$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa File: 0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa (raw, json) Hash identifier: OxmafH6PdLa0FgDCFiu2yOZs7OayrzbifrMWrMU/TT4= Subject key identifier: 5B:28:85:15:CA:E6:87:54:CD:94:0C:9C:A4:3C:D0:B3:D7:B6:6C:84 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801D6A8604985439E5EC40 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 205.236.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1d:6a:86:04:98:54:39:e5:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=ea27e61f-e86a-47b0-9b18-7899dd2ffe8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:58:de:93:0b:65:b7:c1:ef:e0:a4:82:a2: 8a:94:34:b7:12:25:a7:fb:07:90:1f:d3:82:31:c2: d4:fc:e7:f3:fd:43:5a:8e:a3:b6:85:88:00:4b:10: 67:50:12:21:79:e0:62:25:d3:90:0a:c4:80:67:34: a4:2e:8d:7f:ac:f8:0a:0a:91:b5:72:70:c2:aa:63: a9:45:d2:49:37:54:91:69:d8:fe:06:fb:82:42:2c: 66:c9:90:53:57:f1:cb:cd:e7:29:be:53:65:b6:30: bb:62:2e:3a:d7:6d:94:a1:17:bb:60:f1:29:8a:bf: 1e:5d:ce:88:07:07:dd:60:8f:80:b7:ba:2a:71:19: 60:56:e8:08:70:fd:ed:28:d1:d1:64:a6:78:5f:66: 92:3c:d2:07:17:13:21:15:33:4b:43:e4:b8:da:39: a7:d2:99:1f:28:f0:5a:e1:a8:00:ab:62:37:32:a6: 15:a6:90:6a:da:5f:e3:da:e9:44:24:5a:77:12:84: 4f:9a:54:b0:c3:da:d4:25:80:1e:ce:b9:8e:08:3a: 7b:64:7f:0f:f1:fa:6a:e9:f5:42:fc:62:ea:f3:56: fa:1a:13:5d:94:e2:43:c0:df:ce:5a:e3:b2:8a:02: 46:65:ca:2a:37:af:d7:62:32:83:63:47:de:d4:f3: bb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:85:15:CA:E6:87:54:CD:94:0C:9C:A4:3C:D0:B3:D7:B6:6C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 205.236.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8b:ca:31:80:11:f5:77:88:d2:9c:49:b9:7c:9d:34:0b:41: 04:8f:af:68:56:c8:4c:fa:87:54:c8:6e:3f:6c:07:71:10:9e: 0d:8e:31:f5:34:de:b7:ab:40:80:4a:c7:27:e9:c0:23:a9:a4: 4d:3e:c3:07:55:9a:74:37:35:57:42:79:dd:a0:8e:a7:95:7d: 68:6d:59:17:b9:aa:55:83:45:69:77:73:08:1a:aa:65:34:0e: bf:66:46:6c:cc:ea:20:81:2e:6a:bd:98:96:68:62:a6:3a:29: b3:6b:8f:51:c9:4a:00:cc:e7:cc:d3:28:b4:39:86:5b:83:79: 16:b2:96:43:5e:52:7b:28:db:a9:48:a2:94:76:ea:13:1e:88: de:20:31:9b:e2:aa:a1:ad:ff:57:cb:8a:e2:e6:ee:fa:1e:a0: af:d3:e4:fb:51:41:bf:c4:c1:e5:2e:04:a4:75:cf:41:af:c0: 0f:64:ea:ba:10:c0:1f:36:a2:31:18:b4:44:7f:de:e3:1a:3c: a1:51:9b:e7:f2:4c:11:eb:aa:8c:ea:0b:42:1d:1e:25:c4:64: 17:b1:7f:0a:b3:29:3f:d7:65:ee:d1:a1:96:a6:db:e2:c6:5d: 01:bb:fe:7e:89:c2:28:a2:13:fb:47:04:d7:d0:d6:c0:92:44: 54:b8:ac:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gB1qhgSYVDnl7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZWEyN2U2MWYtZTg2YS00N2IwLTliMTgtNzg5OWRkMmZmZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuthY3pMLZbfB7+CkgqKKlDS3EiWn+weQH9OC McLU/Ofz/UNajqO2hYgASxBnUBIheeBiJdOQCsSAZzSkLo1/rPgKCpG1cnDCqmOp RdJJN1SRadj+BvuCQixmyZBTV/HLzecpvlNltjC7Yi46122UoRe7YPEpir8eXc6I BwfdYI+At7oqcRlgVugIcP3tKNHRZKZ4X2aSPNIHFxMhFTNLQ+S42jmn0pkfKPBa 4agAq2I3MqYVppBq2l/j2ulEJFp3EoRPmlSww9rUJYAezrmOCDp7ZH8P8fpq6fVC /GLq81b6GhNdlOJDwN/OWuOyigJGZcoqN6/XYjKDY0fe1PO7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsohRXK5odUzZQMnKQ80LPXtmyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGVjZDFiMDQtNDU5NC0z OTM5LThjMmUtNGNlMmZiYTEyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCLyjGAEfV3iNKcSbl8nTQLQQSPr2hWyEz6h1TIbj9sB3EQng2OMfU0 3rerQIBKxyfpwCOppE0+wwdVmnQ3NVdCed2gjqeVfWhtWRe5qlWDRWl3cwgaqmU0 Dr9mRmzM6iCBLmq9mJZoYqY6KbNrj1HJSgDM58zTKLQ5hluDeRaylkNeUnso26lI opR26hMeiN4gMZviqqGt/1fLiuLm7voeoK/T5PtRQb/EweUuBKR1z0GvwA9k6roQ wB82ojEYtER/3uMaPKFRm+fyTBHrqozqC0IdHiXEZBexfwqzKT/XZe7RoZam2+LG XQG7/n6JwiiiE/tHBNfQ1sCSRFS4rPE= -----END CERTIFICATE-----Generated at Mon Jun 30 05:01:43 2025 by rpki-client