$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/2678595f-05cd-3adb-889d-a1917571b830.roa File: 2678595f-05cd-3adb-889d-a1917571b830.roa (raw, json) Hash identifier: mXRHg+ctWOQGXkDnsSF405VOi+2JHgO+NMDemTPPPAk= Subject key identifier: 0E:ED:A4:B0:AB:C7:EB:AD:F8:46:89:0F:AB:E8:EE:F6:B0:93:36:E5 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584A3A157B6B2C02EE2FF78A9F80 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/2678595f-05cd-3adb-889d-a1917571b830.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 52494 IP address blocks: 204.199.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7b:6b:2c:02:ee:2f:f7:8a:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=01028acf-6533-4e53-9c8b-6857b8cee11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:98:c9:03:56:b0:b4:65:4a:ae:e4:b9:5e:28: 8b:59:e0:81:e8:fe:93:1a:ef:1c:68:b4:c7:c7:e8: bb:39:6d:db:d8:87:f8:9b:6d:63:3b:3e:30:19:42: 90:d4:30:0d:d0:5b:e9:af:96:df:26:bb:a5:b9:fa: 27:44:39:3f:8d:10:49:4d:f0:e7:4a:7f:87:77:99: 55:72:a0:5b:0f:9d:ac:99:39:b4:cd:63:55:21:ba: d9:46:11:70:66:24:36:76:78:35:b5:22:66:ca:9d: e2:eb:a2:07:d8:d5:bc:a4:c2:c9:40:88:38:a4:18: 58:f1:d2:7e:bb:38:8d:ab:fc:f6:98:53:73:95:29: fd:b5:85:29:9b:94:df:c4:1b:96:82:b3:ec:c3:c8: d6:05:83:32:38:38:50:b3:9e:58:54:47:22:09:13: e2:05:c2:7c:77:e9:ee:2d:50:16:ce:27:31:59:a5: 0c:cc:a2:a9:9c:69:0c:90:f4:aa:b9:a2:fe:7d:59: cb:73:52:80:e6:33:36:f4:aa:d7:6a:43:a4:f5:8f: 41:87:3f:91:c0:94:2c:ea:d7:91:04:2d:8f:d6:fe: 3c:dc:09:50:47:f7:44:aa:b9:f9:dd:6d:1d:96:af: 0c:86:54:56:3b:c4:05:6d:85:27:e0:5e:31:c3:ba: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:A4:B0:AB:C7:EB:AD:F8:46:89:0F:AB:E8:EE:F6:B0:93:36:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/2678595f-05cd-3adb-889d-a1917571b830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 204.199.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:33:94:4b:b8:b2:53:4c:4b:09:5d:7a:c8:d8:4d:40:22:89: d6:00:25:8f:11:d6:26:f0:9c:11:1f:67:69:ed:8c:76:9a:45: 9c:ca:c7:89:88:2f:ed:cb:43:d7:33:65:92:e4:92:37:3d:00: 0a:3c:78:2d:a0:6f:d2:6b:53:01:0e:66:2d:89:ea:ef:20:07: 89:c0:b2:13:99:b2:09:2c:02:2e:1c:ab:39:15:64:ab:2a:da: a3:bc:d2:6c:f9:9b:c9:3d:d2:f1:cc:8f:7b:d8:0a:25:a3:02: 39:f8:fb:74:b1:cd:e3:01:d4:d2:39:ed:fa:cd:5e:78:69:99: 69:60:ed:4a:36:05:2b:50:42:40:87:2f:8a:5e:4f:f8:ad:32: 48:95:0b:af:e6:ac:40:2a:c7:f4:ea:e7:d6:dd:7b:27:03:29: a3:d3:1e:19:e0:c4:a9:fc:ee:83:70:ff:c4:f7:6e:42:b2:db: c0:f2:10:19:91:1c:9a:40:74:14:44:bc:e9:74:d8:93:2d:b5: cb:da:9f:79:0b:89:b8:d8:1a:07:56:e4:3b:bf:ad:66:5f:15: ce:be:ea:66:d4:e6:44:10:5f:6f:0b:52:6f:8e:dd:1f:dd:9b: e6:fd:ec:58:2a:97:fa:d0:e5:cd:94:09:e7:df:f2:98:53:05: 87:7d:a2:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXtrLALuL/eKn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MDEwMjhhY2YtNjUzMy00ZTUzLTljOGItNjg1N2I4Y2VlMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5jJA1awtGVKruS5XiiLWeCB6P6TGu8caLTH x+i7OW3b2If4m21jOz4wGUKQ1DAN0Fvpr5bfJrulufonRDk/jRBJTfDnSn+Hd5lV cqBbD52smTm0zWNVIbrZRhFwZiQ2dng1tSJmyp3i66IH2NW8pMLJQIg4pBhY8dJ+ uziNq/z2mFNzlSn9tYUpm5TfxBuWgrPsw8jWBYMyODhQs55YVEciCRPiBcJ8d+nu LVAWzicxWaUMzKKpnGkMkPSquaL+fVnLc1KA5jM29KrXakOk9Y9Bhz+RwJQs6teR BC2P1v483AlQR/dEqrn53W0dlq8MhlRWO8QFbYUn4F4xw7qFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7tpLCrx+ut+EaJD6vo7vawkzblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvMjY3ODU5NWYtMDVjZC0z YWRiLTg4OWQtYTE5MTc1NzFiODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYzlEu4slNMSwldesjYTUAiidYAJY8R1ibwnBEfZ2ntjHaaRZzKx4mI L+3LQ9czZZLkkjc9AAo8eC2gb9JrUwEOZi2J6u8gB4nAshOZsgksAi4cqzkVZKsq 2qO80mz5m8k90vHMj3vYCiWjAjn4+3SxzeMB1NI57frNXnhpmWlg7Uo2BStQQkCH L4peT/itMkiVC6/mrEAqx/Tq59bdeycDKaPTHhngxKn87oNw/8T3bkKy28DyEBmR HJpAdBREvOl02JMttcvan3kLibjYGgdW5Du/rWZfFc6+6mbU5kQQX28LUm+O3R/d m+b97Fgql/rQ5c2UCeff8phTBYd9ops= -----END CERTIFICATE-----Generated at Tue Jul 1 08:42:10 2025 by rpki-client