$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/5da41306-2886-3f54-ae98-1b158a03c655.roa File: 5da41306-2886-3f54-ae98-1b158a03c655.roa (raw, json) Hash identifier: B/KKo4b6TttYOJaQTZDiqxMx0nCDTVkaTOUdiUQQcww= Subject key identifier: AE:98:E3:DE:7D:99:17:37:72:17:08:9A:DF:F0:6A:66:86:7B:27:63 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584A5FC5FF86D30FBA1287FDD100 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/5da41306-2886-3f54-ae98-1b158a03c655.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 19165 IP address blocks: 204.14.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:ff:86:d3:0f:ba:12:87:fd:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=35a89b17-305b-4c9c-9693-3f8d7f960509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:40:8c:c0:30:a9:b2:97:d8:c9:bb:44:59:7d: 7c:a4:5d:04:35:fb:95:15:0c:01:da:b7:6f:cb:9d: 52:5a:ad:a2:97:46:4b:72:93:47:ed:eb:c9:0d:bc: 75:d1:bd:bf:00:bd:11:94:44:bf:00:f0:49:12:98: f3:ce:8f:6d:46:60:52:e9:8e:b7:90:5c:ba:a6:44: 1b:b6:78:9c:f9:d1:f2:85:af:62:bc:eb:21:ac:72: c7:64:44:63:88:b2:66:df:45:c3:84:67:f3:ae:46: 29:46:fe:2a:a1:2c:94:de:c9:61:3a:0c:7f:55:d9: 60:c2:0d:d1:b7:93:68:85:68:83:68:f6:31:66:a2: 7d:05:c1:ec:c1:61:94:14:e1:ab:9e:76:46:17:eb: c0:f1:9f:e0:f8:c3:6d:9e:d3:ab:15:39:6f:1d:78: 62:4a:d8:13:20:c4:8d:a5:73:60:fd:37:ce:5b:e2: 2f:30:5f:39:71:46:e6:c2:a6:03:a0:d9:e6:f3:7b: e2:86:8d:ed:d7:96:b6:43:73:33:dc:ae:50:9b:fe: 83:ea:da:98:16:40:59:0d:d5:dd:78:2a:f8:1c:a4: 03:86:48:54:15:ac:9d:4d:19:55:fd:aa:b9:6b:02: 87:53:0c:99:45:1d:b5:e0:61:7e:bb:72:5e:44:15: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:98:E3:DE:7D:99:17:37:72:17:08:9A:DF:F0:6A:66:86:7B:27:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/5da41306-2886-3f54-ae98-1b158a03c655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 204.14.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0c:2a:b2:27:04:b2:6e:8c:c8:cf:18:c5:69:01:b1:27:c9: 98:21:f1:29:93:0e:8e:dd:92:3c:96:08:8c:e2:2b:e2:03:de: e5:93:e1:7b:16:84:b2:99:8c:36:79:44:b1:f9:0f:f7:24:c3: 19:a0:4b:e0:6a:4f:bd:e8:fb:65:4d:af:4e:c3:78:47:99:4a: 91:60:d8:28:19:16:c2:24:c3:e9:8b:68:d1:be:cd:1d:74:e3: 3a:a3:db:8c:8b:86:83:88:a0:66:77:9c:eb:fe:23:7c:28:35: 62:b2:da:c8:1a:04:61:c5:79:cf:e3:9e:c6:e9:a3:ac:46:e9: 1b:3f:86:45:2d:85:3b:c9:3c:34:3f:68:f8:12:a5:a6:26:d0: 4e:72:75:00:2e:bf:15:9b:e0:1e:42:08:6c:64:54:eb:9a:9f: 88:49:c0:b4:26:d0:fc:37:48:c9:67:71:b7:b7:aa:fd:64:5d: 16:38:e4:2f:fa:d2:d5:7d:08:51:7f:31:8a:90:7d:9e:77:ae: 16:32:6d:b2:d6:71:5e:4b:55:1f:5a:7e:4d:a8:57:d2:0e:3f: ac:d4:ca:c9:b0:6f:76:e4:8c:f4:1b:32:11:bb:a0:87:f6:68: a0:03:05:a9:5a:ef:13:74:c9:aa:86:c0:f3:f2:6c:d6:64:93: a4:db:8f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxf+G0w+6Eof90QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MzVhODliMTctMzA1Yi00YzljLTk2OTMtM2Y4ZDdmOTYwNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUCMwDCpspfYybtEWX18pF0ENfuVFQwB2rdv y51SWq2il0ZLcpNH7evJDbx10b2/AL0RlES/APBJEpjzzo9tRmBS6Y63kFy6pkQb tnic+dHyha9ivOshrHLHZERjiLJm30XDhGfzrkYpRv4qoSyU3slhOgx/Vdlgwg3R t5NohWiDaPYxZqJ9BcHswWGUFOGrnnZGF+vA8Z/g+MNtntOrFTlvHXhiStgTIMSN pXNg/TfOW+IvMF85cUbmwqYDoNnm83viho3t15a2Q3Mz3K5Qm/6D6tqYFkBZDdXd eCr4HKQDhkhUFaydTRlV/aq5awKHUwyZRR214GF+u3JeRBWGEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6Y4959mRc3chcImt/wamaGeydjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNWRhNDEzMDYtMjg4Ni0z ZjU0LWFlOTgtMWIxNThhMDNjNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzA6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8MKrInBLJujMjPGMVpAbEnyZgh8SmTDo7dkjyWCIziK+ID3uWT4XsW hLKZjDZ5RLH5D/ckwxmgS+BqT73o+2VNr07DeEeZSpFg2CgZFsIkw+mLaNG+zR10 4zqj24yLhoOIoGZ3nOv+I3woNWKy2sgaBGHFec/jnsbpo6xG6Rs/hkUthTvJPDQ/ aPgSpaYm0E5ydQAuvxWb4B5CCGxkVOuan4hJwLQm0Pw3SMlncbe3qv1kXRY45C/6 0tV9CFF/MYqQfZ53rhYybbLWcV5LVR9afk2oV9IOP6zUysmwb3bkjPQbMhG7oIf2 aKADBala7xN0yaqGwPPybNZkk6Tbj6g= -----END CERTIFICATE-----Generated at Tue Jul 1 16:51:09 2025 by rpki-client