$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa File: 503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa (raw, json) Hash identifier: OS7GKvVZKnAVsA0n9GWkag7ogEZN3pSF7jWuwUX/vos= Subject key identifier: AE:3A:C7:01:21:A6:56:FE:15:C4:29:45:99:3C:D8:1C:99:AB:DB:4B Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584A3A1585B7EBD0C867FCCBFCC0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 217.20.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:85:b7:eb:d0:c8:67:fc:cb:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=ea3ce13c-a792-47fc-a8bf-eec1f7af05be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:11:ea:83:1a:4f:ef:13:17:08:df:3b:18: 74:f3:6b:a6:01:a5:12:49:d5:67:42:88:25:44:55: e7:64:be:46:2f:c2:cc:e4:3a:26:b7:f3:96:f4:a3: e6:3a:61:8b:cc:cb:c1:22:37:06:ca:b9:91:04:b0: 0f:35:3f:04:dc:66:17:9e:b6:e4:40:3b:42:38:0c: 2a:36:c9:ac:49:4d:69:c5:9e:be:80:c0:c9:e1:09: d8:5f:20:4c:a2:90:90:73:0e:b1:05:fb:0c:04:b7: 00:ce:a1:e0:75:c1:ac:50:81:34:80:25:e2:a3:ff: b8:24:b7:ef:72:12:62:f1:2e:51:da:00:b1:2b:c7: d6:7e:6e:d1:e4:00:21:e3:b6:88:32:01:b0:d4:12: 4e:e0:9a:0b:1c:40:07:05:5c:7d:33:b4:de:ab:82: ef:7a:0e:7f:a9:94:86:04:85:17:d1:27:f1:9d:a8: 81:45:88:ea:3e:bd:61:65:da:d1:1c:ae:97:3c:72: f9:7e:cd:24:46:f1:2b:0f:ca:10:ad:bd:10:00:66: a0:15:9b:b3:6c:f8:e1:f7:84:a3:22:f8:84:e4:e7: 93:a8:e2:38:4d:96:b9:87:1e:21:85:9f:15:ca:61: ef:00:b1:ce:b8:99:3b:c8:90:5d:6a:cd:77:8b:46: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3A:C7:01:21:A6:56:FE:15:C4:29:45:99:3C:D8:1C:99:AB:DB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 217.20.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8c:b7:92:1d:94:3b:78:e6:ce:e9:0d:07:e3:2b:a6:d3:cb: e8:82:56:09:00:b2:15:7c:25:f6:e0:fb:b8:50:3a:85:e5:b7: 5c:c2:aa:48:5d:2f:a7:b3:7d:c2:f0:63:39:49:2b:be:a7:4a: 2a:05:21:19:a9:5b:82:ca:da:6d:4c:7a:88:86:c7:8c:f3:80: 9c:26:c5:98:24:94:94:b5:44:de:51:e7:23:6f:ce:2c:b6:80: 0d:aa:90:34:24:98:e6:2f:16:81:fc:c2:c7:19:60:54:c5:81: 9c:11:09:98:70:a1:9b:ec:17:75:48:2c:05:b5:63:82:04:6a: 87:8e:31:1c:37:1d:a9:ce:a6:35:f1:fe:a8:49:33:63:8c:72: a4:80:f9:76:2f:07:a7:35:90:ca:9a:73:53:cf:36:96:1f:40: fa:5e:69:1a:7d:4f:93:c2:f4:b4:72:a4:10:eb:b4:8c:80:c4: 52:49:4c:af:f0:90:68:d6:bb:17:4b:ff:4d:4b:6a:f5:18:f1: 32:c2:cc:bd:87:6a:9f:cd:7d:e2:71:fd:fe:d8:7d:e1:20:5f: 76:e8:ef:60:e8:28:3b:c8:f4:26:77:da:33:43:5d:5b:ec:35: d8:f1:68:72:01:20:e2:ca:90:e4:e5:45:1b:09:9f:20:4b:5c: 4e:77:fc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYW369DIZ/zL/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZWEzY2UxM2MtYTc5Mi00N2ZjLWE4YmYtZWVjMWY3YWYwNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWwR6oMaT+8TFwjfOxh082umAaUSSdVnQogl RFXnZL5GL8LM5Domt/OW9KPmOmGLzMvBIjcGyrmRBLAPNT8E3GYXnrbkQDtCOAwq NsmsSU1pxZ6+gMDJ4QnYXyBMopCQcw6xBfsMBLcAzqHgdcGsUIE0gCXio/+4JLfv chJi8S5R2gCxK8fWfm7R5AAh47aIMgGw1BJO4JoLHEAHBVx9M7Teq4Lveg5/qZSG BIUX0SfxnaiBRYjqPr1hZdrRHK6XPHL5fs0kRvErD8oQrb0QAGagFZuzbPjh94Sj IviE5OeTqOI4TZa5hx4hhZ8VymHvALHOuJk7yJBdas13i0awGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK46xwEhplb+FcQpRZk82ByZq9tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNTAzZjNlMWItZGVkYi0z ZjgzLWI5YzUtNTRmMzA2MjU1YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqMt5IdlDt45s7pDQfjK6bTy+iCVgkAshV8Jfbg+7hQOoXlt1zCqkhd L6ezfcLwYzlJK76nSioFIRmpW4LK2m1MeoiGx4zzgJwmxZgklJS1RN5R5yNvziy2 gA2qkDQkmOYvFoH8wscZYFTFgZwRCZhwoZvsF3VILAW1Y4IEaoeOMRw3HanOpjXx /qhJM2OMcqSA+XYvB6c1kMqac1PPNpYfQPpeaRp9T5PC9LRypBDrtIyAxFJJTK/w kGjWuxdL/01LavUY8TLCzL2Hap/NfeJx/f7YfeEgX3bo72DoKDvI9CZ32jNDXVvs NdjxaHIBIOLKkOTlRRsJnyBLXE53/KI= -----END CERTIFICATE-----Generated at Sun Jun 29 06:29:30 2025 by rpki-client