$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa File: cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa (raw, json) Hash identifier: qPC4mWTXGdsONvyCeONN8HKyf9Nn7wd1dWrrjDLPZxI= Subject key identifier: 5F:65:08:3B:0A:3D:DC:2E:59:24:47:80:9E:57:63:96:CA:EC:B6:D7 Certificate issuer: /CN=ef573c37-3920-4b85-b5ca-50707eefe4b3 Certificate serial: 010D0C9F4328584A62909FD38B53321B0DABEBD8 Authority key identifier: AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 25617 IP address blocks: 204.9.32.0/24 maxlen: 24 204.9.33.0/24 maxlen: 24 204.9.34.0/24 maxlen: 24 204.9.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9f:d3:8b:53:32:1b:0d:ab:eb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef573c37-3920-4b85-b5ca-50707eefe4b3 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=d19ae28b-78a6-4635-9ce9-cf28e2e621dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:b2:78:3a:9b:e7:a3:63:21:99:82:96:e1: 4a:54:e1:37:7e:f3:01:ab:c3:87:8c:b2:e4:e7:e7: d1:94:c2:f2:a2:b8:f5:38:e1:43:b0:bf:34:c1:da: 72:26:75:f6:1c:41:9f:95:be:14:86:db:9f:3a:6f: 10:05:35:f4:d4:b9:9b:ec:4d:0a:ec:1f:4e:82:2d: 03:e2:eb:ce:a2:7b:2e:4b:56:66:de:20:e6:f9:d0: e8:c6:bf:08:99:4d:0c:0b:78:cc:45:6e:db:90:4b: 37:b7:6b:ff:65:6b:11:fb:08:85:38:a3:28:fc:cc: 86:71:b3:47:ea:55:19:bb:e4:bf:fb:47:7d:63:42: ee:ed:40:fc:15:5b:2c:dd:a1:e5:f4:be:65:ad:d8: ff:fa:b1:81:0b:4c:16:63:64:0a:65:17:40:36:02: ea:fa:c7:61:b4:d9:ea:31:1d:64:8d:9d:41:f8:76: 1b:5e:38:a5:99:6c:96:4f:fa:84:74:bc:08:40:70: dc:00:60:c4:74:1b:2f:a4:cc:01:59:05:54:96:bc: bf:3f:3f:24:48:45:66:6b:c3:57:62:1c:2f:75:f5: a3:a3:1b:03:25:4e:35:6c:a6:c7:50:76:03:d3:e2: 6d:71:b7:78:53:b7:f7:d3:9f:79:05:c1:fe:2c:0b: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:65:08:3B:0A:3D:DC:2E:59:24:47:80:9E:57:63:96:CA:EC:B6:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl X509v3 Authority Key Identifier: keyid:AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer sbgp-ipAddrBlock: critical IPv4: 204.9.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:00:2d:3b:e3:8b:e8:dd:15:99:1f:40:67:a4:17:d1:7d:c9: 72:4f:49:84:84:a9:57:67:03:8c:c6:1d:11:c3:df:83:27:8e: b8:82:26:bc:d0:26:16:05:ca:84:f5:93:dd:b9:28:a8:2a:83: 8e:0b:01:b7:36:54:4d:b6:5f:ed:82:c4:39:89:c1:18:a7:42: 4d:86:18:44:c0:8e:b7:cd:02:6e:e5:a1:d5:f1:ae:02:72:6e: c2:da:f0:cd:b9:f5:eb:c9:fe:65:85:6b:4d:e2:7e:b4:b8:9e: 65:c8:de:da:bc:11:0b:5f:2b:9d:c7:c1:5b:b1:d4:09:f5:8e: ca:83:76:9f:d3:ab:d3:29:d1:8c:60:90:18:7d:9c:48:02:d4: 32:c6:3a:10:6d:cb:f1:32:8a:86:0b:f1:f5:16:78:49:33:b3: d1:a7:06:d4:13:97:1b:44:82:0a:72:ef:3a:56:93:c5:53:53: 59:7a:d6:9b:13:ae:11:f0:fc:ad:79:db:95:a7:e4:1c:a5:df: 15:fb:e5:28:df:2a:9c:f8:db:e7:03:cf:a4:46:74:fb:85:e8: f6:f4:9e:f9:fd:b3:06:b2:b1:af:76:67:8d:8d:83:3c:e3:20: 9e:c6:a6:7b:5f:0f:d6:2f:1a:51:f8:3d:5b:20:21:44:f6:fd: 9b:4a:f0:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ/Ti1MyGw2r69gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1NzNjMzctMzkyMC00Yjg1LWI1Y2EtNTA3MDdlZWZl NGIzMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDE5YWUyOGItNzhhNi00NjM1LTljZTktY2YyOGUyZTYyMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TOyeDqb56NjIZmCluFKVOE3fvMBq8OHjLLk 5+fRlMLyorj1OOFDsL80wdpyJnX2HEGflb4UhtufOm8QBTX01Lmb7E0K7B9Ogi0D 4uvOonsuS1Zm3iDm+dDoxr8ImU0MC3jMRW7bkEs3t2v/ZWsR+wiFOKMo/MyGcbNH 6lUZu+S/+0d9Y0Lu7UD8FVss3aHl9L5lrdj/+rGBC0wWY2QKZRdANgLq+sdhtNnq MR1kjZ1B+HYbXjilmWyWT/qEdLwIQHDcAGDEdBsvpMwBWQVUlry/Pz8kSEVma8NX YhwvdfWjoxsDJU41bKbHUHYD0+Jtcbd4U7f30595BcH+LAtmnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9lCDsKPdwuWSRHgJ5XY5bK7LbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3 M2MzNy0zOTIwLTRiODUtYjVjYS01MDcwN2VlZmU0YjMvY2JmODQ5NDktNWE0MS0z YWFiLWI2ZjktZjk2YjU5NmRkM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWY1NzNjMzctMzkyMC00Yjg1LWI1 Y2EtNTA3MDdlZWZlNGIzL2VmNTczYzM3LTM5MjAtNGI4NS1iNWNhLTUwNzA3ZWVm ZTRiMy5jcmwwHwYDVR0jBBgwFoAUqlGXAopqaIABm+jS6NlGUMvdY98wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3M2MzNy0zOTIwLTRiODUtYjVjYS01MDcw N2VlZmU0YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQALTvji+jdFZkfQGekF9F9yXJPSYSEqVdnA4zGHRHD34MnjriCJrzQ JhYFyoT1k925KKgqg44LAbc2VE22X+2CxDmJwRinQk2GGETAjrfNAm7lodXxrgJy bsLa8M259evJ/mWFa03ifrS4nmXI3tq8EQtfK53HwVux1An1jsqDdp/Tq9Mp0Yxg kBh9nEgC1DLGOhBty/EyioYL8fUWeEkzs9GnBtQTlxtEggpy7zpWk8VTU1l61psT rhHw/K1525Wn5Byl3xX75SjfKpz42+cDz6RGdPuF6Pb0nvn9swaysa92Z42Ngzzj IJ7GpntfD9YvGlH4PVsgIUT2/ZtK8DY= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:16 2025 by rpki-client