$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa File: 24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa (raw, json) Hash identifier: x6fTMDtX7jfCR8TZwU85v9d0xG4z1eYf7HNwZgQ3L3I= Subject key identifier: 1E:A3:26:01:3E:58:4A:FF:9A:0E:AA:66:D4:1E:8E:27:88:CE:04:C3 Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Certificate serial: 010D0C9F43285849D85F8E96E79B21CFA65E1D80 Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 206.108.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:8e:96:e7:9b:21:cf:a6:5e:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ba8b7b7b-f51d-417c-a945-8e9b06d8d8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:f9:88:7d:56:19:fd:21:c4:44:14:23:29: a9:15:2f:e2:a7:90:eb:fd:41:c8:e6:33:d2:03:c3: 21:11:20:6c:97:3f:9a:e2:f8:04:ba:50:21:32:2b: 53:8f:4f:d7:71:76:95:02:21:67:5b:f6:bd:39:43: 7b:4b:12:65:04:c0:19:fd:fc:22:77:9b:e3:10:82: bc:23:3e:4c:bb:59:30:2b:17:5b:d9:57:d5:dd:63: 80:14:b9:b3:76:81:90:5f:fd:ce:a2:2d:e2:b6:63: 5c:00:a5:ec:78:f9:8b:aa:b6:ac:66:ba:a1:95:42: d7:9f:d1:5e:ce:bf:f8:98:d9:df:1b:59:0e:1f:9e: f1:cd:f2:38:f8:31:cd:8c:25:27:98:03:c3:42:da: 3a:a1:4c:3d:e4:52:8b:f8:11:56:bd:51:36:05:ba: 2c:41:89:cc:1a:55:b0:c0:18:64:bf:16:0a:8e:1d: 7e:fe:c4:bd:81:74:fb:83:c8:60:31:27:9d:b0:48: 4c:89:e4:6a:10:6e:b5:b3:37:31:9d:6e:ca:e2:6a: 3c:77:be:39:9a:f9:87:53:a9:ec:07:bd:46:15:7f: 79:3e:20:16:91:b3:2a:fd:29:71:2e:5c:f9:74:82: 1d:73:d5:da:ca:0d:05:8b:b8:4b:ec:dd:2e:11:80: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A3:26:01:3E:58:4A:FF:9A:0E:AA:66:D4:1E:8E:27:88:CE:04:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl X509v3 Authority Key Identifier: keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer sbgp-ipAddrBlock: critical IPv4: 206.108.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a9:92:04:7f:c9:17:94:6b:03:40:a7:ba:40:d6:da:d9:43: 8a:0f:aa:66:99:89:f0:c6:1b:59:4f:30:ca:9e:ac:8b:29:18: b0:42:a4:b1:6f:88:b0:d2:a4:ce:8c:b1:d6:be:f4:be:25:8a: c3:c8:20:47:c2:e9:fc:da:d6:5a:21:57:42:98:47:61:12:19: 5e:bb:b1:2d:f2:23:44:ab:b7:da:e2:60:44:46:30:05:7a:e7: d1:29:88:c3:84:14:57:d3:3c:15:68:3b:55:13:78:28:7c:90: 7e:1f:5d:38:07:84:c6:ee:1b:5a:89:db:84:40:c4:e0:2d:1d: 17:82:b4:13:ca:a7:d4:77:0f:86:18:c9:5e:d9:37:88:ea:72: fb:9b:90:7c:1b:77:97:e9:ac:8c:4c:c7:ed:5e:cf:fc:66:63: e3:80:3c:20:9b:20:26:df:e8:dd:be:f7:cc:75:5d:db:ea:d8: 9a:bf:98:80:97:3d:69:42:f4:74:31:15:6b:44:71:8a:07:01: 84:ba:dc:88:46:9c:d3:e1:10:80:89:67:e8:12:ca:ce:da:21: 18:ee:3f:6c:80:1f:05:6c:dc:11:fc:a5:2e:13:82:e1:3d:28: 10:f1:3c:f7:2d:13:b9:c5:f9:71:8f:04:14:1e:ca:a6:b6:da: 94:2c:97:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX46W55shz6ZeHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0 MGRmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmE4YjdiN2ItZjUxZC00MTdjLWE5NDUtOGU5YjA2ZDhkOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjz5iH1WGf0hxEQUIympFS/ip5Dr/UHI5jPS A8MhESBslz+a4vgEulAhMitTj0/XcXaVAiFnW/a9OUN7SxJlBMAZ/fwid5vjEIK8 Iz5Mu1kwKxdb2VfV3WOAFLmzdoGQX/3Ooi3itmNcAKXsePmLqrasZrqhlULXn9Fe zr/4mNnfG1kOH57xzfI4+DHNjCUnmAPDQto6oUw95FKL+BFWvVE2BbosQYnMGlWw wBhkvxYKjh1+/sS9gXT7g8hgMSedsEhMieRqEG61szcxnW7K4mo8d745mvmHU6ns B71GFX95PiAWkbMq/SlxLlz5dIIdc9Xayg0Fi7hL7N0uEYC1RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6jJgE+WEr/mg6qZtQejieIzgTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMjRjM2I0MzMtMzk0ZC0z YzRkLWJhYTEtMThiNTgxNmY3ZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzmwpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6pkgR/yReUawNAp7pA1trZQ4oPqmaZifDGG1lPMMqerIspGLBCpLFv iLDSpM6Msda+9L4lisPIIEfC6fza1lohV0KYR2ESGV67sS3yI0Srt9riYERGMAV6 59EpiMOEFFfTPBVoO1UTeCh8kH4fXTgHhMbuG1qJ24RAxOAtHReCtBPKp9R3D4YY yV7ZN4jqcvubkHwbd5fprIxMx+1ez/xmY+OAPCCbICbf6N2+98x1Xdvq2Jq/mICX PWlC9HQxFWtEcYoHAYS63IhGnNPhEICJZ+gSys7aIRjuP2yAHwVs3BH8pS4TguE9 KBDxPPctE7nF+XGPBBQeyqa22pQsl1U= -----END CERTIFICATE-----Generated at Sat Jun 14 06:29:22 2025 by rpki-client