$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa File: 8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa (raw, json) Hash identifier: 1hPWLfUPOOm0rb4WlfC7e8i8ni0oo6yLppRCQLNhSkw= Subject key identifier: BB:1E:E5:14:24:0E:D0:FD:85:5F:E3:7A:D1:CF:24:9C:67:FA:1C:25 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584A4DA050EF37EA718FC694E580 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 401492 IP address blocks: 205.213.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:50:ef:37:ea:71:8f:c6:94:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=f48aa3e8-7f23-4b29-819a-730eebc90d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:3a:09:15:f4:04:e9:3f:d9:27:a6:c2:ce: 4b:58:d7:3f:2c:cb:85:12:dc:08:65:a2:4a:7d:af: 07:3f:7c:1a:9e:b7:ab:49:cb:5c:6e:b0:c1:8e:f8: da:e7:e4:68:56:38:c3:0c:be:81:ee:8e:e8:76:f9: 0c:6e:80:74:df:f2:b4:78:76:d6:ce:1a:87:53:ec: d0:b9:e0:ed:90:8d:23:36:1a:09:19:e4:71:84:db: 95:09:8b:a2:41:29:58:df:4f:f6:d0:fe:a6:1c:fa: c0:c8:07:0e:30:66:d5:16:ad:1b:22:b7:c2:9b:bc: c3:8c:83:79:40:61:3a:fa:7f:d6:8a:11:e4:9f:e5: b9:5c:07:bb:df:a5:e9:31:5d:62:7f:36:21:d3:6d: 8a:7b:a1:9f:a6:5e:9b:df:3f:03:d0:2f:ee:25:38: 71:68:59:e5:90:fc:78:d0:06:a5:32:3b:8f:86:f8: 79:27:5e:d7:82:f9:c0:bf:dd:11:b1:e8:82:8d:eb: 19:6c:17:dc:f6:e8:a2:b2:53:78:80:50:26:0a:d2: 97:76:d5:6b:4f:ce:24:e3:29:de:a4:d2:c5:c6:c9: ca:37:b2:ce:a0:18:a6:4f:86:e4:2f:96:8e:bb:c4: 04:9a:e7:c3:7d:e3:b7:b8:97:0c:43:46:dd:4e:91: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:E5:14:24:0E:D0:FD:85:5F:E3:7A:D1:CF:24:9C:67:FA:1C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8d040426-e68c-3c75-9bb8-1a9a86ba51a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:17:08:94:be:ce:a9:2c:d1:c8:5f:6e:8b:ec:48:c3:20:ae: d5:77:3b:d3:cb:93:b3:93:c8:15:68:d7:93:e8:3a:3e:40:2a: 8e:6e:97:fb:29:71:f7:27:35:54:8b:20:7e:cc:6b:17:01:9b: a7:f8:a2:d1:ce:06:7d:61:b9:59:27:d0:8b:bd:42:73:f2:fc: 3e:ea:83:c7:48:50:89:0e:f3:99:2b:24:fc:c2:99:f0:a5:ea: 35:33:b4:59:a6:89:f4:3a:c7:20:1b:86:22:b4:d8:39:ed:df: 94:53:7d:5c:64:e0:e6:97:c7:17:cc:c2:2e:36:68:50:84:03: 88:bc:dc:54:b7:72:b3:f7:85:9e:d9:90:47:70:5d:90:ea:36: 6d:27:23:7b:8f:f2:f2:94:67:22:0a:91:48:95:31:24:a5:be: 7b:31:0f:cf:ac:6f:b8:80:27:77:85:7b:65:ee:d8:85:4d:77: 64:25:d1:6b:fd:84:91:a3:bd:94:06:9f:d4:4c:33:21:3c:02: 4d:4a:11:b3:f4:01:ad:ed:0d:32:f6:18:50:b4:85:ed:55:40: 69:a7:17:a5:6f:e3:c4:5a:d7:ec:22:e9:d6:d9:c8:3c:46:7b: e3:37:09:b6:d7:84:bb:50:3b:42:8e:40:e2:c8:79:7a:3d:40: b3:75:9c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoFDvN+pxj8aU5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjQ4YWEzZTgtN2YyMy00YjI5LTgxOWEtNzMwZWViYzkwZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RE6CRX0BOk/2Semws5LWNc/LMuFEtwIZaJK fa8HP3wanrerSctcbrDBjvja5+RoVjjDDL6B7o7odvkMboB03/K0eHbWzhqHU+zQ ueDtkI0jNhoJGeRxhNuVCYuiQSlY30/20P6mHPrAyAcOMGbVFq0bIrfCm7zDjIN5 QGE6+n/WihHkn+W5XAe736XpMV1ifzYh022Ke6Gfpl6b3z8D0C/uJThxaFnlkPx4 0AalMjuPhvh5J17XgvnAv90RseiCjesZbBfc9uiislN4gFAmCtKXdtVrT84k4yne pNLFxsnKN7LOoBimT4bkL5aOu8QEmufDfeO3uJcMQ0bdTpFi0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLse5RQkDtD9hV/jetHPJJxn+hwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvOGQwNDA0MjYtZTY4Yy0z Yzc1LTliYjgtMWE5YTg2YmE1MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkXCJS+zqks0chfbovsSMMgrtV3O9PLk7OTyBVo15PoOj5AKo5ul/sp cfcnNVSLIH7MaxcBm6f4otHOBn1huVkn0Iu9QnPy/D7qg8dIUIkO85krJPzCmfCl 6jUztFmmifQ6xyAbhiK02Dnt35RTfVxk4OaXxxfMwi42aFCEA4i83FS3crP3hZ7Z kEdwXZDqNm0nI3uP8vKUZyIKkUiVMSSlvnsxD8+sb7iAJ3eFe2Xu2IVNd2Ql0Wv9 hJGjvZQGn9RMMyE8Ak1KEbP0Aa3tDTL2GFC0he1VQGmnF6Vv48Ra1+wi6dbZyDxG e+M3CbbXhLtQO0KOQOLIeXo9QLN1nIQ= -----END CERTIFICATE-----Generated at Tue Jul 1 11:42:20 2025 by rpki-client