$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa File: f9734849-7012-30a9-be2d-be64e3d02034.roa (raw, json) Hash identifier: pToLvHkp/IJQYOO8IAFdjcTri+PB57ZYliEYUYs00a4= Subject key identifier: 66:B5:8D:BE:FA:4C:F8:09:23:FD:50:5A:66:6A:22:53:11:96:50:C3 Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584A5335A31385448016717E4100 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 11758 IP address blocks: 204.29.12.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a3:13:85:44:80:16:71:7e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=917430ce-c668-4a06-ba38-1bd0d160b696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bf:46:17:42:e0:72:3f:ed:c6:33:36:1d:39: 98:7f:36:7f:50:06:e2:73:8b:ad:ff:a5:3f:04:23: 60:9c:1e:39:b5:2f:97:5d:0a:28:bd:e2:51:65:ee: 69:2b:7a:77:44:21:b9:98:8d:aa:4b:a8:f8:7f:73: f9:ba:28:6a:53:df:fc:1c:6b:98:6a:72:00:5e:a3: 8b:61:96:d7:47:01:83:cd:60:2a:88:61:0e:cc:c4: 6e:54:93:68:a7:b8:77:17:f3:95:4c:8f:bd:0f:61: 16:d9:de:c2:aa:0a:ea:7f:57:c1:f2:21:00:ec:27: 4f:07:1e:4d:29:45:42:d5:26:5f:0e:23:01:18:7c: 00:51:4e:8d:2a:30:d1:8c:cd:e9:f8:7c:fc:16:d6: 58:2c:57:05:ab:30:83:3e:8e:42:9e:34:f4:46:c5: bd:bb:6d:3b:ff:c6:1a:df:41:f3:3a:0b:72:ef:2a: 09:c4:04:0d:d6:ea:c4:a0:1c:1a:be:1c:ba:fa:f8: 8f:42:fa:e8:5e:21:fa:9e:66:00:c0:b2:b7:fb:c4: 4f:c9:cb:28:62:42:cd:7b:15:6b:3f:db:5c:7d:cd: d7:03:f6:df:b9:00:b5:ad:22:ed:94:d0:36:4c:15: bd:5f:e9:b5:4e:05:53:dc:51:62:96:30:70:c7:d4: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B5:8D:BE:FA:4C:F8:09:23:FD:50:5A:66:6A:22:53:11:96:50:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 204.29.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4e:06:6e:8a:fb:91:e3:b9:62:6e:ea:b2:fb:eb:82:ad:cf: 17:a5:8e:65:8c:4c:52:b6:3b:7a:16:e8:c0:6b:87:c3:77:23: c0:6c:5d:96:b3:eb:3e:6d:25:f5:64:8b:3d:f2:ee:ba:be:59: a1:4d:7c:de:26:ea:95:9d:51:0a:34:83:83:a8:95:99:46:ca: ca:22:e3:19:e3:66:8f:2b:a4:db:74:2f:ff:5b:1a:2d:7e:a7: 44:19:33:7a:55:6f:62:b3:0a:3e:30:5c:04:14:9e:f0:ce:19: 6c:fb:da:81:3a:fe:5b:8f:f9:68:27:34:e9:0e:91:b7:39:25: 93:27:a7:68:f7:1d:a9:59:4e:4e:0e:0a:20:2e:19:5e:ad:37: 81:6e:14:3d:7f:8d:f1:dc:2f:29:87:91:b9:57:9d:ba:43:03: cc:53:26:b5:e9:b0:3f:2e:a5:56:12:ac:fa:61:91:d8:91:70: 92:b8:1e:e3:00:0d:4b:2c:26:51:e5:c7:18:83:d9:3f:ef:3a: 7d:6d:60:83:f2:f6:2c:f4:cb:cd:00:79:8a:af:70:89:e7:4c: 8e:31:9f:fc:b9:1c:fb:77:93:ef:89:37:50:39:31:99:93:27: f3:06:23:5f:45:54:fe:fc:5c:58:d3:a3:00:48:41:e4:f4:8a: cf:45:9f:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaMThUSAFnF+QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk OTE3NDMwY2UtYzY2OC00YTA2LWJhMzgtMWJkMGQxNjBiNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr9GF0Lgcj/txjM2HTmYfzZ/UAbic4ut/6U/ BCNgnB45tS+XXQooveJRZe5pK3p3RCG5mI2qS6j4f3P5uihqU9/8HGuYanIAXqOL YZbXRwGDzWAqiGEOzMRuVJNop7h3F/OVTI+9D2EW2d7Cqgrqf1fB8iEA7CdPBx5N KUVC1SZfDiMBGHwAUU6NKjDRjM3p+Hz8FtZYLFcFqzCDPo5CnjT0RsW9u207/8Ya 30HzOgty7yoJxAQN1urEoBwavhy6+viPQvroXiH6nmYAwLK3+8RPycsoYkLNexVr P9tcfc3XA/bfuQC1rSLtlNA2TBW9X+m1TgVT3FFiljBwx9QrDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa1jb76TPgJI/1QWmZqIlMRllDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvZjk3MzQ4NDktNzAxMi0z MGE5LWJlMmQtYmU2NGUzZDAyMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzB0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZOBm6K+5HjuWJu6rL764KtzxeljmWMTFK2O3oW6MBrh8N3I8BsXZaz 6z5tJfVkiz3y7rq+WaFNfN4m6pWdUQo0g4OolZlGysoi4xnjZo8rpNt0L/9bGi1+ p0QZM3pVb2KzCj4wXAQUnvDOGWz72oE6/luP+WgnNOkOkbc5JZMnp2j3HalZTk4O CiAuGV6tN4FuFD1/jfHcLymHkblXnbpDA8xTJrXpsD8upVYSrPphkdiRcJK4HuMA DUssJlHlxxiD2T/vOn1tYIPy9iz0y80AeYqvcInnTI4xn/y5HPt3k++JN1A5MZmT J/MGI19FVP78XFjTowBIQeT0is9Fn+8= -----END CERTIFICATE-----Generated at Mon Jun 30 11:09:05 2025 by rpki-client