$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa File: cc5a7709-a56d-3530-a29a-c30861d58af7.roa (raw, json) Hash identifier: wT75WlxkKxomF6dbbTqpRaua8INbYgpjRxhiC7lqVD8= Subject key identifier: 25:85:22:A2:89:78:AD:F1:30:59:98:91:BF:12:C0:75:17:28:92:23 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584A51D07445524CE001FB750E00 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 204.155.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:74:45:52:4c:e0:01:fb:75:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=a4837d5d-d059-4f28-900a-6e4d04aae31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:ef:70:0a:d8:fe:66:f9:16:3b:26:4a:37: d2:8c:cb:dd:14:5d:f5:5f:ef:05:3e:10:14:75:f8: ea:8c:71:f0:8d:34:21:9f:3b:01:53:4b:43:cc:6a: e3:5d:7f:07:70:bc:9f:a5:ce:b6:ac:5a:1f:6c:6b: 3e:f4:43:07:46:ab:3f:ef:39:0f:d4:2b:c2:89:37: 7e:a2:70:d3:b3:62:a6:d4:ff:ee:08:6b:36:25:99: 37:71:ec:12:e8:e8:20:d4:cc:68:03:98:f9:37:98: 6d:38:3c:6d:2b:bd:39:39:5e:72:31:1c:64:3d:c7: 15:a0:78:a9:9b:8a:a4:7a:bf:a6:84:49:39:21:76: 07:35:4a:2f:26:62:8a:19:0d:89:68:64:a4:b8:66: 03:16:2f:c5:5d:ef:43:87:3e:36:99:ab:1b:db:67: e8:40:59:95:9c:be:26:8d:90:e9:74:48:54:99:9b: f1:e7:38:3f:dc:4a:b2:f1:d6:e6:64:eb:04:0c:58: 9e:9f:e9:a2:38:97:72:cd:2d:1e:f9:37:ff:e0:c9: 97:5c:c1:fa:c8:57:f0:2b:a1:f3:74:a0:13:ea:6e: b0:a2:67:32:cc:5f:2f:fa:4c:2b:e9:cb:1e:11:54: 80:5f:f4:f7:ef:20:67:fa:3d:5c:2b:95:55:e5:29: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:85:22:A2:89:78:AD:F1:30:59:98:91:BF:12:C0:75:17:28:92:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/cc5a7709-a56d-3530-a29a-c30861d58af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:28:71:b4:90:26:64:9c:de:8d:5b:cb:e5:b7:37:7b:d8:4b: ae:ec:c0:0e:ff:77:ec:ff:4a:da:01:ae:d5:7d:a8:62:91:ce: 9f:0c:f7:71:38:34:4a:08:55:74:a0:36:29:6f:03:12:fa:3e: dd:48:c9:52:8e:1f:8e:bf:c3:15:92:4d:34:96:72:4d:ef:92: e9:a7:65:1e:c8:f3:08:40:d8:3a:dd:f5:8c:96:13:f7:6e:f3: 4f:a6:0a:ab:dd:01:2b:58:ed:40:cf:cb:d0:1f:00:b3:f1:d5: 07:7e:02:26:7c:04:38:b6:b9:3d:6b:70:32:92:f4:7e:67:52: 3a:9d:96:a4:5a:f4:f4:ec:0b:52:fc:5c:41:88:8b:d1:a9:be: f7:00:f4:83:e8:8f:2d:6d:9e:b0:65:d9:d4:7f:bf:8d:50:89: e9:7c:fc:31:79:9f:26:a3:ed:eb:92:b0:90:f9:7b:bc:57:28: 81:dc:27:12:ab:c8:1a:d8:af:6d:eb:45:58:84:79:3e:fc:56: 42:4d:ae:6e:0e:9e:74:e5:67:f1:f7:2b:72:eb:ed:54:8a:ef: d5:70:1a:b8:7f:93:b2:19:91:a2:e9:24:45:e5:bc:64:7e:6f: 55:bd:78:58:ad:08:0e:c8:45:98:cf:e0:d7:4c:d1:5d:65:13: 0b:13:64:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HRFUkzgAft1DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk YTQ4MzdkNWQtZDA1OS00ZjI4LTkwMGEtNmU0ZDA0YWFlMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5HvcArY/mb5FjsmSjfSjMvdFF31X+8FPhAU dfjqjHHwjTQhnzsBU0tDzGrjXX8HcLyfpc62rFofbGs+9EMHRqs/7zkP1CvCiTd+ onDTs2Km1P/uCGs2JZk3cewS6Ogg1MxoA5j5N5htODxtK705OV5yMRxkPccVoHip m4qker+mhEk5IXYHNUovJmKKGQ2JaGSkuGYDFi/FXe9Dhz42masb22foQFmVnL4m jZDpdEhUmZvx5zg/3Eqy8dbmZOsEDFien+miOJdyzS0e+Tf/4MmXXMH6yFfwK6Hz dKAT6m6womcyzF8v+kwr6cseEVSAX/T37yBn+j1cK5VV5Skd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWFIqKJeK3xMFmYkb8SwHUXKJIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvY2M1YTc3MDktYTU2ZC0z NTMwLWEyOWEtYzMwODYxZDU4YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYocbSQJmSc3o1by+W3N3vYS67swA7/d+z/StoBrtV9qGKRzp8M93E4 NEoIVXSgNilvAxL6Pt1IyVKOH46/wxWSTTSWck3vkumnZR7I8whA2Drd9YyWE/du 80+mCqvdAStY7UDPy9AfALPx1Qd+AiZ8BDi2uT1rcDKS9H5nUjqdlqRa9PTsC1L8 XEGIi9GpvvcA9IPojy1tnrBl2dR/v41Qiel8/DF5nyaj7euSsJD5e7xXKIHcJxKr yBrYr23rRViEeT78VkJNrm4OnnTlZ/H3K3Lr7VSK79VwGrh/k7IZkaLpJEXlvGR+ b1W9eFitCA7IRZjP4NdM0V1lEwsTZNY= -----END CERTIFICATE-----Generated at Sun Jun 29 14:20:17 2025 by rpki-client