$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8a2a82d1-4be1-3620-a1b7-dd29be094823.roa File: 8a2a82d1-4be1-3620-a1b7-dd29be094823.roa (raw, json) Hash identifier: NUdgthCoe7HSG4RVNcPdHcEt/+9dSKie3M7iYrDZBdM= Subject key identifier: 35:23:69:DD:1C:79:F7:A9:8D:86:9F:2D:29:02:AC:B8:00:8B:76:05 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A36400188D6971E60022E6D40 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8a2a82d1-4be1-3620-a1b7-dd29be094823.roa Signing time: Mon 16 Jun 2025 16:03:23 +0000 ROA not before: Mon 16 Jun 2025 16:03:23 +0000 ROA not after: Sun 14 Sep 2025 16:03:23 +0000 asID: 36850 IP address blocks: 204.85.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:40:01:88:d6:97:1e:60:02:2e:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:23 2025 GMT Not After : Sep 14 16:03:23 2025 GMT Subject: CN=9d42b57e-9d9a-4951-b5b4-d7ed0f6ed0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:61:91:e8:80:fd:95:23:04:df:49:90:ed:15: f7:40:cd:43:7c:a2:8e:d7:50:20:99:f9:07:b0:15: 01:ae:54:fa:0c:19:c1:41:67:63:b5:0f:4d:de:fc: c0:e5:87:84:50:0c:7e:ba:1c:1c:46:93:9f:5a:a6: a0:9d:f0:7f:ed:66:bb:77:95:cb:6f:d0:97:de:6b: 65:17:01:36:7d:98:26:2f:86:c8:8e:2d:e5:94:43: 41:1c:1e:89:70:ce:de:aa:86:5a:a2:04:9d:b3:7f: fb:21:6a:73:78:03:2e:7b:96:6e:33:7f:68:10:2d: b6:83:7f:62:28:71:23:0f:63:9f:69:a5:96:b0:35: 6c:bf:d4:1c:1c:b8:70:f9:eb:a5:64:2c:c3:7b:82: ea:be:e9:90:92:85:eb:a9:00:76:c4:df:fc:c2:8a: a8:5b:e6:25:97:06:b8:63:59:c8:49:1c:18:1a:15: 56:ff:05:85:63:8c:59:61:b2:a0:b2:7b:64:f6:c0: 8a:40:01:d7:03:4a:50:4a:9a:d9:f3:a6:f8:e4:89: de:48:d9:37:62:dc:32:19:81:9e:ec:17:33:2a:4a: 07:8e:f5:03:bb:a6:a1:1f:27:d5:2d:25:c5:90:26: af:99:f0:15:c1:c7:b2:fe:d2:8c:e7:5d:da:40:91: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:23:69:DD:1C:79:F7:A9:8D:86:9F:2D:29:02:AC:B8:00:8B:76:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8a2a82d1-4be1-3620-a1b7-dd29be094823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ea:11:68:3d:b0:50:33:82:17:62:5d:2b:cf:3e:fd:62:f2: 01:00:44:ab:a7:20:90:4d:43:9d:a0:01:c1:58:8a:61:fa:f5: cf:12:72:2e:fd:19:8a:cb:d9:f8:ce:08:fe:be:d1:9f:ce:5d: 3c:32:7e:b2:0a:cc:f3:dd:92:7a:b3:5b:ac:29:6b:9e:1a:5c: 10:03:1d:ee:fe:2e:8c:e4:05:ab:fb:4e:77:ff:70:c6:28:3e: 0b:0b:96:fc:09:1b:5f:a6:18:1f:25:0b:12:f1:2f:16:95:27: b3:3b:e0:2f:cd:c1:64:dc:e1:13:2d:6d:0e:a5:da:bd:e2:d7: 9a:b3:74:6b:57:fa:6d:d5:51:2f:37:93:a9:15:02:c3:89:e8: a3:ef:f7:c8:99:d8:c7:2d:5a:b8:f2:84:fc:6b:43:9a:0d:21: a1:6d:2e:5f:e3:4d:1a:95:2d:65:ea:1c:61:67:eb:a7:bf:36: 6d:5a:f6:ac:e8:c5:4f:b1:da:c3:b3:fd:5c:a7:0c:1f:b3:a4: 73:fd:7c:3b:57:10:80:f4:a2:7b:a0:c8:18:a0:4a:72:a1:ba: 57:dd:eb:27:04:9e:ee:df:8a:fa:7d:c0:e1:fa:47:1e:9e:6c: d0:2e:a1:28:d8:5e:37:26:45:7d:08:f6:ca:b0:49:11:43:68: 5f:74:23:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2QAGI1pceYAIubUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMyM1oXDTI1MDkxNDE2MDMyM1owLzEtMCsGA1UEAxMk OWQ0MmI1N2UtOWQ5YS00OTUxLWI1YjQtZDdlZDBmNmVkMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmGR6ID9lSME30mQ7RX3QM1DfKKO11AgmfkH sBUBrlT6DBnBQWdjtQ9N3vzA5YeEUAx+uhwcRpOfWqagnfB/7Wa7d5XLb9CX3mtl FwE2fZgmL4bIji3llENBHB6JcM7eqoZaogSds3/7IWpzeAMue5ZuM39oEC22g39i KHEjD2OfaaWWsDVsv9QcHLhw+eulZCzDe4LqvumQkoXrqQB2xN/8woqoW+Yllwa4 Y1nISRwYGhVW/wWFY4xZYbKgsntk9sCKQAHXA0pQSprZ86b45IneSNk3YtwyGYGe 7BczKkoHjvUDu6ahHyfVLSXFkCavmfAVwcey/tKM513aQJHmPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUjad0cefepjYafLSkCrLgAi3YFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOGEyYTgyZDEtNGJlMS0z NjIwLWExYjctZGQyOWJlMDk0ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzFWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvqEWg9sFAzghdiXSvPPv1i8gEARKunIJBNQ52gAcFYimH69c8Sci79 GYrL2fjOCP6+0Z/OXTwyfrIKzPPdknqzW6wpa54aXBADHe7+LozkBav7Tnf/cMYo PgsLlvwJG1+mGB8lCxLxLxaVJ7M74C/NwWTc4RMtbQ6l2r3i15qzdGtX+m3VUS83 k6kVAsOJ6KPv98iZ2MctWrjyhPxrQ5oNIaFtLl/jTRqVLWXqHGFn66e/Nm1a9qzo xU+x2sOz/VynDB+zpHP9fDtXEID0onugyBigSnKhulfd6ycEnu7fivp9wOH6Rx6e bNAuoSjYXjcmRX0I9sqwSRFDaF90I5E= -----END CERTIFICATE-----Generated at Mon Jun 30 19:01:21 2025 by rpki-client