$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa File: 8d741a37-bbe7-386f-a706-d1272b5e8e69.roa (raw, json) Hash identifier: VfvM2+/VchcEQYUdAfR2VqysayA1VTq3qkZGW01kUQg= Subject key identifier: E5:F3:CE:F0:27:C6:DC:DC:5C:BE:23:3B:9B:56:C8:94:F3:F9:76:6A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849FCAA7E5C3602135F8EACDCA0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 204.2.132.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7e:5c:36:02:13:5f:8e:ac:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=2305f401-f2cd-4bcb-88fc-f9beab47a2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:f7:ef:ee:e0:d8:80:73:12:3c:81:84:81: 65:f0:ee:9d:28:b3:a1:50:7a:65:1e:8c:15:c4:65: 31:bf:0f:ca:bc:8e:32:bb:94:93:c9:a4:6b:0c:f2: 46:75:d5:23:f1:da:46:45:c9:8c:69:a9:58:66:72: 21:fd:5a:cd:6d:4f:65:24:e3:d3:2f:d3:8a:4a:bc: a5:00:ae:e8:82:3f:b9:d0:1b:9c:86:27:09:b0:d9: 44:37:c4:1e:5f:01:92:19:6c:5c:ba:bf:b2:37:ec: 94:a9:03:d7:fe:bb:1a:c6:1f:f7:df:ce:d0:be:a6: 6e:18:b8:e1:8e:09:3e:26:62:35:1c:0f:db:d9:29: 8b:16:1a:0d:b0:b4:79:ed:66:79:39:83:76:5f:d6: 30:8f:2e:f5:d5:24:ee:6f:f1:c8:91:91:30:6b:89: 6f:84:f8:df:fa:c7:ab:17:42:83:73:18:b7:9d:47: 51:01:56:78:55:fe:61:c3:21:c9:c6:fc:a3:14:50: 9e:c4:80:97:87:c5:29:18:e5:a7:29:e8:dd:a3:76: 90:e7:eb:04:39:42:80:91:9c:cb:21:15:d6:57:7c: 87:7e:58:ed:5f:c3:be:38:8f:19:7e:54:73:cc:28: 48:30:32:3c:65:5e:3b:e3:6b:10:dc:3a:2b:56:6a: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F3:CE:F0:27:C6:DC:DC:5C:BE:23:3B:9B:56:C8:94:F3:F9:76:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.132.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3e:bb:4e:df:0e:3c:e2:91:e1:05:a3:38:c2:83:5f:44:0c: 1f:2f:67:0c:5c:c2:cf:79:2c:3f:e6:11:94:93:58:ce:ab:41: 7c:ec:43:1a:ca:2d:65:0f:55:a7:7e:42:2f:54:a6:6a:86:56: d6:c6:20:3a:61:95:3d:43:80:30:5b:da:0e:13:66:57:1e:03: 8a:42:6c:7e:9e:5f:69:e7:fe:20:1f:5f:bc:ed:e1:a8:c4:da: 19:5a:21:26:fb:fa:94:ce:21:f3:16:c2:49:5c:03:34:71:47: 1f:b7:38:14:8a:66:8a:0d:11:a4:06:0b:5b:22:f3:5c:7d:ed: 2b:07:ca:40:1a:4c:fc:8f:be:d1:0a:1c:7e:5e:b3:dc:6e:be: 3f:0c:e5:df:2e:6c:8f:75:07:0a:46:ed:ee:f1:d3:1a:9a:2b: 61:e1:28:90:b3:f3:02:77:f1:ab:4d:aa:ce:a1:6f:b9:1c:2d: d7:6f:0b:11:57:05:59:46:5b:0f:65:33:2e:c8:2e:e5:ba:64: 6f:ff:39:8c:c3:06:7d:d4:2b:e0:65:c6:69:30:c3:40:79:46: f0:4f:81:05:7a:db:c7:8e:c9:5b:d1:4c:fb:e7:df:dd:f6:db: c7:87:4f:79:e6:d5:9a:fa:53:2b:fe:11:27:b1:d9:0d:5a:89: 4b:ac:38:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn8qn5cNgITX46s3KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MjMwNWY0MDEtZjJjZC00YmNiLTg4ZmMtZjliZWFiNDdhMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/r37+7g2IBzEjyBhIFl8O6dKLOhUHplHowV xGUxvw/KvI4yu5STyaRrDPJGddUj8dpGRcmMaalYZnIh/VrNbU9lJOPTL9OKSryl AK7ogj+50BuchicJsNlEN8QeXwGSGWxcur+yN+yUqQPX/rsaxh/3387QvqZuGLjh jgk+JmI1HA/b2SmLFhoNsLR57WZ5OYN2X9Ywjy711STub/HIkZEwa4lvhPjf+ser F0KDcxi3nUdRAVZ4Vf5hwyHJxvyjFFCexICXh8UpGOWnKejdo3aQ5+sEOUKAkZzL IRXWV3yHfljtX8O+OI8ZflRzzChIMDI8ZV4742sQ3DorVmqvSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOXzzvAnxtzcXL4jO5tWyJTz+XZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGQ3NDFhMzctYmJlNy0z ODZmLWE3MDYtZDEyNzJiNWU4ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzAKEgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiPrtO3w484pHhBaM4woNfRAwfL2cMXMLPeSw/5hGUk1jOq0F87EMa yi1lD1WnfkIvVKZqhlbWxiA6YZU9Q4AwW9oOE2ZXHgOKQmx+nl9p5/4gH1+87eGo xNoZWiEm+/qUziHzFsJJXAM0cUcftzgUimaKDRGkBgtbIvNcfe0rB8pAGkz8j77R Chx+XrPcbr4/DOXfLmyPdQcKRu3u8dMamith4SiQs/MCd/GrTarOoW+5HC3XbwsR VwVZRlsPZTMuyC7lumRv/zmMwwZ91CvgZcZpMMNAeUbwT4EFetvHjslb0Uz759/d 9tvHh0955tWa+lMr/hEnsdkNWolLrDib -----END CERTIFICATE-----Generated at Sun Jun 29 13:50:06 2025 by rpki-client