$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa File: 4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa (raw, json) Hash identifier: ZjQtr9OWMgv9bNaOpKUEHNryYieW5k/XiqTs3aeG06Q= Subject key identifier: BC:D9:AE:1D:8E:F6:6D:FC:53:78:A4:D2:CB:7B:5A:C2:13:E9:B2:55 Certificate issuer: /CN=5dc12714-5247-41c5-b244-d0edceb32982 Certificate serial: 010D0C9F43285849A784C48234AB6B4C92BCAD00 Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 18619 IP address blocks: 206.166.213.0/24 maxlen: 24 209.237.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c4:82:34:ab:6b:4c:92:bc:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e3d19b03-cdf3-4cf9-b726-f2720de2e310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:44:11:2b:79:26:7d:3b:3c:67:28:36:d3:2b: 35:50:c7:34:0b:6b:db:f4:1e:ba:47:61:63:6a:c1: 66:0c:c4:8d:b8:3f:3a:7c:da:1e:36:9f:fa:cc:6f: 65:0a:f1:e8:5f:0f:86:10:e8:1b:7f:9e:bf:1f:46: db:da:25:7a:c6:99:14:f8:78:83:88:0a:12:00:95: f3:e4:08:3b:55:60:17:87:64:1c:7c:98:14:e9:24: 76:12:c7:af:2a:14:7e:35:9a:97:84:4f:d7:c5:86: 19:76:44:9c:fd:38:95:15:9f:dd:6c:19:97:9a:fa: cf:a4:df:c0:b1:dc:8f:7d:79:ca:11:36:4f:58:a6: a4:18:cb:90:49:b5:4f:b7:e3:7c:b3:b5:22:56:38: 5f:21:02:39:3e:a7:29:ac:85:e2:25:17:12:4a:c8: 09:46:c6:48:09:d5:ae:5a:d0:06:c0:6b:0b:6f:ab: 52:60:02:33:4e:31:08:44:5c:68:61:ad:24:6c:2f: dc:de:1d:ff:64:b7:16:30:84:a8:86:84:8a:3c:ef: 45:4e:8e:76:4c:5a:bf:a6:c2:f7:22:89:15:87:dc: 4b:08:95:d1:eb:fc:9b:ea:be:be:0d:2d:71:9b:76: b1:4e:42:d4:72:e7:3f:20:2b:8d:f2:c3:85:dc:f3: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D9:AE:1D:8E:F6:6D:FC:53:78:A4:D2:CB:7B:5A:C2:13:E9:B2:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl X509v3 Authority Key Identifier: keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer sbgp-ipAddrBlock: critical IPv4: 206.166.213.0/24 209.237.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6f:4f:7d:5b:84:17:e1:cb:c9:f0:3f:76:74:8c:50:d6:ac: c3:99:34:50:04:94:02:d3:d3:ac:5d:d9:de:cc:da:94:61:ca: f2:b7:b7:e6:48:a1:36:f7:8e:ca:46:d3:f2:b1:0f:0d:58:50: db:cf:79:48:be:00:83:55:08:d3:14:2f:2e:e2:30:63:36:22: e9:83:51:7b:23:0f:ea:c0:b6:ec:fb:25:14:7c:45:38:bc:8a: 5c:03:70:8b:6a:3a:e0:e9:3f:ed:8a:97:0e:d8:52:71:94:d8: b8:83:50:23:55:43:ca:15:59:3c:0f:ec:3c:c5:c0:bb:9e:5a: 0d:14:27:fc:5c:9b:26:b9:04:41:4b:80:85:e1:84:5a:9b:2f: ac:e1:75:a8:aa:cd:8e:5b:12:71:8a:24:1a:45:75:1b:f3:88: 09:ae:1f:62:ea:af:a4:c9:71:2a:fa:1c:a1:fb:25:7e:79:d1: ba:82:74:20:6b:6e:9f:24:03:0b:6f:cc:78:9c:29:22:16:6d: d0:9e:27:2c:5a:85:c6:0c:a7:d3:24:f3:6c:12:49:57:f9:58: 3b:fe:e5:e7:2d:0b:11:67:d6:27:6a:4c:aa:aa:ca:d1:71:e3: 27:1d:28:28:1d:4d:31:91:f8:ac:65:60:64:2e:de:eb:cf:8c: 81:f5:ae:a8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmnhMSCNKtrTJK8rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMy OTgyMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTNkMTliMDMtY2RmMy00Y2Y5LWI3MjYtZjI3MjBkZTJlMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30QRK3kmfTs8Zyg20ys1UMc0C2vb9B66R2Fj asFmDMSNuD86fNoeNp/6zG9lCvHoXw+GEOgbf56/H0bb2iV6xpkU+HiDiAoSAJXz 5Ag7VWAXh2QcfJgU6SR2EsevKhR+NZqXhE/XxYYZdkSc/TiVFZ/dbBmXmvrPpN/A sdyPfXnKETZPWKakGMuQSbVPt+N8s7UiVjhfIQI5PqcprIXiJRcSSsgJRsZICdWu WtAGwGsLb6tSYAIzTjEIRFxoYa0kbC/c3h3/ZLcWMISohoSKPO9FTo52TFq/psL3 IokVh9xLCJXR6/yb6r6+DS1xm3axTkLUcuc/ICuN8sOF3PMuUwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLzZrh2O9m38U3ik0st7WsIT6bJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZGMx MjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvNGRiNGUxY2YtNDZhNS0z YzY5LWJkOWEtOTFiOTViYmFiYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWRjMTI3MTQtNTI0Ny00MWM1LWIy NDQtZDBlZGNlYjMyOTgyLzVkYzEyNzE0LTUyNDctNDFjNS1iMjQ0LWQwZWRjZWIz Mjk4Mi5jcmwwHwYDVR0jBBgwFoAUHfJlXfqmlOL4XwL9Qx2u11OXGlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVk Y2ViMzI5ODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqbVAwQA 0e2ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA9vT31bhBfhy8nwP3Z0jFDWrMOZNFAElALT06xd2d7M2pRh yvK3t+ZIoTb3jspG0/KxDw1YUNvPeUi+AINVCNMULy7iMGM2IumDUXsjD+rAtuz7 JRR8RTi8ilwDcItqOuDpP+2Klw7YUnGU2LiDUCNVQ8oVWTwP7DzFwLueWg0UJ/xc mya5BEFLgIXhhFqbL6zhdaiqzY5bEnGKJBpFdRvziAmuH2Lqr6TJcSr6HKH7JX55 0bqCdCBrbp8kAwtvzHicKSIWbdCeJyxahcYMp9Mk82wSSVf5WDv+5ectCxFn1idq TKqqytFx4ycdKCgdTTGR+KxlYGQu3uvPjIH1rqg= -----END CERTIFICATE-----Generated at Wed Jun 18 15:48:33 2025 by rpki-client