$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa File: cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa (raw, json) Hash identifier: gV73COfOUcakW3HntDZvELLXpQN86b/uIg4pw10HD7M= Subject key identifier: 96:F9:47:E0:69:DF:A0:BB:F1:AF:8F:B4:20:03:38:3A:CC:43:ED:15 Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Certificate serial: 010D0C9F4328584A58CAFFE40970E79C6DF40680 Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 11399 IP address blocks: 204.225.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:ff:e4:09:70:e7:9c:6d:f4:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=7f923f37-f2df-488a-9831-abfda2b1b0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:83:2d:81:5a:52:b1:56:eb:7a:c9:7e:b5: ba:5c:e5:9d:56:bd:fd:08:26:3b:69:42:27:1c:a2: 42:8b:0f:63:0e:8d:f6:e8:77:cd:3e:7b:19:e4:f6: 8d:05:25:a0:19:33:77:43:d1:e3:96:e2:50:56:57: 67:83:89:db:e1:67:a4:80:d0:a2:9e:36:c4:d6:e8: 95:90:6c:7d:f9:fc:ac:d8:73:de:51:8c:60:c9:44: 95:8a:5f:27:27:19:7a:5b:1b:fa:2f:11:ad:ab:7f: 52:cc:68:92:42:b2:b6:3f:82:02:ad:fb:63:e5:ca: 7f:b9:dc:bb:d3:ee:c1:0f:eb:36:9f:0a:17:fb:74: 9c:7e:7d:1e:55:05:2a:34:c5:b7:3d:31:0f:fe:75: 66:f5:d0:59:9d:1c:fd:79:9e:97:c3:64:11:4b:8f: 6a:bd:74:ca:f9:fd:90:e0:e4:ca:50:51:e3:3e:89: 22:47:de:e7:cf:b4:56:ae:3e:c7:6c:db:3b:7a:0c: 3c:b1:55:93:0a:39:19:3d:a3:40:68:c8:2f:f4:97: 3a:51:91:42:23:ac:aa:77:d2:fe:ae:69:72:b7:da: e4:70:8f:ea:f6:17:cf:8f:1d:5c:05:e3:bc:f7:b6: ee:95:d4:35:76:78:38:b7:88:d9:ae:1c:0b:02:a4: 0e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F9:47:E0:69:DF:A0:BB:F1:AF:8F:B4:20:03:38:3A:CC:43:ED:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl X509v3 Authority Key Identifier: keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer sbgp-ipAddrBlock: critical IPv4: 204.225.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:0a:b5:98:f4:04:c1:b8:23:a6:9e:0e:d1:b4:4f:a3:a5:e4: 9b:c9:81:0e:ce:5f:72:fd:87:f5:30:0c:1b:57:d6:96:9c:91: d6:7e:8c:b4:af:b3:77:5b:56:e1:c0:ce:09:2e:50:10:6a:a7: a8:c8:a1:ec:00:6e:17:dd:45:3b:a2:b6:5a:6c:94:70:56:45: 36:cf:79:65:59:91:ce:2b:47:a0:0d:67:cc:92:8d:b4:77:45: 4c:3e:c6:05:5e:43:55:6a:ba:9f:3f:59:11:df:8c:0d:fd:2b: fa:03:75:db:f3:1b:b4:bc:1a:c0:dd:99:78:99:46:52:fc:0f: 6e:62:5b:ea:20:ae:93:bb:2c:b4:2b:31:c5:5a:10:38:a8:c4: 74:05:70:48:b5:77:e9:85:fe:01:93:7b:7c:e6:37:67:df:c3: b7:f0:3c:fc:da:3c:fa:02:e2:22:51:b0:a6:89:70:6d:73:8c: d5:83:6c:94:5f:3d:d2:dd:2b:75:ad:d5:c7:17:e7:d6:fb:55: e2:e3:51:22:06:10:34:25:be:bd:ea:e9:bc:42:cf:eb:ce:ca: 95:3f:f1:c5:61:d2:61:a8:c0:0f:e6:fd:0b:81:cf:da:bc:29: cb:78:fe:1d:6c:d3:e9:35:8c:91:2b:38:b3:41:bb:b0:e1:35: 9e:61:92:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyv/kCXDnnG30BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5 ZTNlMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk N2Y5MjNmMzctZjJkZi00ODhhLTk4MzEtYWJmZGEyYjFiMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoCDLYFaUrFW63rJfrW6XOWdVr39CCY7aUIn HKJCiw9jDo326HfNPnsZ5PaNBSWgGTN3Q9HjluJQVldng4nb4WekgNCinjbE1uiV kGx9+fys2HPeUYxgyUSVil8nJxl6Wxv6LxGtq39SzGiSQrK2P4ICrftj5cp/udy7 0+7BD+s2nwoX+3Scfn0eVQUqNMW3PTEP/nVm9dBZnRz9eZ6Xw2QRS49qvXTK+f2Q 4OTKUFHjPokiR97nz7RWrj7HbNs7egw8sVWTCjkZPaNAaMgv9Jc6UZFCI6yqd9L+ rmlyt9rkcI/q9hfPjx1cBeO897buldQ1dng4t4jZrhwLAqQO+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb5R+Bp36C78a+PtCADODrMQ+0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvY2RlNTU5YWUtMzZiOC0z NmJiLWFlZjItOGMwMTkwNWNiZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1 OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl ZGQ1MjllM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOGtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUKtZj0BMG4I6aeDtG0T6Ol5JvJgQ7OX3L9h/UwDBtX1packdZ+jLSv s3dbVuHAzgkuUBBqp6jIoewAbhfdRTuitlpslHBWRTbPeWVZkc4rR6ANZ8ySjbR3 RUw+xgVeQ1Vqup8/WRHfjA39K/oDddvzG7S8GsDdmXiZRlL8D25iW+ogrpO7LLQr McVaEDioxHQFcEi1d+mF/gGTe3zmN2ffw7fwPPzaPPoC4iJRsKaJcG1zjNWDbJRf PdLdK3Wt1ccX59b7VeLjUSIGEDQlvr3q6bxCz+vOypU/8cVh0mGowA/m/QuBz9q8 Kct4/h1s0+k1jJErOLNBu7DhNZ5hkuQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:28:03 2025 by rpki-client