$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa File: cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa (raw, json) Hash identifier: BkyKFppzc77JChEey9JhgpmmWqjQ5ayufWvCjuBrbAg= Subject key identifier: E7:2C:26:A0:71:05:B4:77:4A:01:31:B0:31:BA:48:BA:FB:0D:57:05 Certificate issuer: /CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Certificate serial: 010D0C9F4328584A3A1589EB75A76E7DA5181100 Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 40628 IP address blocks: 204.87.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:89:eb:75:a7:6e:7d:a5:18:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=1d2b68a9-a946-46f6-acf2-cfbd62973499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:25:32:16:ba:f9:51:db:03:91:b4:1d:4f: a1:53:e2:37:2b:ca:89:29:1b:d6:e9:e7:59:9e:e9: 44:04:9e:4a:41:5b:92:2c:d6:8c:01:3b:91:9e:d6: 32:92:1d:05:69:29:2b:64:09:0f:57:f9:18:61:d6: de:4a:1c:55:e6:46:86:d1:f4:95:34:aa:7d:68:27: bd:8f:1a:de:df:47:0f:9b:df:bb:ae:4f:0f:4a:33: eb:45:9e:c2:2b:17:2e:81:2b:15:e7:0d:7e:79:09: b9:b9:f9:f0:47:79:67:ec:d8:12:7f:b0:e1:13:7e: fc:62:75:d7:77:a0:7b:40:a0:0b:32:56:7b:dc:9b: 41:14:46:cc:18:9d:49:cd:b4:d0:9e:5b:cf:e3:f2: d5:b0:51:67:4a:ba:e0:b3:87:af:f9:35:ac:48:f7: 81:b0:a7:11:15:8e:69:ba:d1:1c:74:fd:c0:c8:1d: ba:b3:0c:48:1c:b2:84:51:ac:11:45:e8:df:0d:1d: b1:b5:4b:be:2e:90:b6:5d:73:db:d6:36:47:2e:f5: 1e:42:72:91:6c:d5:c5:67:cb:a4:45:b4:35:9f:cd: e0:22:4f:ad:2e:9f:ea:da:6c:0f:ce:5d:81:45:0a: 45:a8:de:32:d6:65:fa:ce:72:45:e1:4a:15:b0:af: ea:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2C:26:A0:71:05:B4:77:4A:01:31:B0:31:BA:48:BA:FB:0D:57:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl X509v3 Authority Key Identifier: keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer sbgp-ipAddrBlock: critical IPv4: 204.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8c:cc:b4:95:52:34:47:ea:c6:b8:f9:a6:80:95:4b:a9:89: 84:11:d8:a1:7d:d3:e2:e7:63:aa:62:48:f6:7f:19:9d:8a:f4: cf:9a:94:c5:36:65:61:0e:27:c2:75:bc:59:af:9d:ee:33:08: 03:3c:08:30:5d:8c:b4:24:13:0a:2d:6c:47:a7:6e:dc:a0:d4: 27:a0:f1:11:4b:2d:db:f7:26:8f:7f:d9:ac:aa:ea:2d:a9:87: a1:41:86:63:0e:2f:0e:9a:93:86:e1:45:69:36:ae:19:1c:27: bc:98:6b:ff:1c:93:21:fb:14:8c:11:2e:cc:3e:a7:1f:2c:68: a5:b1:76:ab:cf:fa:c4:00:67:e8:31:69:d1:58:a9:67:d5:a0: c1:80:36:34:0c:d4:a1:f9:60:db:c8:ad:22:39:eb:61:43:f5: c0:ba:63:43:4c:75:e7:9d:ab:c0:a3:80:d4:bb:6d:3b:f2:04: 38:90:50:28:25:87:a8:d1:b7:6b:79:88:13:75:8e:e1:88:c3: df:61:9a:02:5e:1f:f6:38:a7:c1:4a:4c:73:4a:9a:0f:d2:ea: a3:16:32:3d:92:ac:54:75:4d:13:d0:ef:e5:f8:75:a5:6c:54: 16:85:93:18:c5:00:ee:cd:93:1b:b4:8a:30:9e:2f:9e:50:95: 7f:9b:69:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYnrdadufaUYEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4 YTU3MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MWQyYjY4YTktYTk0Ni00NmY2LWFjZjItY2ZiZDYyOTczNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus4lMha6+VHbA5G0HU+hU+I3K8qJKRvW6edZ nulEBJ5KQVuSLNaMATuRntYykh0FaSkrZAkPV/kYYdbeShxV5kaG0fSVNKp9aCe9 jxre30cPm9+7rk8PSjPrRZ7CKxcugSsV5w1+eQm5ufnwR3ln7NgSf7DhE378YnXX d6B7QKALMlZ73JtBFEbMGJ1JzbTQnlvP4/LVsFFnSrrgs4ev+TWsSPeBsKcRFY5p utEcdP3AyB26swxIHLKEUawRRejfDR2xtUu+LpC2XXPb1jZHLvUeQnKRbNXFZ8uk RbQ1n83gIk+tLp/q2mwPzl2BRQpFqN4y1mX6znJF4UoVsK/qWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcsJqBxBbR3SgExsDG6SLr7DVcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFm ODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvY2NlYWRmMmItMGZlMS0z MGM5LTg4MmEtOTU4ZWM3MjQ5Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTkxZjgxZmYtNTMxNy00MGY0LWE1 NDQtNWRmMmUzMzU4YTU3L2E5MWY4MWZmLTUzMTctNDBmNC1hNTQ0LTVkZjJlMzM1 OGE1Ny5jcmwwHwYDVR0jBBgwFoAUNAcTZw8RHbNMsi51vbBuS9RfIl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYy ZTMzNThhNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeMzLSVUjRH6sa4+aaAlUupiYQR2KF90+LnY6piSPZ/GZ2K9M+alMU2 ZWEOJ8J1vFmvne4zCAM8CDBdjLQkEwotbEenbtyg1Ceg8RFLLdv3Jo9/2ayq6i2p h6FBhmMOLw6ak4bhRWk2rhkcJ7yYa/8ckyH7FIwRLsw+px8saKWxdqvP+sQAZ+gx adFYqWfVoMGANjQM1KH5YNvIrSI562FD9cC6Y0NMdeedq8CjgNS7bTvyBDiQUCgl h6jRt2t5iBN1juGIw99hmgJeH/Y4p8FKTHNKmg/S6qMWMj2SrFR1TRPQ7+X4daVs VBaFkxjFAO7Nkxu0ijCeL55QlX+bafA= -----END CERTIFICATE-----Generated at Mon Jun 30 00:45:20 2025 by rpki-client