2EApboweOTbjxCqnBkHBJrLcAJ BS2AOFZ0xFDsOeDh9zWdfKELnnrXi5oD6h8dq0N6VVWbBnI5xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6qyqu4HWTBZi27oidZdBKYFbkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvY2EyNDhkNjItM2Y1MC0z NWEyLTk5OTktMDI1OGQ0ZjcyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFcvppD8Cv9ccjWgwRlcFciLAIHJt0c5AkwZUTuicQIWvSUtUfVTuky B91Ly8MLSfKFBvJqfZnFZuOEyPSMBtGaMnJrbf2xDL8uGLMZL1DGIKm6lhtbzuO5 wb7GAF6Of/RTZRm9JPfVb5zSGr5M9fNiyNverxQuvcPhJkw5CsH899eXzoLqvVxL l1vkElGDFh1cyz1SQ3r2Mz9995pfGumdW+mGC0G251Ea6QjSpE3/2XIuQEQIl+an ZioHztmm5idf5/5FnFS98QTZ5n/2bWp3r/87xkGPAg3GmCUL5pqXm6MbM+CssGBv QTeGCEcJyvT52DKTkqf8mMOtALFSNEE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:49:20 2025 by rpki-client