$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa File: 8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa (raw, json) Hash identifier: Ec2jMkisia0lKDcMAl4bTxdGp3FhJCTpfkWr3bsg9zI= Subject key identifier: E6:A7:9F:E2:3C:2D:93:7B:A6:1D:74:83:F5:D8:EB:89:98:94:6A:7F Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F4328584A4DA03E54DB2D9B3452552880 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 14618 IP address blocks: 204.89.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:3e:54:db:2d:9b:34:52:55:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=0bdfa075-05f8-46e0-af7e-520e5f7ce4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:dc:a5:0e:aa:80:f0:0d:e9:01:75:77:ce: d2:71:1b:97:61:b4:65:41:8b:a2:15:f8:6e:76:92: 27:47:83:e8:79:14:69:0c:06:ec:f0:14:a2:fd:be: 99:0c:c4:a1:c0:81:1e:6f:43:6f:73:fc:71:fa:79: 49:da:dd:80:06:7c:67:97:b4:08:ee:a5:bc:5b:9b: be:71:21:78:e2:2e:bb:d6:37:03:cf:10:77:0e:84: d8:bf:22:42:b1:11:f4:20:65:46:59:f5:01:7b:89: 91:f6:49:d7:13:46:7c:c7:a9:6c:cc:94:3b:89:60: 0b:87:84:c6:52:d3:a4:bc:35:a4:7a:ad:5c:90:30: 2a:4a:55:2f:8f:f6:38:16:4b:28:d5:39:02:84:3e: dc:6c:5d:5c:53:16:18:bc:db:e3:95:5c:40:6d:31: 6c:74:90:a7:12:9a:c0:1f:c1:26:a8:02:42:93:60: a2:21:eb:cb:e1:a7:b8:31:31:91:be:f0:4b:09:52: f3:ec:e7:ec:b9:8f:63:31:f7:e5:63:27:b9:fc:2c: 2f:98:2b:10:88:3e:df:c8:f4:90:76:9e:1c:68:e4: 64:23:d8:d4:15:a4:b4:03:20:75:b2:7d:e8:c6:53: 54:59:c4:d1:f3:54:d7:d0:85:82:f0:4d:b6:4d:58: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A7:9F:E2:3C:2D:93:7B:A6:1D:74:83:F5:D8:EB:89:98:94:6A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv4: 204.89.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e4:08:84:f2:02:df:62:f1:80:c1:cc:a5:9f:e3:95:58:62: 7a:3a:a3:3a:94:5c:77:79:42:5e:e8:99:50:5b:fc:8e:db:0e: 15:76:0a:ad:97:44:8b:f4:f8:36:67:09:68:af:2d:33:86:a1: 4b:cb:94:42:20:f4:50:0c:ec:bf:55:fa:6b:68:26:95:a3:13: cf:f4:52:93:b4:2b:09:54:eb:c5:4d:4f:4b:0b:a5:2e:e7:0f: 98:b0:df:db:ff:e2:60:04:7a:42:0c:57:c3:c2:57:f5:13:34: 72:62:a5:fb:07:14:90:1d:b3:bb:b4:8c:5f:7e:f5:d4:3f:d2: 60:77:f0:99:7e:b8:54:16:c8:d3:55:bc:16:e1:90:cf:79:12: d0:ab:cd:8f:18:03:41:55:06:2a:89:84:28:13:5a:cb:be:23: de:54:b0:a6:41:9c:1b:7b:08:58:f1:50:34:0f:df:dc:49:c6: 5e:ea:ed:e8:55:94:c5:b5:5c:74:39:77:14:8e:e3:b8:f1:f7: 4e:0f:d9:72:77:ae:9f:34:e4:18:c3:b8:c1:18:48:12:b7:12: b7:5b:31:0e:75:5e:36:91:b0:08:22:51:3f:24:e5:bd:1c:1b: f7:8f:dd:58:a6:72:f9:c9:93:6e:91:12:72:64:03:02:c0:49: b7:6f:f7:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoD5U2y2bNFJVKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk MGJkZmEwNzUtMDVmOC00NmUwLWFmN2UtNTIwZTVmN2NlNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiALcpQ6qgPAN6QF1d87ScRuXYbRlQYuiFfhu dpInR4PoeRRpDAbs8BSi/b6ZDMShwIEeb0Nvc/xx+nlJ2t2ABnxnl7QI7qW8W5u+ cSF44i671jcDzxB3DoTYvyJCsRH0IGVGWfUBe4mR9knXE0Z8x6lszJQ7iWALh4TG UtOkvDWkeq1ckDAqSlUvj/Y4Fkso1TkChD7cbF1cUxYYvNvjlVxAbTFsdJCnEprA H8EmqAJCk2CiIevL4ae4MTGRvvBLCVLz7OfsuY9jMfflYye5/CwvmCsQiD7fyPSQ dp4caORkI9jUFaS0AyB1sn3oxlNUWcTR81TX0IWC8E22TVigcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOann+I8LZN7ph10g/XY64mYlGp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvOGU0OTExZGItZDg3OS0z YmFjLWE3M2MtNmMzODk2ZjBiM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFm1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHkCITyAt9i8YDBzKWf45VYYno6ozqUXHd5Ql7omVBb/I7bDhV2Cq2X RIv0+DZnCWivLTOGoUvLlEIg9FAM7L9V+mtoJpWjE8/0UpO0KwlU68VNT0sLpS7n D5iw39v/4mAEekIMV8PCV/UTNHJipfsHFJAds7u0jF9+9dQ/0mB38Jl+uFQWyNNV vBbhkM95EtCrzY8YA0FVBiqJhCgTWsu+I95UsKZBnBt7CFjxUDQP39xJxl7q7ehV lMW1XHQ5dxSO47jx904P2XJ3rp805BjDuMEYSBK3ErdbMQ51XjaRsAgiUT8k5b0c G/eP3VimcvnJk26REnJkAwLASbdv948= -----END CERTIFICATE-----Generated at Sun Jun 29 00:07:54 2025 by rpki-client