$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa File: d336f765-c7fe-3817-b529-a6906fb694ea.roa (raw, json) Hash identifier: rAi9XUajALCZWRvXuyeynrmMQ6bJYb2eJY7typYdhHM= Subject key identifier: E9:1D:F5:83:20:7D:B3:5A:B0:B4:69:FE:09:63:59:2C:37:A5:43:14 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584A53359E63E184AE304007BA80 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 40628 IP address blocks: 204.61.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:9e:63:e1:84:ae:30:40:07:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=0052d76f-7134-49a8-a510-c172e047cc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:9a:6e:7f:10:22:f8:11:2c:6a:16:df:5e: 5a:d2:32:7d:e2:f8:42:c6:cc:57:48:66:8a:f4:ce: 74:5f:ce:8d:a1:1c:38:ff:d5:08:82:cb:d4:f8:d8: 9d:cd:e9:4d:bb:a9:02:c6:25:8e:33:5f:d2:7c:1d: c4:af:c5:a4:00:46:3e:98:78:c9:d6:82:55:20:81: 65:c1:96:9d:db:ef:9b:a0:f5:ad:39:e0:82:af:dd: db:72:9b:77:20:94:7e:44:fc:07:19:53:d2:35:6f: 13:e8:f7:79:16:44:f7:44:6b:ed:ca:61:78:d8:9a: d1:39:18:80:3d:74:7f:23:9d:7a:43:92:06:53:dd: d3:06:75:55:56:34:56:2d:1a:a0:83:2a:67:11:db: f4:eb:a2:96:40:2c:60:2e:9a:bc:bd:78:67:6e:af: f2:b9:e7:dc:86:99:b5:b0:48:e1:a3:72:e7:59:1a: b0:84:8e:07:5e:d4:8e:c8:b5:e6:bd:0c:ad:05:a1: f2:5f:9c:70:11:56:cf:03:b2:e6:27:76:b8:66:c1: 4f:b8:bc:19:84:a5:38:14:c0:6f:5f:16:20:6f:ab: 85:b8:1e:4e:45:22:c2:6b:17:a6:18:ca:57:3a:f4: 83:c1:a0:9e:9d:29:8b:30:ee:5b:10:7a:82:8a:bd: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:F5:83:20:7D:B3:5A:B0:B4:69:FE:09:63:59:2C:37:A5:43:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 204.61.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:23:ed:f2:aa:9a:94:21:9a:51:89:cf:8c:69:d9:4d:d4:0f: 11:01:4e:d9:01:37:35:cf:80:ff:99:6e:78:da:2b:ac:e7:fd: 18:f0:ad:76:b5:82:23:db:10:49:fb:bc:60:e4:8a:82:0b:6e: c6:8f:88:9e:a1:db:de:b2:cb:e0:00:c8:c8:04:9a:05:39:8d: 83:e6:2c:4d:64:e2:de:58:fc:39:e2:a2:48:98:44:78:1a:10: 4f:a2:11:73:3d:9d:5a:30:26:d3:a9:d0:7e:6e:cc:fa:4c:39: 10:a8:1e:3a:f7:e2:a2:9f:28:3b:2f:4c:d0:55:f2:1f:e8:5a: f0:ad:0b:63:72:83:8b:d5:c7:eb:3f:0e:f3:c7:91:f2:91:d3: c1:5f:9c:07:17:73:06:2f:fb:e4:f7:fc:b5:72:69:39:82:33: 6f:f6:c1:4d:ea:71:17:b6:86:a8:5a:a3:66:70:70:8d:11:8c: d4:d0:eb:af:fd:49:59:62:46:33:76:88:ef:5a:e1:23:68:20: e6:e2:56:63:1f:4b:1b:98:36:7e:d9:bb:70:cb:44:2a:a9:70: dc:35:4d:9b:f5:a0:e8:3e:d6:6d:c7:94:b8:d0:d6:83:84:67: 2b:6a:84:ea:63:82:b3:63:00:d6:9f:c4:bb:05:6d:11:b3:da: f9:b1:14:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZ5j4YSuMEAHuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MDA1MmQ3NmYtNzEzNC00OWE4LWE1MTAtYzE3MmUwNDdjYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGyabn8QIvgRLGoW315a0jJ94vhCxsxXSGaK 9M50X86NoRw4/9UIgsvU+NidzelNu6kCxiWOM1/SfB3Er8WkAEY+mHjJ1oJVIIFl wZad2++boPWtOeCCr93bcpt3IJR+RPwHGVPSNW8T6Pd5FkT3RGvtymF42JrRORiA PXR/I516Q5IGU93TBnVVVjRWLRqggypnEdv066KWQCxgLpq8vXhnbq/yuefchpm1 sEjho3LnWRqwhI4HXtSOyLXmvQytBaHyX5xwEVbPA7LmJ3a4ZsFPuLwZhKU4FMBv XxYgb6uFuB5ORSLCaxemGMpXOvSDwaCenSmLMO5bEHqCir0t2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkd9YMgfbNasLRp/gljWSw3pUMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvZDMzNmY3NjUtYzdmZS0z ODE3LWI1MjktYTY5MDZmYjY5NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzD0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQj7fKqmpQhmlGJz4xp2U3UDxEBTtkBNzXPgP+ZbnjaK6zn/RjwrXa1 giPbEEn7vGDkioILbsaPiJ6h296yy+AAyMgEmgU5jYPmLE1k4t5Y/DniokiYRHga EE+iEXM9nVowJtOp0H5uzPpMORCoHjr34qKfKDsvTNBV8h/oWvCtC2Nyg4vVx+s/ DvPHkfKR08FfnAcXcwYv++T3/LVyaTmCM2/2wU3qcRe2hqhao2ZwcI0RjNTQ66/9 SVliRjN2iO9a4SNoIObiVmMfSxuYNn7Zu3DLRCqpcNw1TZv1oOg+1m3HlLjQ1oOE ZytqhOpjgrNjANafxLsFbRGz2vmxFLA= -----END CERTIFICATE-----Generated at Tue Jul 1 18:25:56 2025 by rpki-client