$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa File: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (raw, json) Hash identifier: zDdSEqA0luICrSjYrcUlVjCVnuhzutRICtMgH1VinQA= Subject key identifier: 2B:30:A9:FC:8E:D6:52:91:FA:46:EC:E8:15:FB:D2:D8:EE:27:B1:2D Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584A6825E1A337B8BBB042FE0F80 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 401343 IP address blocks: 204.130.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e1:a3:37:b8:bb:b0:42:fe:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=a61f8c81-c766-4ca6-bc43-2f278f0e471c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8b:c7:39:6b:02:85:1f:8e:fe:54:54:66:ea: 41:c3:99:5b:51:cc:31:c6:6a:e3:81:4e:27:fa:51: f0:99:17:fd:80:60:1b:00:8a:d7:97:2b:a6:d4:f5: f3:6a:44:05:7e:18:e2:59:12:a1:61:d2:3f:9a:c0: b8:57:d8:64:8b:6f:1b:3f:6f:6d:7b:dd:15:16:f9: 23:6b:2a:83:31:e8:78:e0:b2:53:12:79:d0:85:eb: 04:83:d2:d6:4f:27:46:24:ee:44:ad:eb:e6:d8:1d: 61:13:ac:85:1c:4a:fc:d3:b6:9d:c0:27:a6:a3:32: 09:33:89:ac:c6:c0:bc:5f:f0:48:68:ec:c8:14:91: 67:54:cb:4a:d1:91:92:4a:a6:d0:41:09:fa:4f:a7: 29:03:79:6e:f8:90:09:cd:d1:80:4e:3e:56:54:6e: f3:84:9d:87:43:66:9c:8e:4f:33:9e:91:2a:ee:38: 2c:eb:5b:1d:01:ff:f9:99:6e:a7:ad:90:b4:6b:e7: 61:b1:7f:51:df:c7:24:e7:cc:f9:15:f1:36:38:b0: 75:7e:48:a2:df:31:05:aa:30:68:be:1d:c3:51:10: eb:0c:90:02:f3:fa:45:b7:5d:19:bc:3b:70:3a:99: 0d:31:85:a3:85:1a:2e:d8:7e:d2:22:e1:19:39:e6: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:30:A9:FC:8E:D6:52:91:FA:46:EC:E8:15:FB:D2:D8:EE:27:B1:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/341487ac-a3e5-383d-bb5e-c10826c39192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: 204.130.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:03:ad:81:98:f1:12:f5:db:43:8a:99:47:61:05:b3:6a:f5: 34:04:7c:c0:bf:ef:18:9d:86:d2:3d:6c:34:7d:d3:ea:15:4b: 14:2d:0a:41:d7:88:48:6c:cc:bb:0c:13:c0:39:b4:9a:c4:a0: 7f:60:3a:e1:9f:24:c5:a3:2c:3b:bf:cf:88:62:04:96:88:25: f0:85:9f:27:6b:de:67:ea:4f:17:0a:12:14:27:c3:44:7c:60: 95:2d:dd:40:93:0b:c3:a5:91:cf:21:ad:e1:b7:10:9b:79:a3: d4:07:d6:1e:3e:03:1d:ff:81:6b:b8:0b:16:b4:8b:1d:7f:5f: 82:73:05:ef:eb:7e:cd:f7:e7:7e:d4:99:0e:be:5c:4b:fa:14: 59:d4:3c:8f:d6:0b:fe:ee:69:0e:76:82:1c:9f:7f:1e:ec:4b: 08:c4:00:b3:8e:15:f9:0b:87:df:0f:7f:9d:d7:07:10:dd:3b: 9f:9c:a7:ef:ff:96:ac:ed:7c:de:a9:d6:82:07:fd:d8:15:98: 72:54:8f:34:17:12:62:30:74:03:49:0a:3b:4b:07:e0:c8:4b: 8d:51:45:12:f4:53:72:f0:9b:51:1b:a8:8a:97:b9:18:dd:24: 10:68:b5:01:b2:d1:dc:0f:8d:56:0c:ce:11:81:d9:8e:14:bb: ec:60:fd:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJeGjN7i7sEL+D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YTYxZjhjODEtYzc2Ni00Y2E2LWJjNDMtMmYyNzhmMGU0NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ovHOWsChR+O/lRUZupBw5lbUcwxxmrjgU4n +lHwmRf9gGAbAIrXlyum1PXzakQFfhjiWRKhYdI/msC4V9hki28bP29te90VFvkj ayqDMeh44LJTEnnQhesEg9LWTydGJO5Erevm2B1hE6yFHEr807adwCemozIJM4ms xsC8X/BIaOzIFJFnVMtK0ZGSSqbQQQn6T6cpA3lu+JAJzdGATj5WVG7zhJ2HQ2ac jk8znpEq7jgs61sdAf/5mW6nrZC0a+dhsX9R38ck58z5FfE2OLB1fkii3zEFqjBo vh3DURDrDJAC8/pFt10ZvDtwOpkNMYWjhRou2H7SIuEZOebMDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCswqfyO1lKR+kbs6BX70tjuJ7EtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvMzQxNDg3YWMtYTNlNS0z ODNkLWJiNWUtYzEwODI2YzM5MTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzILIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoDrYGY8RL120OKmUdhBbNq9TQEfMC/7xidhtI9bDR90+oVSxQtCkHX iEhszLsME8A5tJrEoH9gOuGfJMWjLDu/z4hiBJaIJfCFnydr3mfqTxcKEhQnw0R8 YJUt3UCTC8Olkc8hreG3EJt5o9QH1h4+Ax3/gWu4Cxa0ix1/X4JzBe/rfs33537U mQ6+XEv6FFnUPI/WC/7uaQ52ghyffx7sSwjEALOOFfkLh98Pf53XBxDdO5+cp+// lqztfN6p1oIH/dgVmHJUjzQXEmIwdANJCjtLB+DIS41RRRL0U3Lwm1EbqIqXuRjd JBBotQGy0dwPjVYMzhGB2Y4Uu+xg/Xs= -----END CERTIFICATE-----Generated at Fri Jul 4 18:02:18 2025 by rpki-client