$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa File: b689c60f-db70-33f5-924b-db12bc459442.roa (raw, json) Hash identifier: 9jUj/lnb/KZqw8qsWTFN+9isnO+WSkODU1qha29RTiw= Subject key identifier: E3:53:85:B8:6A:F9:5C:7E:D1:CC:E7:7D:BD:04:CD:43:5E:03:90:2F Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F43285849DDF4DD681F77BB2E51B48300 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa Signing time: Fri 16 May 2025 01:00:46 +0000 ROA not before: Fri 16 May 2025 01:00:46 +0000 ROA not after: Thu 14 Aug 2025 01:00:46 +0000 asID: 399277 IP address blocks: 204.188.242.0/24 maxlen: 24 204.188.254.0/24 maxlen: 24 208.98.6.0/24 maxlen: 24 208.98.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:f4:dd:68:1f:77:bb:2e:51:b4:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: May 16 01:00:46 2025 GMT Not After : Aug 14 01:00:46 2025 GMT Subject: CN=5057837b-ad8a-416c-b1aa-2c1aa9dadebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:7f:18:5e:03:0f:55:34:b0:94:e9:98:2a: 17:91:10:4e:67:e3:bf:e8:f5:d6:87:17:3b:b1:85: bd:29:aa:e1:2b:89:83:46:8d:b8:23:e5:ce:e2:24: 4e:9b:8b:63:6b:73:30:49:5b:f7:f9:44:06:8a:de: e9:cc:f8:3d:14:0a:c1:27:11:34:f8:38:db:7b:1e: d7:74:0b:97:46:7e:a5:7e:6a:e0:bf:e7:91:c2:63: d8:a4:23:74:3f:6f:ad:de:a1:a1:b0:05:0b:82:a7: d8:de:80:f1:f3:7d:a9:32:bb:80:17:56:11:70:e3: 67:2e:83:30:21:c5:c8:0d:a7:22:8e:de:75:40:0d: 95:23:f6:c0:a7:ff:cc:b2:03:3b:d6:da:4e:14:6e: d6:fa:35:73:a9:6e:f6:24:6d:5f:22:46:ec:1a:f3: e5:43:7e:dc:6e:37:a7:5e:96:b0:c0:77:f9:20:d2: 9c:0e:8b:05:bb:90:a6:e5:b0:5f:d3:87:87:fe:19: 16:4f:cf:fd:aa:67:e5:38:04:1d:f8:b6:94:c1:f6: 97:f5:9a:d3:8a:fa:2a:89:5f:d2:52:82:bb:35:d7: a4:7f:18:1b:d9:f5:1a:0b:33:99:61:cc:4f:5f:ba: 86:e7:d4:04:b1:2c:c9:01:19:8e:ed:f3:75:06:4c: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:53:85:B8:6A:F9:5C:7E:D1:CC:E7:7D:BD:04:CD:43:5E:03:90:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 204.188.242.0/24 204.188.254.0/24 208.98.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a4:f3:12:26:46:0e:28:b3:7a:35:0b:ee:06:ea:dd:f5:4a: 28:ac:5a:02:b2:8a:06:d6:c5:e0:90:17:1f:78:4e:35:a3:da: ec:3b:ca:be:42:10:3e:7b:0e:b9:c8:be:0e:ff:0f:fa:4e:1d: e4:fd:d5:bd:96:4d:cb:e8:1f:d7:8e:47:1d:e2:b7:31:15:31: 5a:b7:05:b7:cc:26:ac:6e:6c:5c:13:72:c2:2a:a2:16:d7:2e: 53:8e:0e:1d:b2:7d:03:a1:56:d3:74:c0:23:81:14:68:8f:71: a9:23:5c:89:07:57:87:f4:aa:57:be:20:0c:26:73:3a:b6:e2: aa:8b:3b:93:09:7c:71:7e:fc:2f:ab:75:b3:d4:ab:76:ec:86: e5:46:27:b5:ae:93:4e:43:93:d0:d8:8a:6e:0a:74:6b:06:c8: d3:2f:6b:5f:24:4f:b9:8b:0a:07:cc:75:2a:ae:33:1d:24:f9: b4:53:0f:b7:54:f4:6c:2b:af:b3:d4:f2:4a:25:a0:62:e5:35: 24:d3:da:75:73:79:5a:87:31:91:d0:a0:65:4d:6f:43:21:db: 32:db:47:8f:3b:72:8b:cb:6b:70:aa:95:e2:33:54:4e:9a:18: 3a:cd:77:f7:0a:cf:a6:83:71:a0:2b:05:af:a6:56:b4:94:8f: bd:ab:6c:07 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEnd9N1oH3e7LlG0gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk NTA1NzgzN2ItYWQ4YS00MTZjLWIxYWEtMmMxYWE5ZGFkZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gB/GF4DD1U0sJTpmCoXkRBOZ+O/6PXWhxc7 sYW9KarhK4mDRo24I+XO4iROm4tja3MwSVv3+UQGit7pzPg9FArBJxE0+Djbex7X dAuXRn6lfmrgv+eRwmPYpCN0P2+t3qGhsAULgqfY3oDx832pMruAF1YRcONnLoMw IcXIDacijt51QA2VI/bAp//MsgM71tpOFG7W+jVzqW72JG1fIkbsGvPlQ37cbjen XpawwHf5INKcDosFu5Cm5bBf04eH/hkWT8/9qmflOAQd+LaUwfaX9ZrTivoqiV/S UoK7Ndekfxgb2fUaCzOZYcxPX7qG59QEsSzJARmO7fN1Bkw4BQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFONThbhq+Vx+0cznfb0EzUNeA5AvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYjY4OWM2MGYtZGI3MC0z M2Y1LTkyNGItZGIxMmJjNDU5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAzLzyAwQA zLz+AwQB0GIGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFSk8xImRg4os3o1C+4G6t31SiisWgKyigbWxeCQ Fx94TjWj2uw7yr5CED57DrnIvg7/D/pOHeT91b2WTcvoH9eORx3itzEVMVq3BbfM JqxubFwTcsIqohbXLlOODh2yfQOhVtN0wCOBFGiPcakjXIkHV4f0qle+IAwmczq2 4qqLO5MJfHF+/C+rdbPUq3bshuVGJ7Wuk05Dk9DYim4KdGsGyNMva18kT7mLCgfM dSquMx0k+bRTD7dU9Gwrr7PU8koloGLlNSTT2nVzeVqHMZHQoGVNb0Mh2zLbR487 covLa3CqleIzVE6aGDrNd/cKz6aDcaArBa+mVrSUj72rbAc= -----END CERTIFICATE-----Generated at Tue Jul 1 23:23:28 2025 by rpki-client