$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa File: 200332e9-4687-3e0c-a256-5908fe3b00a7.roa (raw, json) Hash identifier: sO1VdXFMlUEjZUMJKe0UIa461YpcLnvvF3qHtGKIwRY= Subject key identifier: 70:03:23:69:B7:BD:07:8F:F1:BC:11:15:F3:E7:70:BE:E4:EB:C6:08 Certificate issuer: /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a Certificate serial: 010D0C9F43285849F44A5D58BA02321BE8C13B00 Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 11700 IP address blocks: 204.225.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5d:58:ba:02:32:1b:e8:c1:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=897d0087-8ad9-46d3-8ae9-e6510a206602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:01:e4:b1:26:57:b1:0e:0d:70:42:fa:45: c2:82:da:41:e3:0c:b1:3a:03:56:27:30:6e:b4:31: a9:93:8b:e4:a9:77:49:0d:be:99:5b:59:75:4d:32: 93:24:a6:0c:b6:09:dc:cb:b1:88:f5:aa:38:b0:2e: 94:23:6e:09:4e:43:a9:b4:0d:e8:52:45:5e:d3:98: c6:6b:64:e7:a2:32:e6:66:9c:fb:f8:a6:bf:2b:2c: 92:e8:71:f5:9c:99:c7:87:e6:d3:64:91:6e:b8:08: b1:c9:9b:2c:69:16:ca:10:88:55:3d:75:86:58:5e: bd:b9:bb:fe:c0:34:03:44:2f:99:f9:c0:3c:ba:21: 39:cf:bd:88:f6:20:75:8f:fd:5e:29:76:6b:e4:3c: c0:0a:e8:a4:c3:26:1a:94:7d:68:f4:d5:92:12:c4: f8:10:a3:37:a4:c8:58:f9:31:5e:21:8e:2f:9e:ce: e2:cb:09:8d:e9:37:1a:51:d5:92:ba:63:96:bf:ca: d6:a9:1d:0c:29:7b:45:69:e2:12:81:f9:bb:cb:c0: a4:32:00:d1:7f:53:dd:b7:a1:7b:c6:13:72:89:ee: bb:65:a3:fe:41:fd:c8:22:f6:8b:b3:81:85:71:83: 6a:c7:ad:a6:39:1f:4a:4b:de:ec:f1:a0:be:ed:91: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:03:23:69:B7:BD:07:8F:F1:BC:11:15:F3:E7:70:BE:E4:EB:C6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl X509v3 Authority Key Identifier: keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer sbgp-ipAddrBlock: critical IPv4: 204.225.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c5:57:ec:90:94:71:7a:19:40:33:aa:b1:ab:9b:ac:ca:8d: 2d:34:0d:56:e0:bb:c2:db:57:3e:62:89:cc:30:4d:3e:bc:6e: 75:04:30:79:0b:14:1c:ea:b0:97:0f:0d:24:b2:de:f5:e2:13: 01:41:5e:4c:3b:77:9c:c1:72:41:60:81:32:40:28:56:1b:96: 1b:cc:1a:11:e6:4c:01:21:db:d7:e3:0f:66:93:da:8c:c3:3b: 3a:ea:39:3f:0f:c6:1a:1a:aa:81:ef:c1:38:67:ee:b6:b6:24: 20:42:90:cf:7d:7e:ca:20:33:02:a7:3e:34:59:09:3d:a7:6b: d1:4a:ac:ec:30:86:ae:dc:db:b7:cc:eb:e7:f6:1c:ff:5c:61: 84:99:28:65:3a:30:67:e9:43:1d:ba:c8:8f:ff:72:17:cc:e0: 3f:9e:47:3d:fe:c9:e2:89:c8:0f:8d:15:84:60:41:ce:6a:f4: d4:58:e8:02:ee:51:85:e4:95:37:11:2b:16:02:df:a3:61:7f: fa:fb:6b:fe:eb:94:7a:30:ef:aa:42:5a:e1:e0:9d:95:54:3a: 62:ba:1d:ce:78:8b:1a:f3:37:34:bb:f4:a2:68:19:fd:ae:b1: 82:fb:05:c2:82:8b:5b:11:fc:2a:99:4b:df:01:89:60:64:b7: 41:0a:66:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Sl1YugIyG+jBOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI2YWI0ZWUtYjZhYS00MjIyLWFlMjYtOGJjNThjOWI3 NDJhMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ODk3ZDAwODctOGFkOS00NmQzLThhZTktZTY1MTBhMjA2NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVYB5LEmV7EODXBC+kXCgtpB4wyxOgNWJzBu tDGpk4vkqXdJDb6ZW1l1TTKTJKYMtgncy7GI9ao4sC6UI24JTkOptA3oUkVe05jG a2TnojLmZpz7+Ka/KyyS6HH1nJnHh+bTZJFuuAixyZssaRbKEIhVPXWGWF69ubv+ wDQDRC+Z+cA8uiE5z72I9iB1j/1eKXZr5DzACuikwyYalH1o9NWSEsT4EKM3pMhY +TFeIY4vns7iywmN6TcaUdWSumOWv8rWqR0MKXtFaeISgfm7y8CkMgDRf1Pdt6F7 xhNyie67ZaP+Qf3IIvaLs4GFcYNqx62mOR9KS97s8aC+7ZFJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHADI2m3vQeP8bwRFfPncL7k68YIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MjZh YjRlZS1iNmFhLTQyMjItYWUyNi04YmM1OGM5Yjc0MmEvMjAwMzMyZTktNDY4Ny0z ZTBjLWEyNTYtNTkwOGZlM2IwMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODI2YWI0ZWUtYjZhYS00MjIyLWFl MjYtOGJjNThjOWI3NDJhLzgyNmFiNGVlLWI2YWEtNDIyMi1hZTI2LThiYzU4Yzli NzQyYS5jcmwwHwYDVR0jBBgwFoAUW3xsVYCsGezAv3151Czv3y23wcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MjZhYjRlZS1iNmFhLTQyMjItYWUyNi04YmM1 OGM5Yjc0MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbFV+yQlHF6GUAzqrGrm6zKjS00DVbgu8LbVz5iicwwTT68bnUEMHkL FBzqsJcPDSSy3vXiEwFBXkw7d5zBckFggTJAKFYblhvMGhHmTAEh29fjD2aT2ozD OzrqOT8PxhoaqoHvwThn7ra2JCBCkM99fsogMwKnPjRZCT2na9FKrOwwhq7c27fM 6+f2HP9cYYSZKGU6MGfpQx26yI//chfM4D+eRz3+yeKJyA+NFYRgQc5q9NRY6ALu UYXklTcRKxYC36Nhf/r7a/7rlHow76pCWuHgnZVUOmK6Hc54ixrzNzS79KJoGf2u sYL7BcKCi1sR/CqZS98BiWBkt0EKZlQ= -----END CERTIFICATE-----Generated at Tue Jul 1 05:33:39 2025 by rpki-client