$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa File: 3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa (raw, json) Hash identifier: /1mZAqObk1ynojVoFebWfM+jQN9wBUi/RBusvn9ErTc= Subject key identifier: 33:8A:16:76:25:BA:41:93:E8:87:1A:B8:30:6B:02:B5:4A:0E:1A:D4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A1CC55E2D527AD345CF2A1180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa Signing time: Sat 07 Jun 2025 13:01:02 +0000 ROA not before: Sat 07 Jun 2025 13:01:02 +0000 ROA not after: Fri 05 Sep 2025 13:01:02 +0000 asID: 137409 IP address blocks: 206.123.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1c:c5:5e:2d:52:7a:d3:45:cf:2a:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 7 13:01:02 2025 GMT Not After : Sep 5 13:01:02 2025 GMT Subject: CN=f2abe00d-8592-4244-beca-6ca9ffa16d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:b7:39:87:4d:ba:4a:03:44:ba:9f:36:94: 5f:0d:12:e4:38:a5:15:d5:88:c5:ff:c8:db:d9:d4: 0e:8e:d3:96:4f:2e:ce:66:02:0f:c8:21:33:57:3d: eb:5b:82:93:b5:b0:9b:75:a4:df:50:5b:56:d4:d6: 50:a3:f4:21:f8:d7:87:10:25:94:d7:2c:ec:30:d4: 97:37:c7:eb:78:00:89:6d:46:2a:dc:a1:55:9c:61: 85:b7:77:24:a5:49:2e:0a:8a:0b:35:82:e9:9d:07: fd:0f:c2:2b:9e:d0:3b:2c:a2:1d:0b:f6:52:8d:08: 1c:32:c4:ea:88:50:33:26:af:ae:a8:3c:00:a2:79: 84:24:1a:c0:5a:09:d1:27:dd:c2:0a:52:0b:3d:ce: aa:24:eb:42:7b:3d:80:ce:fd:f1:1e:8b:d4:0c:66: 4c:27:fc:ea:39:60:7b:83:de:5f:1a:ca:80:3c:6c: 4f:3a:5d:93:78:8a:4e:06:fa:5b:96:17:4d:e7:6e: 52:b1:8a:40:d3:04:77:7e:ca:7a:e7:47:2c:c9:76: 57:ca:b1:32:95:ff:1c:14:61:53:d2:f6:d3:1c:9c: d8:9d:dc:2b:b2:fa:86:80:e4:79:9d:48:eb:ff:b5: cd:e1:33:78:23:54:66:39:9c:dd:98:ec:33:f9:2a: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:16:76:25:BA:41:93:E8:87:1A:B8:30:6B:02:B5:4A:0E:1A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9e:93:c2:d8:50:d5:e8:56:6e:e7:29:65:9a:ca:0a:5b:62: 8c:e1:8f:c1:fd:39:3f:26:1d:2e:0b:79:3d:46:ca:36:f9:00: 0d:53:73:50:f0:11:db:fd:33:bb:69:26:91:3e:31:50:33:8d: 65:37:97:01:7c:1f:63:7a:9e:e2:44:c0:d5:5b:5c:58:cb:1f: 40:15:cb:05:0d:8b:0b:77:d4:89:b0:d8:a3:39:0e:48:15:3c: 9c:b4:a5:56:03:b8:97:5d:95:73:b2:44:15:81:58:73:8f:70: c8:e6:64:aa:5f:c3:bb:f2:69:00:42:89:8a:fb:85:53:ab:a6: 66:ee:71:5e:5e:76:d4:33:e6:76:45:e1:5b:9a:69:9b:1f:e3: c0:bf:4f:aa:2b:4b:19:4c:29:a4:f2:ab:ab:fd:ac:43:b0:72: 97:39:28:e4:ec:23:bf:1c:2f:86:52:98:1a:a0:f3:e0:9d:3a: 6a:ff:4c:bc:28:a6:75:5c:a4:a6:da:4a:d3:d9:28:1c:04:53: a9:87:6f:23:79:64:5c:f9:07:9d:b1:b4:bc:b1:92:10:63:85: d7:16:f7:98:33:21:9c:1e:75:66:0d:e0:d2:c0:6b:64:05:c5: 7b:5c:9b:82:e4:64:4b:87:29:d6:a4:52:62:55:4c:77:57:3f: 1c:e7:ba:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEocxV4tUnrTRc8qEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwNzEzMDEwMloXDTI1MDkwNTEzMDEwMlowLzEtMCsGA1UEAxMk ZjJhYmUwMGQtODU5Mi00MjQ0LWJlY2EtNmNhOWZmYTE2ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUy3OYdNukoDRLqfNpRfDRLkOKUV1YjF/8jb 2dQOjtOWTy7OZgIPyCEzVz3rW4KTtbCbdaTfUFtW1NZQo/Qh+NeHECWU1yzsMNSX N8freACJbUYq3KFVnGGFt3ckpUkuCooLNYLpnQf9D8IrntA7LKIdC/ZSjQgcMsTq iFAzJq+uqDwAonmEJBrAWgnRJ93CClILPc6qJOtCez2Azv3xHovUDGZMJ/zqOWB7 g95fGsqAPGxPOl2TeIpOBvpblhdN525SsYpA0wR3fsp650csyXZXyrEylf8cFGFT 0vbTHJzYndwrsvqGgOR5nUjr/7XN4TN4I1RmOZzdmOwz+Sq/1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOKFnYlukGT6IcauDBrArVKDhrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2M2NDhjMmEtMTFkZC0z YTZmLTkwOGMtYTRkMTgxNmM2OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuek8LYUNXoVm7nKWWaygpbYozhj8H9OT8mHS4LeT1Gyjb5AA1Tc1Dw Edv9M7tpJpE+MVAzjWU3lwF8H2N6nuJEwNVbXFjLH0AVywUNiwt31Imw2KM5DkgV PJy0pVYDuJddlXOyRBWBWHOPcMjmZKpfw7vyaQBCiYr7hVOrpmbucV5edtQz5nZF 4VuaaZsf48C/T6orSxlMKaTyq6v9rEOwcpc5KOTsI78cL4ZSmBqg8+CdOmr/TLwo pnVcpKbaStPZKBwEU6mHbyN5ZFz5B52xtLyxkhBjhdcW95gzIZwedWYN4NLAa2QF xXtcm4LkZEuHKdakUmJVTHdXPxznupQ= -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:09 2025 by rpki-client