$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa File: 8a599c8a-6f69-352a-9eff-d9583500ded1.roa (raw, json) Hash identifier: AffRtILd0jIoyoWgreqVZE+tMScbUnZCBk3I79K1eU0= Subject key identifier: C3:02:F8:0A:5A:06:5A:BA:DC:F6:71:8E:BD:75:1D:CB:2D:C1:7E:E6 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285849AA4F72EE3E0DFFF451FBA880 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 33322 IP address blocks: 204.10.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:72:ee:3e:0d:ff:f4:51:fb:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=638a0058-6c4e-4a8f-8681-63c314c1ff56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:cf:00:9b:e1:7b:0c:31:4f:0d:17:2d:d1: 57:94:1e:86:98:fe:f1:7c:7d:ee:b4:04:81:9c:a7: 47:3d:2d:c5:0d:23:15:c5:ec:d2:6c:96:7f:f9:29: 58:0b:7c:92:d6:bc:9b:86:56:88:d9:a1:fd:b6:41: 2f:ab:7e:2c:66:e7:17:cd:83:de:cb:84:81:42:88: ce:a8:ad:33:53:71:3e:36:76:f0:f5:c2:16:7c:e4: 6c:fb:f2:6e:8d:28:74:70:98:81:9b:6d:81:e3:4a: 7d:c1:4e:1e:8f:54:f1:77:15:97:37:37:dc:96:5b: cf:68:3b:01:ce:84:15:41:1a:59:0e:74:f8:db:33: d2:cc:fd:7d:2c:0d:1c:78:57:ec:8f:46:6b:82:73: 27:5e:80:a1:45:65:f9:6e:07:69:5c:5b:7a:92:1d: bd:e2:06:9b:52:b2:55:ce:ce:2d:9c:ee:af:55:57: fa:48:ae:55:c4:7a:ea:d9:72:83:c5:84:86:8c:bd: 82:47:09:76:95:a5:50:bc:1b:52:49:79:02:f5:13: fb:94:36:61:bf:78:fd:36:ef:6f:8a:46:3f:d4:09: 8f:89:bc:95:d5:28:0b:c0:7d:b6:5e:7d:0b:96:49: e0:be:45:af:41:2f:f8:be:98:29:02:58:ec:ea:02: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:02:F8:0A:5A:06:5A:BA:DC:F6:71:8E:BD:75:1D:CB:2D:C1:7E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.10.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:68:b6:89:19:38:dc:5d:d7:6d:ba:d1:5e:86:fc:ca:61:8b: 21:35:47:33:47:11:0a:10:7e:9b:5a:c6:18:55:33:b6:2f:98: b8:f3:71:a1:96:18:4a:a7:33:72:84:69:62:54:7f:52:7f:1f: f7:f3:e6:09:4f:ec:e2:db:04:62:24:7e:c7:90:62:cf:6b:c9: 3a:38:f4:78:7c:23:19:04:fc:16:12:15:8d:a4:10:0a:52:2c: 0b:51:4f:4e:a0:5e:ba:27:5d:8d:b5:82:f6:1e:d5:fd:01:fd: ea:ee:ca:80:4f:7a:ca:d3:c1:f2:0a:94:5c:f5:3c:ab:32:87: 85:fc:33:98:80:b7:a4:af:05:a3:c9:22:ee:5e:05:32:54:a3: 2f:3c:1a:a7:a6:f3:aa:a8:e0:eb:fe:15:da:c6:30:ac:10:96: ac:13:6e:fb:76:c0:87:b5:da:69:f8:9a:7f:c1:78:72:c6:9e: 3c:c0:4a:f9:e1:f7:38:2e:8b:fb:cb:a5:63:70:a0:70:ca:cb: 09:cf:11:b4:ac:57:cb:3b:e0:cf:70:07:25:9b:8d:65:ae:88: 41:0c:f3:08:39:4a:c5:ba:0a:3f:35:38:49:45:81:d1:55:ab: 6c:32:ec:ff:d4:db:41:b6:56:66:5a:ee:63:8c:05:ab:00:d1: 09:c3:8a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3LuPg3/9FH7qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NjM4YTAwNTgtNmM0ZS00YThmLTg2ODEtNjNjMzE0YzFmZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnfPAJvhewwxTw0XLdFXlB6GmP7xfH3utASB nKdHPS3FDSMVxezSbJZ/+SlYC3yS1rybhlaI2aH9tkEvq34sZucXzYPey4SBQojO qK0zU3E+Nnbw9cIWfORs+/JujSh0cJiBm22B40p9wU4ej1TxdxWXNzfcllvPaDsB zoQVQRpZDnT42zPSzP19LA0ceFfsj0ZrgnMnXoChRWX5bgdpXFt6kh294gabUrJV zs4tnO6vVVf6SK5VxHrq2XKDxYSGjL2CRwl2laVQvBtSSXkC9RP7lDZhv3j9Nu9v ikY/1AmPibyV1SgLwH22Xn0LlkngvkWvQS/4vpgpAljs6gJDxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMC+ApaBlq63PZxjr11HcstwX7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOGE1OTljOGEtNmY2OS0z NTJhLTllZmYtZDk1ODM1MDBkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNotokZONxd12260V6G/MphiyE1RzNHEQoQfptaxhhVM7YvmLjzcaGW GEqnM3KEaWJUf1J/H/fz5glP7OLbBGIkfseQYs9ryTo49Hh8IxkE/BYSFY2kEApS LAtRT06gXronXY21gvYe1f0B/eruyoBPesrTwfIKlFz1PKsyh4X8M5iAt6SvBaPJ Iu5eBTJUoy88Gqem86qo4Ov+FdrGMKwQlqwTbvt2wIe12mn4mn/BeHLGnjzASvnh 9zgui/vLpWNwoHDKywnPEbSsV8s74M9wByWbjWWuiEEM8wg5SsW6Cj81OElFgdFV q2wy7P/U20G2VmZa7mOMBasA0QnDiqw= -----END CERTIFICATE-----Generated at Tue Jul 1 20:21:27 2025 by rpki-client