$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa File: 24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa (raw, json) Hash identifier: 4hlW9ik2bZ/s3EQSBe+U5VAjtQoHHjodeVP8Mr5dbxE= Subject key identifier: 07:CB:C4:AA:43:E2:32:77:4B:CE:67:8B:8F:25:A5:AF:7E:0C:D2:CD Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584A3CE0241BB951A04AE9FC6D40 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 8075 IP address blocks: 202.130.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:24:1b:b9:51:a0:4a:e9:fc:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=0b173f02-f855-41a8-b3d6-09fde4aed4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:9a:75:20:56:15:2f:17:cf:01:26:c9:73: f0:93:d0:d7:ea:36:58:d9:c4:6b:76:bc:38:f4:50: 3b:dd:82:3b:b1:2a:a4:d2:16:59:7a:71:f3:37:da: 5f:8e:0c:53:3e:5e:76:0a:20:a3:6a:61:fb:96:b0: 2a:6e:44:69:90:5d:e1:ba:2a:7b:96:cb:3a:bd:7a: f7:d9:f1:d4:95:cd:91:ef:44:7b:56:89:3a:d6:e0: a2:a4:0d:fb:4b:1b:26:84:eb:dd:91:ce:c9:ec:ba: c6:db:4f:0c:f1:ec:4d:49:c8:8f:b4:04:11:1d:72: a8:67:4e:ab:be:f5:fd:98:b5:dd:03:3f:f0:e5:86: e5:b1:ea:62:e0:3f:7d:42:f0:a7:03:50:6b:26:fe: de:0b:09:12:b6:7d:2e:8a:1d:f9:36:1c:21:83:39: ee:72:eb:28:a9:d4:92:5f:e4:3a:20:7c:28:38:b9: 56:90:f6:3e:e3:2d:c1:7c:82:d5:3c:48:0a:33:40: 35:29:61:69:69:a0:87:8b:7b:6d:ff:67:c4:e0:1e: 4c:0b:33:c7:f5:fb:3c:c6:fe:79:85:6e:00:a0:31: df:2a:3f:24:64:21:b4:e5:65:e3:fb:bb:bb:6b:d6: 0e:e8:e4:3a:6d:eb:6a:9c:5e:a5:e8:e2:f1:4a:c7: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CB:C4:AA:43:E2:32:77:4B:CE:67:8B:8F:25:A5:AF:7E:0C:D2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 202.130.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:42:39:9a:89:a2:24:5a:0d:3f:6e:ad:a0:bc:77:91:84:a1: fd:75:a4:56:b6:f8:fc:b7:d4:c6:4e:a2:e6:01:5f:1b:02:f4: 5f:c0:6e:b9:24:43:9d:e5:f5:87:df:15:37:6e:29:0d:e6:d3: 8e:82:65:0c:47:57:6b:26:63:86:a2:47:ba:f5:ab:40:2c:cb: e8:ff:88:58:5a:e0:c9:0f:7a:7f:68:a8:09:94:4a:ff:15:6d: e6:f0:e3:ad:23:77:3d:39:dd:df:b5:81:10:27:b1:b6:fa:83: 9a:33:b9:dd:35:2e:ad:6f:ef:0c:da:9b:a9:d9:a3:9c:2f:79: 33:24:e2:66:d9:dc:4b:74:78:03:c7:e0:71:f7:29:7a:82:c8: 19:14:dd:ed:09:60:4b:48:e7:67:9f:4f:73:91:0f:90:14:1e: a6:94:da:dc:95:9f:d5:c8:87:1f:c7:4a:65:38:f2:f7:10:b3: dc:23:a8:f3:4d:c3:3c:ce:41:9b:3c:35:68:a2:1d:15:7d:73: 32:cc:1a:85:43:79:e0:70:4f:6f:95:a1:05:d1:77:00:1f:1e: 13:da:a8:e1:54:18:e9:ff:49:00:9f:9a:21:ed:06:d4:77:90: ed:8a:2c:c5:0e:c0:1c:75:d4:07:65:50:22:75:2e:6b:7b:25: f4:0e:2c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CQbuVGgSun8bUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk MGIxNzNmMDItZjg1NS00MWE4LWIzZDYtMDlmZGU0YWVkNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZaadSBWFS8XzwEmyXPwk9DX6jZY2cRrdrw4 9FA73YI7sSqk0hZZenHzN9pfjgxTPl52CiCjamH7lrAqbkRpkF3huip7lss6vXr3 2fHUlc2R70R7Vok61uCipA37SxsmhOvdkc7J7LrG208M8exNSciPtAQRHXKoZ06r vvX9mLXdAz/w5Yblsepi4D99QvCnA1BrJv7eCwkStn0uih35NhwhgznucusoqdSS X+Q6IHwoOLlWkPY+4y3BfILVPEgKM0A1KWFpaaCHi3tt/2fE4B5MCzPH9fs8xv55 hW4AoDHfKj8kZCG05WXj+7u7a9YO6OQ6betqnF6l6OLxSsdrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfLxKpD4jJ3S85ni48lpa9+DNLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMjRjZGYzN2QtNDUyYS0z OWE2LTlkMmMtNmI2MWE1ZDUwZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyoLLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1COZqJoiRaDT9uraC8d5GEof11pFa2+Py31MZOouYBXxsC9F/Abrkk Q53l9YffFTduKQ3m046CZQxHV2smY4aiR7r1q0Asy+j/iFha4MkPen9oqAmUSv8V bebw460jdz053d+1gRAnsbb6g5ozud01Lq1v7wzam6nZo5wveTMk4mbZ3Et0eAPH 4HH3KXqCyBkU3e0JYEtI52efT3ORD5AUHqaU2tyVn9XIhx/HSmU48vcQs9wjqPNN wzzOQZs8NWiiHRV9czLMGoVDeeBwT2+VoQXRdwAfHhPaqOFUGOn/SQCfmiHtBtR3 kO2KLMUOwBx11AdlUCJ1Lmt7JfQOLHs= -----END CERTIFICATE-----Generated at Mon Jun 30 17:22:43 2025 by rpki-client