$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa File: 240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa (raw, json) Hash identifier: ebOr+JMGUbd0zQOKjgZaCBRpdvneeSNZXIL9+0XBFdY= Subject key identifier: 33:BB:11:EF:E9:15:62:F7:68:18:5E:2E:A1:40:10:6D:20:3C:B7:36 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584A5CFDECD06DB66D5D903F7A00 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 40509 IP address blocks: 204.8.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:ec:d0:6d:b6:6d:5d:90:3f:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=a39bc8c5-7307-44f6-88e7-8da9d05ac138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:a5:91:91:02:d8:2c:77:8d:c0:74:e2:79: 88:02:8c:57:90:b1:af:5a:dd:dd:4c:43:e2:14:97: ef:4e:09:7c:aa:d0:b4:7c:eb:e5:f0:ce:78:f5:f5: 02:6b:5f:44:ed:64:00:d3:2d:50:3c:da:b1:3f:66: d8:60:e4:56:e8:92:91:4d:7f:e3:af:f8:87:a1:d9: 17:eb:60:b0:36:0a:c3:48:86:86:61:e6:4d:ac:c2: c2:88:6e:aa:03:b2:e9:ab:35:e4:38:3e:ae:52:ae: c3:2c:31:11:95:6c:1d:fd:a2:4f:f4:7c:4d:86:5d: 54:23:cd:ed:05:d0:ae:89:30:24:1c:94:67:44:f7: d9:c8:0d:06:57:45:0e:69:8a:32:dc:32:b4:fb:00: 7e:c4:69:f4:7f:bb:0b:0c:2b:14:04:b8:f0:b6:b2: 79:80:9a:d6:9f:80:12:59:24:14:65:83:91:85:42: 75:dc:ec:11:7c:fe:1b:d2:4f:fe:ff:64:61:ec:90: 48:66:e8:a4:06:71:a5:f0:44:e0:90:e8:2e:6d:51: ed:4a:dd:08:a6:27:80:ee:f4:34:8d:d3:b3:21:23: 16:3b:83:a7:ef:d9:39:e1:86:28:3d:ad:0e:7a:d6: a2:ed:b4:52:72:14:38:a1:be:c7:8a:b7:98:da:4f: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BB:11:EF:E9:15:62:F7:68:18:5E:2E:A1:40:10:6D:20:3C:B7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 204.8.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:16:15:e2:e8:a0:66:30:e4:39:3d:43:53:6d:5e:0a:08:a0: a7:64:30:14:2b:a8:cf:70:22:ff:1a:f8:a1:72:e2:05:3b:64: b8:cf:a5:5e:2c:e8:7d:57:fe:9b:7e:49:e7:9b:7c:ab:25:aa: a1:fc:db:41:41:74:ab:2e:b5:82:4d:e9:31:8e:8f:ad:1e:94: 24:19:7d:c4:27:6a:7b:4a:e9:27:6b:a1:54:56:7f:44:fd:c6: 82:7b:7f:6a:fe:a4:15:02:19:50:fc:19:8b:3a:84:fd:f1:1b: 8a:e3:4b:0b:68:10:dc:e7:73:30:1d:c4:48:5f:bf:7a:4d:15: 11:d4:de:8f:96:eb:3b:e5:50:1d:af:56:f3:a7:ff:5a:8d:7b: 16:0b:a7:ed:98:5e:a2:28:3b:89:7f:e0:bd:9a:08:18:27:ce: 2f:6a:4f:df:2d:ec:d8:15:c5:3b:9a:72:fb:7b:4d:71:e8:26: 14:85:73:8b:fa:64:55:73:b9:4c:be:87:2b:af:e5:5a:b6:1d: f3:f9:0b:42:f5:15:83:59:da:e7:ac:4f:7a:af:43:06:4b:2e: 82:9d:cb:14:10:9f:f2:c1:de:a7:f1:c1:1a:4a:cb:03:a5:c2: 5c:b1:c7:0b:f5:b5:b4:42:05:00:f0:9d:e6:14:a0:52:68:c6: ff:80:e4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/ezQbbZtXZA/egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YTM5YmM4YzUtNzMwNy00NGY2LTg4ZTctOGRhOWQwNWFjMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2ilkZEC2Cx3jcB04nmIAoxXkLGvWt3dTEPi FJfvTgl8qtC0fOvl8M549fUCa19E7WQA0y1QPNqxP2bYYORW6JKRTX/jr/iHodkX 62CwNgrDSIaGYeZNrMLCiG6qA7LpqzXkOD6uUq7DLDERlWwd/aJP9HxNhl1UI83t BdCuiTAkHJRnRPfZyA0GV0UOaYoy3DK0+wB+xGn0f7sLDCsUBLjwtrJ5gJrWn4AS WSQUZYORhUJ13OwRfP4b0k/+/2Rh7JBIZuikBnGl8ETgkOgubVHtSt0IpieA7vQ0 jdOzISMWO4On79k54YYoPa0Oetai7bRSchQ4ob7HireY2k+HwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO7Ee/pFWL3aBheLqFAEG0gPLc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjQwYmU2YWYtYWFkZi0z ZjI0LWJlYmUtOWVhMzhhMGE2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkWFeLooGYw5Dk9Q1NtXgoIoKdkMBQrqM9wIv8a+KFy4gU7ZLjPpV4s 6H1X/pt+SeebfKslqqH820FBdKsutYJN6TGOj60elCQZfcQnantK6SdroVRWf0T9 xoJ7f2r+pBUCGVD8GYs6hP3xG4rjSwtoENznczAdxEhfv3pNFRHU3o+W6zvlUB2v VvOn/1qNexYLp+2YXqIoO4l/4L2aCBgnzi9qT98t7NgVxTuacvt7TXHoJhSFc4v6 ZFVzuUy+hyuv5Vq2HfP5C0L1FYNZ2uesT3qvQwZLLoKdyxQQn/LB3qfxwRpKywOl wlyxxwv1tbRCBQDwneYUoFJoxv+A5MU= -----END CERTIFICATE-----Generated at Sat Jul 5 10:56:33 2025 by rpki-client