$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa File: aaf1c443-fe8e-397a-9abb-97486c685ca2.roa (raw, json) Hash identifier: lI7vprFjzwhq8YyY/UbPftYO+BSqnIf97ym5OSkRr/w= Subject key identifier: D6:52:69:4A:7B:E3:FE:8E:F5:63:4E:6D:D5:94:F8:E0:95:C6:54:6D Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A2EEABB0035F748CB67539E80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 21947 IP address blocks: 204.11.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:bb:00:35:f7:48:cb:67:53:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=63382aa7-2ac0-4952-ab36-600d52a4ba7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:b4:b1:99:74:bd:30:e8:77:74:cf:a5:9b: 1c:50:63:05:39:25:90:4e:e1:03:5b:f5:9d:87:97: ee:dc:84:fe:aa:67:27:7f:f7:7c:60:df:60:a7:21: 34:32:16:ea:02:c3:c7:4a:76:56:74:d9:06:94:f2: b6:2d:5c:24:60:37:9c:8e:25:c0:ac:ec:75:b9:12: 52:35:3b:88:ab:b2:51:d1:d7:ab:2f:00:66:de:bd: ef:9d:96:fe:fa:8b:64:c1:72:36:7d:2e:d5:f4:fb: a5:4b:9f:56:e0:6b:12:cc:c0:d7:2e:cd:5d:d9:8b: be:7c:59:de:19:58:8b:a5:55:b3:b7:8b:5f:82:fd: d6:e9:5e:d7:7b:d5:25:b7:ea:c2:84:49:e8:2d:9c: 18:23:29:8b:11:79:d4:d2:3e:b1:3a:0e:11:9b:ce: 61:91:3b:e1:f9:f3:8a:7c:e9:ed:fb:d2:8f:b0:24: bd:a4:f5:87:a1:6e:c9:18:94:00:7b:84:56:57:c0: bf:8a:a4:4c:60:b8:5f:06:50:66:5f:22:1a:92:4a: d1:02:48:f9:dd:32:75:77:aa:8c:32:ae:b4:bc:ac: c5:0a:93:e3:7e:d4:11:f6:6c:78:ed:45:e1:19:4b: a6:b3:14:da:70:01:72:5f:e9:d8:e4:37:ec:06:cf: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:52:69:4A:7B:E3:FE:8E:F5:63:4E:6D:D5:94:F8:E0:95:C6:54:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a0:80:72:d4:16:69:ea:13:41:c0:e4:f1:3b:9f:9f:71:5d: e4:30:33:8f:34:10:fd:ee:61:f7:61:56:99:e0:b1:a2:4b:64: 4c:1d:a7:18:c7:bd:26:56:84:9d:61:29:c0:52:76:59:1b:b2: 9a:a7:21:a0:e2:84:bf:03:1a:57:ce:17:4b:1b:ca:fc:52:f7: 7d:90:87:59:51:a9:13:3d:36:19:55:1a:2e:da:4d:de:73:a3: e3:66:d7:14:75:a8:ad:95:f9:d8:c7:8e:55:c5:67:23:3c:95: 39:14:c7:4a:1a:53:d0:69:49:dd:74:f9:f0:fd:6d:36:8a:cb: 18:b7:5d:64:bf:8e:6e:81:73:a5:1a:1b:32:7b:bd:55:f3:f6: 9c:c0:69:c6:1c:42:37:07:f1:89:14:8a:2e:af:41:90:9e:dc: 73:b9:b9:d0:ae:e1:b7:e5:07:a1:7a:37:e8:50:84:fc:82:c0: 81:e8:ca:d1:98:1a:dd:0f:7f:57:38:14:e5:c8:c2:d2:26:a5: c9:37:40:58:85:35:d7:14:01:85:71:88:20:a6:08:d5:29:a2: e8:16:f4:0a:ba:06:46:09:de:0e:1c:a6:31:3b:17:39:8b:18: 79:c5:6f:10:fc:c9:63:74:68:16:a3:29:17:20:f9:33:72:bb: 9a:9c:05:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6rsANfdIy2dTnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk NjMzODJhYTctMmFjMC00OTUyLWFiMzYtNjAwZDUyYTRiYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUK0sZl0vTDod3TPpZscUGMFOSWQTuEDW/Wd h5fu3IT+qmcnf/d8YN9gpyE0MhbqAsPHSnZWdNkGlPK2LVwkYDecjiXArOx1uRJS NTuIq7JR0derLwBm3r3vnZb++otkwXI2fS7V9PulS59W4GsSzMDXLs1d2Yu+fFne GViLpVWzt4tfgv3W6V7Xe9Ult+rChEnoLZwYIymLEXnU0j6xOg4Rm85hkTvh+fOK fOnt+9KPsCS9pPWHoW7JGJQAe4RWV8C/iqRMYLhfBlBmXyIakkrRAkj53TJ1d6qM Mq60vKzFCpPjftQR9mx47UXhGUumsxTacAFyX+nY5DfsBs+hZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZSaUp74/6O9WNObdWU+OCVxlRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYWFmMWM0NDMtZmU4ZS0z OTdhLTlhYmItOTc0ODZjNjg1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmggHLUFmnqE0HA5PE7n59xXeQwM480EP3uYfdhVpngsaJLZEwdpxjH vSZWhJ1hKcBSdlkbspqnIaDihL8DGlfOF0sbyvxS932Qh1lRqRM9NhlVGi7aTd5z o+Nm1xR1qK2V+djHjlXFZyM8lTkUx0oaU9BpSd10+fD9bTaKyxi3XWS/jm6Bc6Ua GzJ7vVXz9pzAacYcQjcH8YkUii6vQZCe3HO5udCu4bflB6F6N+hQhPyCwIHoytGY Gt0Pf1c4FOXIwtImpck3QFiFNdcUAYVxiCCmCNUpougW9Aq6BkYJ3g4cpjE7FzmL GHnFbxD8yWN0aBajKRcg+TNyu5qcBU0= -----END CERTIFICATE-----Generated at Tue Jul 1 16:07:47 2025 by rpki-client