$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa File: fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa (raw, json) Hash identifier: 8+UxcIz1yr213c3KkeaRGRh3DaN+kCLGEbnvtlIhjic= Subject key identifier: D5:5B:56:E1:F4:C3:D6:D1:3E:60:16:93:7B:BA:E4:2D:C0:A6:9A:DF Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584A41105E38220E6B9D2D497AC0 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 398573 IP address blocks: 204.108.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:5e:38:22:0e:6b:9d:2d:49:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=b2a5343f-1f47-4837-b8c5-00be192bee1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:30:4f:00:f7:80:fe:c3:43:d5:29:4e:55: 95:6e:c2:6a:d1:c3:63:d4:de:90:22:e9:04:e4:26: 39:4b:c5:bb:49:86:bb:e4:5a:f9:4c:8a:9d:cf:80: 96:7d:8e:05:7e:ed:93:24:ca:b1:56:c0:6d:52:ce: 7c:82:d6:99:0c:d8:4e:0d:f4:3c:74:20:1d:5e:7b: 2c:42:06:7b:84:c9:ae:b8:cf:ad:a7:d3:7f:73:f5: 71:2a:fd:bd:f1:ea:5c:4d:6d:c0:bd:b1:07:a7:fe: 6e:00:51:99:fe:e7:2c:7d:bc:f6:cb:7a:bb:1c:99: 23:dd:8e:82:e7:7c:d1:9f:bb:2b:ee:1a:ce:2d:c3: a6:4e:79:bb:fa:d5:97:ca:f1:17:b7:2c:4d:d4:3f: 42:7f:55:40:c7:a4:fe:be:0d:eb:9e:f7:d8:8b:54: f5:d9:74:da:a9:32:6c:7f:bc:2c:c6:38:a5:6b:7e: fd:05:f1:f5:42:db:6a:1c:55:93:0f:8a:6b:6a:11: 6a:0d:12:e6:b7:7c:01:c7:7a:87:42:3f:9b:11:98: 49:be:6b:86:da:31:de:43:0b:9f:48:29:bd:49:33: 80:c6:80:17:11:4d:90:4c:8a:a7:6d:f7:8a:62:6d: ea:4e:80:7c:e6:57:2f:b6:29:bc:42:89:f1:81:c4: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5B:56:E1:F4:C3:D6:D1:3E:60:16:93:7B:BA:E4:2D:C0:A6:9A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 204.108.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:66:d2:5f:af:f9:91:66:88:46:0e:c5:a1:ba:92:46:41:2e: 46:6c:87:25:43:a0:09:24:5b:20:ba:05:21:cf:ba:2b:1e:2d: 5a:66:89:8b:71:93:eb:e2:36:a4:24:9c:28:22:e3:9c:12:52: 85:de:a0:f5:16:38:f4:5b:c5:61:0d:7a:cb:5d:ee:e8:1d:da: 55:19:3f:05:4d:e8:49:4e:e0:a7:ef:4e:5d:eb:32:90:47:83: f6:ae:ee:5d:a5:ab:ce:bf:81:69:62:af:86:d4:a0:11:54:65: e3:41:0f:77:13:aa:1b:72:98:b9:9f:5b:d9:3b:ca:1f:35:ef: a5:50:26:71:1b:74:f2:3a:94:e6:13:61:11:c5:3d:7d:03:ff: e0:3c:97:e7:1e:9a:a7:d0:52:5d:49:32:f1:a6:5d:ae:20:37: cf:5a:fb:84:c8:02:33:d3:ad:f6:4e:55:4c:42:95:a2:67:69: b4:46:60:f8:71:50:e0:7d:fb:be:4f:10:88:53:06:bc:2c:ca: dd:e7:7c:6a:9b:41:c0:ce:e9:2c:09:ed:d6:80:81:fc:72:b0: 24:03:35:37:e4:a1:dc:10:ca:1c:eb:eb:79:af:0c:f0:69:5e: e6:73:df:6c:56:9f:ea:ed:e4:1e:08:fb:8f:4e:f0:dc:93:4e: a3:80:4e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEF44Ig5rnS1JesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YjJhNTM0M2YtMWY0Ny00ODM3LWI4YzUtMDBiZTE5MmJlZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMEwTwD3gP7DQ9UpTlWVbsJq0cNj1N6QIukE 5CY5S8W7SYa75Fr5TIqdz4CWfY4Ffu2TJMqxVsBtUs58gtaZDNhODfQ8dCAdXnss QgZ7hMmuuM+tp9N/c/VxKv298epcTW3AvbEHp/5uAFGZ/ucsfbz2y3q7HJkj3Y6C 53zRn7sr7hrOLcOmTnm7+tWXyvEXtyxN1D9Cf1VAx6T+vg3rnvfYi1T12XTaqTJs f7wsxjila379BfH1QttqHFWTD4prahFqDRLmt3wBx3qHQj+bEZhJvmuG2jHeQwuf SCm9STOAxoAXEU2QTIqnbfeKYm3qToB85lcvtim8QonxgcQz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVbVuH0w9bRPmAWk3u65C3ApprfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZmQxMGIzZjMtMTc3MC0z YTM0LTg4ZmQtNWYwMWIyZDE3MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5m0l+v+ZFmiEYOxaG6kkZBLkZshyVDoAkkWyC6BSHPuiseLVpmiYtx k+viNqQknCgi45wSUoXeoPUWOPRbxWENestd7ugd2lUZPwVN6ElO4KfvTl3rMpBH g/au7l2lq86/gWlir4bUoBFUZeNBD3cTqhtymLmfW9k7yh8176VQJnEbdPI6lOYT YRHFPX0D/+A8l+cemqfQUl1JMvGmXa4gN89a+4TIAjPTrfZOVUxClaJnabRGYPhx UOB9+75PEIhTBrwsyt3nfGqbQcDO6SwJ7daAgfxysCQDNTfkodwQyhzr63mvDPBp XuZz32xWn+rt5B4I+49O8NyTTqOATh8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:27:05 2025 by rpki-client