$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa File: 0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa (raw, json) Hash identifier: KpLMhqQVyHtkX+BL3R1jsu9E77M9rmsW9NEmBtMxlIA= Subject key identifier: A8:02:42:46:51:8E:15:EE:9A:B4:B4:3C:3E:2F:C8:FF:D6:A8:49:21 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584A3A157D941C47D2DEB4E76700 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 23465 IP address blocks: 208.186.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7d:94:1c:47:d2:de:b4:e7:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=274ee58a-1fc9-4e05-962a-f0cc04a3e57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:71:78:33:13:f2:86:2c:a4:f3:a5:ed:af: ba:79:d6:87:43:73:9f:47:c1:0e:a9:66:43:79:11: 14:7e:02:b2:88:83:6d:d8:70:9b:c9:11:78:a1:f4: 95:51:2c:00:f0:3f:4e:97:ca:d8:3d:8c:b8:35:b3: c5:c5:e4:e9:4d:52:dc:87:d1:42:ca:83:08:5b:b2: f0:7e:b0:d6:bb:0b:2f:66:07:79:61:99:8e:90:4b: 41:33:ca:34:36:fe:3e:87:48:7a:e6:07:e1:16:0b: 91:2f:ee:67:a2:a7:2c:c8:ef:f1:aa:77:b6:2f:92: 5c:e6:41:46:2f:7a:c9:a8:a5:14:85:81:bd:e7:4d: 74:2a:23:54:4c:ae:db:6d:95:9d:ed:20:dd:86:5c: 6f:5e:b0:a0:d2:a0:61:24:bb:a2:1f:c8:c9:a6:28: 70:07:b6:1f:6d:f2:a3:d9:d3:92:70:ff:7f:79:fb: f9:da:6f:bb:57:31:06:2d:27:70:42:de:e5:f9:3c: 1d:48:4b:ba:45:1e:40:ce:c4:07:ba:ec:63:32:47: a6:95:24:cb:f0:3a:57:d8:32:7a:7a:95:f7:53:ab: cb:ea:26:d4:ce:f2:c5:c4:8e:90:c2:2f:6f:1b:b8: a0:df:87:e1:a0:5d:fe:15:d7:e0:8c:74:d0:5e:50: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:02:42:46:51:8E:15:EE:9A:B4:B4:3C:3E:2F:C8:FF:D6:A8:49:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.186.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:00:b9:6a:14:c0:08:d0:16:88:c8:b8:46:46:f8:57:b1:81: 75:ca:b8:63:79:b0:8e:64:10:88:55:c8:fd:6d:a9:29:1d:70: 12:f7:24:5a:32:7c:93:06:53:c0:ac:45:13:63:1e:51:07:48: 0b:ec:76:02:c7:d2:0b:19:87:fa:c1:8c:ff:78:03:a0:c7:89: 4a:89:2f:1f:87:b2:40:cd:4b:a4:5b:a3:ec:aa:a7:0c:63:f3: fe:64:fd:d6:84:ae:4f:5b:cf:f7:7d:c0:1a:98:f6:40:13:f5: 3d:38:33:25:f2:2e:e9:42:ab:3a:bb:1c:f3:3d:5d:8a:7e:61: 8f:be:f3:e7:59:ce:f0:d7:9a:44:76:e7:a6:7b:57:02:45:87: c4:6d:f5:d1:c1:d6:1f:68:fd:5f:1e:a0:0d:b6:1c:9d:51:86: bb:a8:36:bd:1a:6e:61:a5:65:59:82:9d:83:13:5f:e3:b4:f7: c7:af:4c:e6:f1:bb:2a:0f:03:4f:86:31:0e:02:6d:97:55:7d: 24:85:5b:c1:39:87:36:14:ad:e1:19:58:cb:dd:d4:5b:f2:02: 6e:08:3d:d0:39:bd:2e:06:ea:27:93:57:0f:36:fd:9e:e3:1d: de:52:7b:e6:bd:9b:19:3b:38:8d:05:08:16:52:b2:db:52:99: 2d:ec:4c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FX2UHEfS3rTnZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk Mjc0ZWU1OGEtMWZjOS00ZTA1LTk2MmEtZjBjYzA0YTNlNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV1xeDMT8oYspPOl7a+6edaHQ3OfR8EOqWZD eREUfgKyiINt2HCbyRF4ofSVUSwA8D9Ol8rYPYy4NbPFxeTpTVLch9FCyoMIW7Lw frDWuwsvZgd5YZmOkEtBM8o0Nv4+h0h65gfhFguRL+5noqcsyO/xqne2L5Jc5kFG L3rJqKUUhYG95010KiNUTK7bbZWd7SDdhlxvXrCg0qBhJLuiH8jJpihwB7YfbfKj 2dOScP9/efv52m+7VzEGLSdwQt7l+TwdSEu6RR5AzsQHuuxjMkemlSTL8DpX2DJ6 epX3U6vL6ibUzvLFxI6Qwi9vG7ig34fhoF3+FdfgjHTQXlC7WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgCQkZRjhXumrS0PD4vyP/WqEkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMGNmZDFlNDMtOTliMC0z YzJmLThiMDQtZjU1ZGQ5ZWIwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcAuWoUwAjQFojIuEZG+FexgXXKuGN5sI5kEIhVyP1tqSkdcBL3JFoy fJMGU8CsRRNjHlEHSAvsdgLH0gsZh/rBjP94A6DHiUqJLx+HskDNS6Rbo+yqpwxj 8/5k/daErk9bz/d9wBqY9kAT9T04MyXyLulCqzq7HPM9XYp+YY++8+dZzvDXmkR2 56Z7VwJFh8Rt9dHB1h9o/V8eoA22HJ1RhruoNr0abmGlZVmCnYMTX+O098evTObx uyoPA0+GMQ4CbZdVfSSFW8E5hzYUreEZWMvd1FvyAm4IPdA5vS4G6ieTVw82/Z7j Hd5Se+a9mxk7OI0FCBZSsttSmS3sTMU= -----END CERTIFICATE-----Generated at Mon Jun 30 16:40:15 2025 by rpki-client