$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa File: 843d57d7-14a7-3349-a57b-8157cba92880.roa (raw, json) Hash identifier: gs3AuBFdb565+YfVLo7QoZkBEJZOfwHUIikArjmESmA= Subject key identifier: 2C:03:18:24:D4:46:80:E7:AC:D7:9C:22:1A:66:5D:79:E3:BD:01:09 Certificate issuer: /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Certificate serial: 010D0C9F4328584A58CAFAAAAEDFA44749E14700 Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 10840 IP address blocks: 204.235.48.0/21 maxlen: 21 204.235.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:fa:aa:ae:df:a4:47:49:e1:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=d11f6bc6-ffa2-4106-95ae-63f62d9653be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:81:46:99:bb:6d:88:6c:13:e6:e2:52:89: b6:b5:58:07:d4:9e:48:d7:45:58:f2:a6:7f:c9:fa: d7:87:b1:1b:5e:58:98:67:ec:88:4f:56:ae:67:61: 27:f1:ab:ef:d4:99:08:b0:6e:7d:51:0b:68:93:78: f7:bb:09:37:c8:77:e4:d5:28:ca:68:b4:5b:37:6b: 61:6b:c8:d0:27:b6:02:a7:5a:db:11:a7:8a:c1:89: 7e:a6:5f:d4:ab:9a:e1:81:d2:fd:20:f8:7f:92:de: 02:fd:6e:30:dd:ce:4b:95:09:84:93:13:bd:99:03: 2d:aa:2a:a7:93:7f:62:38:4d:55:98:ee:98:e2:a7: 9a:ec:29:b7:72:5f:70:44:b9:ca:b9:1b:e2:ea:da: 21:70:8a:4a:9c:fa:09:40:a2:c6:6d:16:de:88:e7: 03:5a:10:54:69:34:a1:b8:5e:97:21:a0:64:bd:b8: f7:b5:bc:7e:96:c2:b2:b9:50:8b:2b:94:a2:c6:36: bc:55:7e:a4:ad:6a:b4:0a:a5:98:2b:53:0a:18:99: 3d:0f:51:0f:93:23:0c:61:30:13:ee:66:f0:fc:e1: 27:b4:11:6d:68:e4:e9:49:3e:e6:a2:ba:9a:3c:ff: 85:e9:1c:d8:ad:57:25:64:89:4e:e1:fd:20:18:c9: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:03:18:24:D4:46:80:E7:AC:D7:9C:22:1A:66:5D:79:E3:BD:01:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl X509v3 Authority Key Identifier: keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer sbgp-ipAddrBlock: critical IPv4: 204.235.48.0-204.235.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:49:57:09:9f:dc:52:d0:17:72:3e:89:49:41:a1:46:22:50: 06:82:a1:d4:58:a5:dd:7a:fe:7f:d1:3b:b4:aa:0d:35:e4:b7: 8d:a0:99:81:2b:5a:92:99:d1:5b:6f:7a:27:e4:05:4f:22:6a: c5:bd:39:af:b4:e5:a4:1d:6d:d4:2c:b2:66:26:9b:7d:cc:5c: 03:2a:bd:16:97:62:a6:00:d9:7c:a3:e9:f8:9c:0e:f2:a8:1e: 1a:21:63:f0:98:ca:79:04:69:a1:70:7d:e7:f7:2e:e9:fa:5e: 4e:7a:1f:9e:44:8d:82:ac:8e:98:04:75:01:7a:ae:7f:f0:f3: 8e:b3:1b:05:bd:ca:68:73:c8:f1:47:73:39:4d:ec:08:bc:31: 91:90:88:af:3f:4f:5e:8c:f4:cd:d7:7d:24:ba:53:88:a5:f0: 81:e6:85:bc:1a:6d:cf:c5:7b:90:f0:bd:89:22:b3:65:28:84: c8:76:b8:10:64:5f:0c:ea:64:05:4e:fb:58:2e:a5:77:bf:b3: 92:54:d2:11:f1:08:90:a1:c3:a1:38:e8:17:4c:be:40:2f:9e: 53:e6:28:72:d7:38:aa:77:58:0c:a8:8f:e1:de:3b:ab:4a:59: d0:00:3b:6d:17:ce:1e:e1:97:03:d6:8d:98:9f:41:e9:ac:01: 02:52:dc:03 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEpYyvqqrt+kR0nhRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZiNDhjZTUtMjFhMy00YjYwLTliY2YtZjFlMGQ2YTQw MzE3MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZDExZjZiYzYtZmZhMi00MTA2LTk1YWUtNjNmNjJkOTY1M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07WBRpm7bYhsE+biUom2tVgH1J5I10VY8qZ/ yfrXh7EbXliYZ+yIT1auZ2En8avv1JkIsG59UQtok3j3uwk3yHfk1SjKaLRbN2th a8jQJ7YCp1rbEaeKwYl+pl/Uq5rhgdL9IPh/kt4C/W4w3c5LlQmEkxO9mQMtqiqn k39iOE1VmO6Y4qea7Cm3cl9wRLnKuRvi6tohcIpKnPoJQKLGbRbeiOcDWhBUaTSh uF6XIaBkvbj3tbx+lsKyuVCLK5Sixja8VX6krWq0CqWYK1MKGJk9D1EPkyMMYTAT 7mbw/OEntBFtaOTpST7morqaPP+F6RzYrVclZIlO4f0gGMlnuQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCwDGCTURoDnrNecIhpmXXnjvQEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0 OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZhNDAzMTcvODQzZDU3ZDctMTRhNy0z MzQ5LWE1N2ItODE1N2NiYTkyODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGZiNDhjZTUtMjFhMy00YjYwLTli Y2YtZjFlMGQ2YTQwMzE3LzBmYjQ4Y2U1LTIxYTMtNGI2MC05YmNmLWYxZTBkNmE0 MDMxNy5jcmwwHwYDVR0jBBgwFoAUSeRcJ/V6Cl/cyJrf5ya/olsFDeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUw ZDZhNDAzMTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATM6zAD BALM6zgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmUlXCZ/cUtAXcj6JSUGhRiJQBoKh1Fil3Xr+f9E7tKoN NeS3jaCZgStakpnRW296J+QFTyJqxb05r7TlpB1t1CyyZiabfcxcAyq9FpdipgDZ fKPp+JwO8qgeGiFj8JjKeQRpoXB95/cu6fpeTnofnkSNgqyOmAR1AXquf/DzjrMb Bb3KaHPI8UdzOU3sCLwxkZCIrz9PXoz0zdd9JLpTiKXwgeaFvBptz8V7kPC9iSKz ZSiEyHa4EGRfDOpkBU77WC6ld7+zklTSEfEIkKHDoTjoF0y+QC+eU+Yoctc4qndY DKiP4d47q0pZ0AA7bRfOHuGXA9aNmJ9B6awBAlLcAw== -----END CERTIFICATE-----Generated at Thu Jul 3 19:45:41 2025 by rpki-client