$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa File: 0d10bd09-f057-39b7-bbdc-5e26676ff449.roa (raw, json) Hash identifier: nHdyPcLdI9vOtqOZ+uLAOgFuOkYkdLihiBFN38LKwE4= Subject key identifier: FE:65:8F:C8:47:25:57:8B:89:17:AE:BD:EA:00:17:F8:B9:06:21:52 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F7151926DDFFF98FDF352E00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 3949 IP address blocks: 204.2.42.16/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:19:26:dd:ff:f9:8f:df:35:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=8bd429b9-dc64-46f1-bea0-98bab6a0c2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:47:3a:21:c9:9e:3b:fb:b6:fa:1d:b1:eb: 5f:f7:a6:30:4c:e9:2a:fe:e0:29:85:ec:c2:9f:55: de:1e:ad:5d:b9:f9:48:27:2c:10:7e:1b:43:d8:b1: 01:d7:5b:f4:87:12:41:5a:71:7e:c1:de:d8:8b:ec: 94:14:72:fc:92:88:cd:16:2b:57:f2:1c:37:eb:9c: a8:7e:76:dc:8d:89:e2:4c:e1:d8:d5:82:09:09:ea: cb:b1:f6:8c:fd:f9:c7:fd:e8:51:9d:c3:97:d8:6f: 05:e7:73:67:10:e9:2e:c5:d7:05:f6:39:8f:5f:23: 26:0f:09:6c:b9:0e:03:5f:04:47:e5:f0:8b:86:54: 43:33:69:67:42:ba:31:d0:7f:67:85:48:32:33:30: 56:c0:4c:77:b6:11:8b:12:d4:0a:fd:de:15:d2:53: a1:00:f4:15:3e:82:bb:0f:26:74:17:8c:a3:c2:a8: 27:22:3e:b7:6c:e2:41:b2:50:ff:46:d4:b7:19:3c: 7c:d8:25:a9:9e:d8:e7:60:c2:c1:87:8c:8f:b8:a7: c5:5a:a7:c7:84:38:d0:26:c5:36:f0:81:fe:2f:1c: 87:24:77:15:3b:6e:b9:d9:c8:eb:91:51:ff:5a:f5: 6b:65:1b:2a:3f:17:9d:93:59:5c:33:55:9b:7b:92: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:65:8F:C8:47:25:57:8B:89:17:AE:BD:EA:00:17:F8:B9:06:21:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.42.16/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ac:52:10:04:c4:fc:e8:b2:38:ef:ac:e4:e8:0e:f0:79:c1: 2e:8e:74:2e:51:26:f3:04:d3:80:83:fe:3d:b5:c6:7a:46:da: 2b:e3:16:94:d9:3e:41:83:8e:c7:bb:15:86:31:f7:8f:40:33: e0:c1:d5:6a:64:a9:2c:ad:6e:1f:e3:03:e6:36:c6:0d:e1:8d: e1:3c:94:91:0a:ad:16:7d:49:a6:c9:31:fd:c5:ac:77:b0:a2: 39:3e:b6:a1:16:88:67:b7:f5:d2:1c:b6:4d:dc:b4:c9:de:22: bc:9a:f5:41:71:af:a6:a6:d5:0a:18:da:45:ee:83:f1:9b:e9: 3a:ab:2a:f1:76:21:92:3f:08:d3:7c:dd:14:33:66:1f:9a:b8: 1b:47:20:ba:80:dd:c8:af:93:a3:f8:fe:4a:4f:27:a4:c6:f3: 5a:12:63:00:86:5d:a9:cf:a6:46:89:fc:ab:d7:1c:72:c0:ff: ef:8f:19:f4:5b:13:60:8a:6d:6b:2d:20:01:3d:8d:27:d2:21: 13:63:b7:9f:65:5c:2d:7d:a8:63:40:ec:86:09:00:b7:c7:1c: ca:81:0e:1e:d7:c3:3f:7d:52:4d:4d:ac:c3:48:37:c8:bc:c1: 53:0d:8f:44:38:68:32:bd:2c:83:4f:69:7d:d5:d3:c1:f8:3d: 8e:3b:51:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn3FRkm3f/5j981LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OGJkNDI5YjktZGM2NC00NmYxLWJlYTAtOThiYWI2YTBjMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/VHOiHJnjv7tvodsetf96YwTOkq/uAphezC n1XeHq1duflIJywQfhtD2LEB11v0hxJBWnF+wd7Yi+yUFHL8kojNFitX8hw365yo fnbcjYniTOHY1YIJCerLsfaM/fnH/ehRncOX2G8F53NnEOkuxdcF9jmPXyMmDwls uQ4DXwRH5fCLhlRDM2lnQrox0H9nhUgyMzBWwEx3thGLEtQK/d4V0lOhAPQVPoK7 DyZ0F4yjwqgnIj63bOJBslD/RtS3GTx82CWpntjnYMLBh4yPuKfFWqfHhDjQJsU2 8IH+LxyHJHcVO2652cjrkVH/WvVrZRsqPxedk1lcM1Wbe5LwhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP5lj8hHJVeLiReuveoAF/i5BiFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGQxMGJkMDktZjA1Ny0z OWI3LWJiZGMtNWUyNjY3NmZmNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAIqEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4rFIQBMT86LI476zk6A7wecEujnQuUSbzBNOAg/49tcZ6Rtor4xaU 2T5Bg47HuxWGMfePQDPgwdVqZKksrW4f4wPmNsYN4Y3hPJSRCq0WfUmmyTH9xax3 sKI5PrahFohnt/XSHLZN3LTJ3iK8mvVBca+mptUKGNpF7oPxm+k6qyrxdiGSPwjT fN0UM2YfmrgbRyC6gN3Ir5Oj+P5KTyekxvNaEmMAhl2pz6ZGifyr1xxywP/vjxn0 WxNgim1rLSABPY0n0iETY7efZVwtfahjQOyGCQC3xxzKgQ4e18M/fVJNTazDSDfI vMFTDY9EOGgyvSyDT2l91dPB+D2OO1Hb -----END CERTIFICATE-----Generated at Tue Jul 1 05:39:51 2025 by rpki-client