$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa File: ef3392a6-ef96-3774-8bd4-9944157036c5.roa (raw, json) Hash identifier: +oJqwniUHvH52UFoz94xJoVVT5SbyecwKoxhD6JOFsA= Subject key identifier: 31:57:C6:5A:D8:C9:6F:8A:8F:38:0B:52:23:E4:78:DB:28:81:3A:ED Certificate issuer: /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Certificate serial: 010D0C9F4328584A295568BF2B426E048F6B5900 Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 7029 IP address blocks: 204.114.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:68:bf:2b:42:6e:04:8f:6b:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=bdf72021-ef7c-4aef-a8c1-9e0deab87081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:af:17:fe:6f:97:84:82:cc:33:be:cd:72: 37:4b:22:c1:0d:19:27:16:d0:88:7d:0b:d5:fc:12: b7:d5:ef:66:33:1a:70:48:54:b7:0b:c4:53:27:de: e8:4c:30:c5:ee:81:c6:38:74:9e:07:c8:20:65:fc: 94:df:07:f4:e8:77:48:48:9f:4b:3e:d5:89:2b:07: 5d:c9:3b:98:98:9f:35:da:97:6f:ae:71:27:99:54: ac:b9:35:b8:05:f2:0f:27:eb:cf:46:e4:69:c3:40: ac:68:70:a6:07:85:85:39:ad:0c:99:44:ec:85:7e: c9:14:e5:ce:20:de:fb:29:cd:77:cb:23:84:a8:7a: 7d:c7:1c:39:d5:50:74:fa:64:ad:bd:8b:7c:8d:d2: 35:e5:bd:28:60:f7:59:34:f3:42:20:3e:73:74:34: 67:19:5f:07:43:b5:e8:46:db:0c:71:8b:f6:23:51: 3d:de:24:30:45:b9:02:09:00:bc:5f:8e:94:58:de: 82:24:b2:48:ab:09:3a:4d:c7:c4:3a:48:54:e2:70: ef:b9:4e:ca:23:08:9b:d5:b1:50:f3:ed:1c:0f:c4: 8b:1a:30:73:64:30:c8:8a:9e:4b:80:0b:9e:e4:6e: 0f:b7:88:43:63:ac:f8:25:56:17:81:ab:16:ad:1a: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:57:C6:5A:D8:C9:6F:8A:8F:38:0B:52:23:E4:78:DB:28:81:3A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl X509v3 Authority Key Identifier: keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer sbgp-ipAddrBlock: critical IPv4: 204.114.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9e:6b:3a:a1:2c:34:01:e3:57:c3:16:27:8d:10:6d:5c:eb: 0f:cc:10:d9:1a:92:69:c7:95:5c:93:e8:fa:3b:04:03:86:bb: 8b:f5:e3:cb:40:f1:97:1b:3e:b0:89:d3:29:c5:39:60:8e:11: 9e:8f:b8:9e:f5:ca:c7:23:6c:56:fa:20:82:37:77:c4:b2:32: e4:08:c0:92:2d:01:50:c9:03:4b:5c:b4:0d:87:62:f7:97:07: ae:03:5a:93:b4:72:2d:3d:1f:d0:4a:10:82:72:fb:2a:2d:11: 7e:46:0b:72:d2:4d:38:c3:de:17:10:f9:cf:2f:fe:12:60:09: 8f:4e:e8:18:ce:f4:fb:64:f4:35:a3:95:f1:87:cd:8e:9a:a9: d1:63:3f:86:79:81:df:c4:c6:46:06:a5:68:73:9a:a3:c1:17: 8b:c3:96:82:53:09:5e:de:ac:a5:01:c3:b1:9a:9f:ef:e6:29: 45:51:eb:71:5e:76:bc:c5:de:21:23:78:fd:82:ca:2b:ba:69: 05:21:25:88:09:36:43:82:aa:07:d6:ff:02:cd:77:b1:30:f8: 19:ac:20:6e:60:a6:f9:37:24:4b:96:d2:50:5f:70:a0:7c:9b: 0d:d2:d5:94:4e:ec:e5:98:12:ca:7f:c1:32:9c:0b:2f:a4:8d: f8:2d:98:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWi/K0JuBI9rWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5 Njk4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk YmRmNzIwMjEtZWY3Yy00YWVmLWE4YzEtOWUwZGVhYjg3MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMKvF/5vl4SCzDO+zXI3SyLBDRknFtCIfQvV /BK31e9mMxpwSFS3C8RTJ97oTDDF7oHGOHSeB8ggZfyU3wf06HdISJ9LPtWJKwdd yTuYmJ812pdvrnEnmVSsuTW4BfIPJ+vPRuRpw0CsaHCmB4WFOa0MmUTshX7JFOXO IN77Kc13yyOEqHp9xxw51VB0+mStvYt8jdI15b0oYPdZNPNCID5zdDRnGV8HQ7Xo RtsMcYv2I1E93iQwRbkCCQC8X46UWN6CJLJIqwk6TcfEOkhU4nDvuU7KIwib1bFQ 8+0cD8SLGjBzZDDIip5LgAue5G4Pt4hDY6z4JVYXgasWrRrduQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFXxlrYyW+KjzgLUiPkeNsogTrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5 M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvZWYzMzkyYTYtZWY5Ni0z Nzc0LThiZDQtOTk0NDE1NzAzNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmEwOTNlM2YtMWQ5Yi00ZTY4LTkz MTctMWRlNzdkYWY5Njk4LzJhMDkzZTNmLTFkOWItNGU2OC05MzE3LTFkZTc3ZGFm OTY5OC5jcmwwHwYDVR0jBBgwFoAUxw25EFn1EfxVkVJscoLB6kVFp3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3 N2RhZjk2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzHJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+eazqhLDQB41fDFieNEG1c6w/MENkakmnHlVyT6Po7BAOGu4v148tA 8ZcbPrCJ0ynFOWCOEZ6PuJ71yscjbFb6III3d8SyMuQIwJItAVDJA0tctA2HYveX B64DWpO0ci09H9BKEIJy+yotEX5GC3LSTTjD3hcQ+c8v/hJgCY9O6BjO9Ptk9DWj lfGHzY6aqdFjP4Z5gd/ExkYGpWhzmqPBF4vDloJTCV7erKUBw7Gan+/mKUVR63Fe drzF3iEjeP2Cyiu6aQUhJYgJNkOCqgfW/wLNd7Ew+BmsIG5gpvk3JEuW0lBfcKB8 mw3S1ZRO7OWYEsp/wTKcCy+kjfgtmMg= -----END CERTIFICATE-----Generated at Mon Jun 30 18:17:19 2025 by rpki-client