$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa File: 9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (raw, json) Hash identifier: 3M1HUpjbQn3IL9iSAjrE/mpEku2g5KWp/Fgvakkw4Bg= Subject key identifier: 5F:6A:AE:F6:FE:56:D2:1E:0C:90:1D:E4:5D:5A:55:E7:14:C2:1E:10 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584A5CFB32A981E5163BD42C2D80 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 26918 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:32:a9:81:e5:16:3b:d4:2c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=16eed3c8-40c5-49d1-ad94-57f2bbe30c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:c4:71:72:68:83:6a:ea:78:6d:fe:c5:7e: 1a:86:b9:28:5b:f4:b0:cf:93:72:59:67:a9:1c:92: 6f:b8:81:d6:21:f5:e8:86:a2:9e:c8:e5:49:e1:5d: 04:3b:ab:72:83:2b:75:cb:19:22:24:7f:d1:9d:c9: a3:9d:e8:f6:29:2b:2f:01:2c:a8:d5:2f:5e:e7:fa: 5b:2a:6d:9b:d6:38:85:4d:f4:45:d6:e9:09:14:c8: f5:56:ff:25:c9:36:72:85:42:8a:3d:8f:2e:49:40: 5b:a6:17:99:94:92:4b:5d:31:a2:a6:21:26:2f:69: 5d:6b:70:13:d0:56:cc:bf:3b:f2:f7:3f:4a:ae:6d: 5f:2c:f8:f3:ed:3b:5e:86:66:82:91:d3:5a:fa:a8: c1:0d:a3:21:a4:13:7f:9e:09:d0:94:02:b3:e5:08: ee:9a:4d:05:5b:8e:d7:3d:a1:96:62:81:0d:95:90: 7a:4e:7f:40:ce:d1:83:cd:9c:19:85:46:58:b7:45: e2:2a:96:bd:b5:ca:6e:65:34:f7:1d:30:71:fb:ac: bd:26:2a:4c:72:8c:9e:00:53:0a:d5:7f:b6:e5:37: ee:c7:60:57:db:66:8f:95:b6:a9:f4:3e:2f:59:18: 66:fb:50:24:e6:8c:08:1b:9f:69:1f:8e:c3:55:5c: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6A:AE:F6:FE:56:D2:1E:0C:90:1D:E4:5D:5A:55:E7:14:C2:1E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:78:12:72:16:4c:3c:c8:50:ff:31:cb:cd:0c:37:a2:25:b6: 7e:cf:7c:ca:f1:60:2e:c1:1c:ec:7e:3b:7a:da:b3:6c:22:16: db:ff:95:1b:d6:4b:29:76:39:53:16:c5:7a:fe:ad:9b:b7:52: 77:ef:e4:80:cb:fc:48:a7:ba:38:e5:63:23:47:37:bd:8b:88: 64:24:ab:1b:eb:24:2a:72:03:86:d0:bd:83:06:3d:91:03:4c: 0a:04:92:29:40:8f:e1:5e:97:27:69:7c:82:58:8d:2c:f4:d3: 32:4a:0c:dc:0c:49:e5:69:e4:60:48:e2:04:a3:42:a0:c0:81: d4:a2:77:76:11:3b:bb:b6:e3:23:51:93:59:4d:08:fe:bf:b8: 8b:cd:0c:f7:ed:3f:22:bd:c0:54:e5:a8:71:00:92:b3:65:57: a7:a2:31:8f:fa:0e:e4:d0:2a:28:b6:a1:4f:d6:23:f3:fe:25: 23:43:a7:19:b2:aa:4d:53:08:c5:f9:78:cb:8e:48:b8:db:da: 7e:bd:ff:08:16:3b:3b:31:54:da:5d:52:96:bd:84:a8:25:16: 36:ea:71:b6:e0:8f:48:5d:8e:80:e2:91:38:60:0c:8e:30:92: 8d:83:88:a4:35:3e:3c:03:99:24:b4:07:e5:d6:e8:db:2d:b7: 72:04:6c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zKpgeUWO9QsLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MTZlZWQzYzgtNDBjNS00OWQxLWFkOTQtNTdmMmJiZTMwYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCrEcXJog2rqeG3+xX4ahrkoW/Swz5NyWWep HJJvuIHWIfXohqKeyOVJ4V0EO6tygyt1yxkiJH/Rncmjnej2KSsvASyo1S9e5/pb Km2b1jiFTfRF1ukJFMj1Vv8lyTZyhUKKPY8uSUBbpheZlJJLXTGipiEmL2lda3AT 0FbMvzvy9z9Krm1fLPjz7TtehmaCkdNa+qjBDaMhpBN/ngnQlAKz5Qjumk0FW47X PaGWYoENlZB6Tn9AztGDzZwZhUZYt0XiKpa9tcpuZTT3HTBx+6y9JipMcoyeAFMK 1X+25Tfux2BX22aPlbap9D4vWRhm+1Ak5owIG59pH47DVVwAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9qrvb+VtIeDJAd5F1aVecUwh4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvOWMzZmFiNzQtMGIwZC0z MWNlLTllNjAtNDgzODJkZGFiMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp4EnIWTDzIUP8xy80MN6Iltn7PfMrxYC7BHOx+O3ras2wiFtv/lRvW Syl2OVMWxXr+rZu3Unfv5IDL/EinujjlYyNHN72LiGQkqxvrJCpyA4bQvYMGPZED TAoEkilAj+FelydpfIJYjSz00zJKDNwMSeVp5GBI4gSjQqDAgdSid3YRO7u24yNR k1lNCP6/uIvNDPftPyK9wFTlqHEAkrNlV6eiMY/6DuTQKii2oU/WI/P+JSNDpxmy qk1TCMX5eMuOSLjb2n69/wgWOzsxVNpdUpa9hKglFjbqcbbgj0hdjoDikThgDI4w ko2DiKQ1PjwDmSS0B+XW6Nstt3IEbIA= -----END CERTIFICATE-----Generated at Wed Jul 2 02:01:49 2025 by rpki-client