$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa File: c70e9fda-4775-3e35-b953-e37e4d13808d.roa (raw, json) Hash identifier: IGFsEMKJAvJMh2YKTQo30M5S7opTx4OQIBL4O1ecXIs= Subject key identifier: B9:1D:CD:B6:77:01:30:65:5F:18:B8:A7:85:B7:05:5C:A3:0C:DC:2D Certificate issuer: /CN=4c855281-0740-46c1-8432-9952688807bc Certificate serial: 010D0C9F4328584A411055183CDBF34F15557080 Authority key identifier: 99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 14713 IP address blocks: 204.109.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:55:18:3c:db:f3:4f:15:55:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c855281-0740-46c1-8432-9952688807bc Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=f971a60d-2b5e-40ef-a007-b3a00f6a5970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:b9:fa:da:64:47:6e:24:07:54:3e:37:82: 73:a1:a1:94:00:01:3c:fd:c2:51:e3:fc:5a:b8:67: a6:fd:6d:5c:32:b2:4c:41:b6:b4:ac:42:52:ee:ef: 3b:b7:51:c4:08:a0:f1:d1:e4:a7:f4:f9:e3:65:65: f7:9b:5f:6f:44:6c:8f:28:75:bc:68:94:aa:5e:42: b6:33:76:06:5d:0b:87:98:9f:7c:80:38:b8:fb:ac: fd:e4:0e:71:a4:c3:41:6a:9f:93:a4:f5:2d:e1:fd: a7:9d:b8:f8:3f:0e:e6:b3:75:f4:f3:4b:c9:8d:81: 25:11:eb:1c:f9:06:34:96:7e:94:f9:34:7d:a1:db: 07:44:5a:08:b3:7a:54:54:92:f7:26:10:09:5d:c6: db:94:1f:f7:80:0a:1a:82:0b:6c:5c:73:24:fe:a6: 88:be:1f:42:ed:b4:c9:69:6f:be:bf:f7:2c:d5:9b: d8:30:2c:79:c4:11:3b:4f:7d:06:b9:f0:7d:b5:a9: b8:30:fe:05:16:65:11:9f:74:78:c1:ad:b7:d9:a2: ee:ab:0d:b5:75:07:31:0a:88:08:2c:62:5d:92:cf: 59:3c:e8:90:68:1f:86:d0:34:7e:e6:5d:f7:27:cd: eb:ec:81:88:6b:0f:05:34:78:c1:2b:4b:2c:ad:4b: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:CD:B6:77:01:30:65:5F:18:B8:A7:85:B7:05:5C:A3:0C:DC:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl X509v3 Authority Key Identifier: keyid:99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer sbgp-ipAddrBlock: critical IPv4: 204.109.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:86:fa:91:ac:aa:31:57:9a:7b:b4:48:5c:ee:63:01:4b:fe: 28:10:ca:87:c7:11:72:7a:b1:bb:07:bf:74:50:ff:16:64:34: a6:94:f7:cc:4e:f4:04:4c:7e:d6:83:85:78:76:14:23:d1:d3: bb:2c:a3:ce:01:40:09:fe:9d:c2:ad:fd:9a:4d:6a:ba:38:df: 95:30:97:44:02:5a:5b:a6:f1:f4:7e:33:4f:bd:08:d2:1d:e8: de:d8:24:e0:59:f5:67:a6:a2:58:8a:42:28:26:0f:1b:62:af: be:a3:a4:a0:d3:9a:10:b8:fa:76:02:c7:1e:f3:0c:ec:05:90: d5:cd:f4:34:96:f4:b5:a9:b4:9a:aa:05:b4:79:00:b9:ea:4a: 13:6c:ef:d8:04:5a:3f:71:a5:83:cd:66:38:c2:e8:87:28:55: 15:c9:d6:be:db:08:59:66:cc:f6:c4:e2:8b:c9:15:85:00:7b: 0e:9c:ac:43:97:2c:3e:9d:be:dd:3a:3c:12:a7:5a:90:9b:98: d2:1c:dc:3b:18:30:f2:9e:97:6b:ba:c9:c9:2d:15:64:d4:b6: b6:01:08:6d:82:04:29:16:33:47:f0:fe:f4:94:4f:bf:f7:0e: f8:49:51:ca:53:9f:00:58:3e:c9:87:19:e7:32:36:ee:ca:07: e0:bc:ca:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFUYPNvzTxVVcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NTUyODEtMDc0MC00NmMxLTg0MzItOTk1MjY4ODgw N2JjMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Zjk3MWE2MGQtMmI1ZS00MGVmLWEwMDctYjNhMDBmNmE1OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbG5+tpkR24kB1Q+N4JzoaGUAAE8/cJR4/xa uGem/W1cMrJMQba0rEJS7u87t1HECKDx0eSn9PnjZWX3m19vRGyPKHW8aJSqXkK2 M3YGXQuHmJ98gDi4+6z95A5xpMNBap+TpPUt4f2nnbj4Pw7ms3X080vJjYElEesc +QY0ln6U+TR9odsHRFoIs3pUVJL3JhAJXcbblB/3gAoaggtsXHMk/qaIvh9C7bTJ aW++v/cs1ZvYMCx5xBE7T30GufB9tam4MP4FFmURn3R4wa232aLuqw21dQcxCogI LGJdks9ZPOiQaB+G0DR+5l33J83r7IGIaw8FNHjBK0ssrUteIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkdzbZ3ATBlXxi4p4W3BVyjDNwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1 NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUyNjg4ODA3YmMvYzcwZTlmZGEtNDc3NS0z ZTM1LWI5NTMtZTM3ZTRkMTM4MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGM4NTUyODEtMDc0MC00NmMxLTg0 MzItOTk1MjY4ODgwN2JjLzRjODU1MjgxLTA3NDAtNDZjMS04NDMyLTk5NTI2ODg4 MDdiYy5jcmwwHwYDVR0jBBgwFoAUmRF0X3GaRLTgVFd0DhwnE2//o4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUy Njg4ODA3YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzG00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOG+pGsqjFXmnu0SFzuYwFL/igQyofHEXJ6sbsHv3RQ/xZkNKaU98xO 9ARMftaDhXh2FCPR07sso84BQAn+ncKt/ZpNaro435Uwl0QCWlum8fR+M0+9CNId 6N7YJOBZ9WemoliKQigmDxtir76jpKDTmhC4+nYCxx7zDOwFkNXN9DSW9LWptJqq BbR5ALnqShNs79gEWj9xpYPNZjjC6IcoVRXJ1r7bCFlmzPbE4ovJFYUAew6crEOX LD6dvt06PBKnWpCbmNIc3DsYMPKel2u6ycktFWTUtrYBCG2CBCkWM0fw/vSUT7/3 DvhJUcpTnwBYPsmHGecyNu7KB+C8ypM= -----END CERTIFICATE-----Generated at Tue Jul 1 22:45:33 2025 by rpki-client