$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa File: 99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa (raw, json) Hash identifier: Nalp4qjGe97dtB1yh9v7scl0IGVbtadAOgdM2WfAtFk= Subject key identifier: AC:46:D9:48:DE:D6:45:94:8C:2D:15:7A:81:F1:02:96:80:35:DE:23 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F43285849D85FA904DAE100F3D93C6280 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 8014 IP address blocks: 204.236.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a9:04:da:e1:00:f3:d9:3c:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=62fd7ce6-a3ca-4e15-bf42-36966608407e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:bc:a2:07:7c:86:1b:41:87:d7:f3:c0:2f: a6:13:86:8f:ed:cb:27:4c:0c:09:35:45:06:f2:c1: d1:57:f4:ac:03:3a:00:80:86:48:70:6f:a6:90:0c: 70:55:b2:df:ec:c4:f1:4a:f7:25:6b:44:79:cd:56: f5:25:4f:49:c2:a0:e6:75:27:04:27:49:71:3d:d4: 52:d7:5c:f8:c9:23:48:44:ab:a2:55:35:7f:1b:cf: ca:c4:70:18:b4:ed:36:0d:af:37:6d:ac:23:1e:42: a4:07:03:9b:79:86:64:cf:37:c5:da:14:91:26:5f: a5:e1:45:06:8a:5c:2b:95:68:b1:cf:fd:9a:70:84: 3c:2f:46:93:94:09:50:87:d4:0c:6e:86:26:6b:57: 36:2b:4c:11:50:36:1d:df:6e:1e:7e:3e:db:e7:96: 03:88:9d:35:fa:3b:e1:b0:56:c8:e3:8b:22:5a:7d: b6:8e:84:57:ed:1c:05:81:07:15:0e:87:d7:9e:33: fd:2f:8b:3b:02:50:9b:e1:7b:9a:a4:74:d4:3e:1f: 51:7c:b1:18:03:ec:41:c8:c4:18:84:ab:2e:53:9b: 60:e0:1a:3d:70:20:75:9e:80:fc:b8:e5:b7:36:70: 97:cf:60:af:00:f4:a1:70:1a:ac:6b:c3:d0:e9:cc: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:46:D9:48:DE:D6:45:94:8C:2D:15:7A:81:F1:02:96:80:35:DE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:7f:82:1d:f7:c9:d6:a6:20:cd:0a:10:f3:fb:ae:e3:ed:13: 59:ac:7e:a9:43:df:41:d8:c6:de:c8:de:78:14:22:78:ce:ad: 90:a6:44:aa:21:f3:5e:10:8b:e7:5c:6a:76:55:66:32:2f:ef: d1:0c:50:85:3c:b6:61:70:4c:ac:ed:10:ad:8e:42:88:25:a5: 09:09:c9:ff:cd:89:e4:f2:9c:a0:bf:e1:3b:8c:f6:a1:06:82: 16:11:20:b3:eb:1e:52:9f:cd:76:28:a2:ea:07:77:68:6c:88: 93:3e:b9:49:72:55:6c:88:00:b8:34:0b:18:a1:af:15:9c:15: 3a:28:c6:14:8a:f5:10:01:ac:9e:9d:d6:0c:7a:13:85:75:42: 6b:e0:6b:da:b4:9a:c3:f9:6e:7e:69:38:a6:06:74:ee:4c:20: 3b:a9:4b:3b:6a:70:36:07:fd:47:87:ab:5d:33:c8:92:28:f5: 86:70:5e:93:43:54:c4:37:83:94:69:ec:1b:fe:43:89:b2:e0: b0:65:c9:aa:11:62:60:c1:f2:b8:35:ed:00:0d:ee:45:c2:e4: 2f:ee:18:58:9c:9d:e8:aa:23:37:97:8d:0e:57:91:02:08:24: 07:22:aa:8f:52:04:c0:2a:6b:8e:f6:1f:48:e5:e3:4c:0d:ca: 14:b6:f0:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6kE2uEA89k8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NjJmZDdjZTYtYTNjYS00ZTE1LWJmNDItMzY5NjY2MDg0MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmO8ogd8hhtBh9fzwC+mE4aP7csnTAwJNUUG 8sHRV/SsAzoAgIZIcG+mkAxwVbLf7MTxSvcla0R5zVb1JU9JwqDmdScEJ0lxPdRS 11z4ySNIRKuiVTV/G8/KxHAYtO02Da83bawjHkKkBwObeYZkzzfF2hSRJl+l4UUG ilwrlWixz/2acIQ8L0aTlAlQh9QMboYma1c2K0wRUDYd324efj7b55YDiJ01+jvh sFbI44siWn22joRX7RwFgQcVDofXnjP9L4s7AlCb4XuapHTUPh9RfLEYA+xByMQY hKsuU5tg4Bo9cCB1noD8uOW3NnCXz2CvAPShcBqsa8PQ6cxlxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxG2Uje1kWUjC0VeoHxApaANd4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOTlhNTFiYTctMjM5NS0z MDEzLTk4ZTgtNWRiY2IwNTlhOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl/gh33ydamIM0KEPP7ruPtE1msfqlD30HYxt7I3ngUInjOrZCmRKoh 814Qi+dcanZVZjIv79EMUIU8tmFwTKztEK2OQoglpQkJyf/NieTynKC/4TuM9qEG ghYRILPrHlKfzXYoouoHd2hsiJM+uUlyVWyIALg0CxihrxWcFTooxhSK9RABrJ6d 1gx6E4V1Qmvga9q0msP5bn5pOKYGdO5MIDupSztqcDYH/UeHq10zyJIo9YZwXpND VMQ3g5Rp7Bv+Q4my4LBlyaoRYmDB8rg17QAN7kXC5C/uGFicneiqIzeXjQ5XkQII JAciqo9SBMAqa472H0jl40wNyhS28Ok= -----END CERTIFICATE-----Generated at Mon Jun 30 21:41:09 2025 by rpki-client