$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa File: 504539a8-a450-354d-9c7e-6a0128d4ded2.roa (raw, json) Hash identifier: ea0L2DOutvWeJ+0TNIGDmorjuERffnaq++PjWfc4inc= Subject key identifier: 22:33:58:64:3C:04:C4:E8:A7:0D:04:42:C1:F6:54:C6:72:BA:3F:9F Certificate issuer: /CN=c003af2f-f626-4f2a-a59d-433951f53b3b Certificate serial: 010D0C9F4328584A480AE7028FE7D6AA8C1E6B40 Authority key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 7132 IP address blocks: 204.17.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e7:02:8f:e7:d6:aa:8c:1e:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c003af2f-f626-4f2a-a59d-433951f53b3b Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=1a1b0e59-043e-4b18-af39-d92e6686d3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:ea:56:23:e2:1e:dc:a8:14:ec:ba:13:38: 02:9f:11:fa:5e:3a:13:df:f6:84:c4:0a:76:35:2a: 3b:fd:31:11:0d:81:4b:88:97:8f:e8:98:40:00:ff: c0:e1:b3:cb:6c:95:91:50:d9:a0:9a:c1:2b:cd:03: cd:ef:fe:1e:03:8e:10:f8:a4:0f:bf:af:6f:6d:e0: 45:c5:60:a0:87:92:52:c3:f2:08:6c:0f:f5:32:21: 60:12:01:15:16:7a:28:d6:7b:9a:17:5d:28:0c:16: e2:18:89:15:3b:f8:c5:fd:13:89:b8:20:be:5d:49: f2:41:57:25:4b:ca:fa:55:46:b5:b8:df:87:3e:ab: 36:a5:bc:21:bd:16:b5:2d:42:5e:d6:dc:13:4d:3f: 4c:e1:22:83:14:2a:09:d1:fd:03:4f:f1:3f:fa:a2: a9:0a:f4:41:3c:10:18:bc:1c:f1:83:4b:99:e5:16: 92:16:33:52:75:b8:e6:9e:7f:54:dd:db:0b:c2:de: 0e:96:a2:25:ea:4b:c6:73:fa:c5:d7:c9:50:65:60: 79:05:06:3e:0b:7c:28:03:be:5e:71:e5:d2:e3:24: 6d:75:c6:0c:a5:55:c9:46:4e:36:82:05:23:03:d8: 56:aa:a4:70:7e:c8:7d:e3:73:2b:a7:5a:d0:dc:52: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:58:64:3C:04:C4:E8:A7:0D:04:42:C1:F6:54:C6:72:BA:3F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl X509v3 Authority Key Identifier: keyid:A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer sbgp-ipAddrBlock: critical IPv4: 204.17.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ce:4e:1c:63:d8:bb:c9:25:01:21:90:b8:23:b7:7c:e0:11: d0:2d:47:aa:e8:1c:97:a0:38:e0:bc:1a:2d:23:dc:b0:be:c8: 78:ca:3c:72:e9:a2:cd:68:d2:76:32:80:23:b7:a5:c7:c4:90: f7:ad:c8:e1:61:cf:96:36:b0:bc:17:af:be:00:ed:15:6d:62: e8:26:f8:92:75:a4:93:80:c3:d0:97:25:c7:69:8b:06:2e:ab: 05:06:39:2b:24:54:ce:7e:3e:3b:1e:48:46:c3:ff:36:23:33: cd:00:35:62:7a:2c:77:bc:8d:e4:fc:3a:42:c0:a5:c9:4a:e9: 7b:55:64:d4:1b:0f:b1:2f:91:e5:69:ca:fa:c6:e9:b7:62:4f: d4:83:8b:23:0f:2f:4b:b4:ab:8b:fd:d9:0b:31:fd:81:25:9f: 84:92:a6:39:f7:fa:46:16:40:ac:c6:9a:f0:0b:2c:d4:40:2f: 82:67:4f:f4:ee:a2:76:27:18:a6:14:2e:92:c0:83:e5:46:77: 1b:fa:e4:ec:70:6d:23:94:8c:bd:bf:04:ff:88:e2:56:b2:9a: 11:0d:6e:7e:98:1c:e2:4a:e2:a8:d9:29:6e:6f:f0:6a:11:42: 27:00:33:29:bb:5e:a7:c5:a9:b1:b2:62:97:55:cb:fc:d1:b2: cd:a2:9c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICucCj+fWqowea0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwM2FmMmYtZjYyNi00ZjJhLWE1OWQtNDMzOTUxZjUz YjNiMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MWExYjBlNTktMDQzZS00YjE4LWFmMzktZDkyZTY2ODZkM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3DqViPiHtyoFOy6EzgCnxH6XjoT3/aExAp2 NSo7/TERDYFLiJeP6JhAAP/A4bPLbJWRUNmgmsErzQPN7/4eA44Q+KQPv69vbeBF xWCgh5JSw/IIbA/1MiFgEgEVFnoo1nuaF10oDBbiGIkVO/jF/ROJuCC+XUnyQVcl S8r6VUa1uN+HPqs2pbwhvRa1LUJe1twTTT9M4SKDFCoJ0f0DT/E/+qKpCvRBPBAY vBzxg0uZ5RaSFjNSdbjmnn9U3dsLwt4OlqIl6kvGc/rF18lQZWB5BQY+C3woA75e ceXS4yRtdcYMpVXJRk42ggUjA9hWqqRwfsh943Mrp1rQ3FJbZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIzWGQ8BMTopw0EQsH2VMZyuj+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAz YWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFmNTNiM2IvNTA0NTM5YTgtYTQ1MC0z NTRkLTljN2UtNmEwMTI4ZDRkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzAwM2FmMmYtZjYyNi00ZjJhLWE1 OWQtNDMzOTUxZjUzYjNiL2MwMDNhZjJmLWY2MjYtNGYyYS1hNTlkLTQzMzk1MWY1 M2IzYi5jcmwwHwYDVR0jBBgwFoAUodsX5jXPLcuqUy/oANCS8ZQkroIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5 NTFmNTNiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfOThxj2LvJJQEhkLgjt3zgEdAtR6roHJegOOC8Gi0j3LC+yHjKPHLp os1o0nYygCO3pcfEkPetyOFhz5Y2sLwXr74A7RVtYugm+JJ1pJOAw9CXJcdpiwYu qwUGOSskVM5+PjseSEbD/zYjM80ANWJ6LHe8jeT8OkLApclK6XtVZNQbD7EvkeVp yvrG6bdiT9SDiyMPL0u0q4v92Qsx/YEln4SSpjn3+kYWQKzGmvALLNRAL4JnT/Tu onYnGKYULpLAg+VGdxv65OxwbSOUjL2/BP+I4laymhENbn6YHOJK4qjZKW5v8GoR QicAMym7XqfFqbGyYpdVy/zRss2inNc= -----END CERTIFICATE-----Generated at Mon Jun 30 01:33:37 2025 by rpki-client