$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a19e1161-bd7d-3b96-b7b5-a78950ed2e73.roa File: a19e1161-bd7d-3b96-b7b5-a78950ed2e73.roa (raw, json) Hash identifier: l6DTz0vEPO4A9YyaDtmuB/UZL8bN4y0TPAOaClGbrQM= Subject key identifier: DD:70:99:20:4C:A8:C0:D0:FF:C8:F4:CC:24:75:B7:84:0D:73:E5:80 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858498EDA622443E5BB231433FA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a19e1161-bd7d-3b96-b7b5-a78950ed2e73.roa Signing time: Thu 17 Apr 2025 16:58:38 +0000 ROA not before: Thu 17 Apr 2025 16:58:38 +0000 ROA not after: Wed 16 Jul 2025 16:58:38 +0000 asID: 215224 IP address blocks: 206.123.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:da:62:24:43:e5:bb:23:14:33:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 17 16:58:38 2025 GMT Not After : Jul 16 16:58:38 2025 GMT Subject: CN=2efef841-fb2c-4592-8d5c-219a073b3d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f9:72:56:22:d6:79:4f:29:8f:1e:08:e1:80: 4c:55:36:87:7b:59:1b:f9:b3:52:7e:b4:46:d8:40: c3:91:1a:0e:8c:32:70:8d:df:c9:79:4f:3a:f8:d6: 7e:8a:6c:88:75:98:92:aa:cd:a1:8f:19:8d:87:ee: 40:44:54:8b:53:ce:f1:b1:69:85:c8:fc:26:9e:df: 09:6a:69:2d:3c:2e:c5:57:e2:47:91:a9:3b:76:4c: 74:72:84:06:c6:23:4c:94:b3:8d:69:13:13:33:36: f1:f9:f2:33:54:39:69:eb:8f:73:4e:36:5b:32:34: fa:34:a8:7b:e1:fe:fd:92:33:36:e4:d4:bd:8f:52: fa:56:c2:8d:bc:09:58:be:2e:ff:5f:c3:da:92:50: 16:f0:f4:6b:3e:fe:df:87:83:42:78:8b:0b:83:85: ce:e4:13:5e:46:6f:09:03:b5:02:e3:1e:e6:4b:1b: 5c:08:7b:2e:33:99:59:7f:b5:24:fe:93:45:fd:8e: 40:42:8d:22:57:bc:55:94:49:5d:f6:b4:2f:18:52: 94:98:d1:4a:de:2a:bb:79:92:f7:bc:96:a0:76:b0: 70:46:18:96:26:a8:63:b9:83:68:15:7f:de:1a:a1: 76:e4:c5:80:7a:45:fa:6c:69:c3:62:2b:7f:a2:6b: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:70:99:20:4C:A8:C0:D0:FF:C8:F4:CC:24:75:B7:84:0D:73:E5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a19e1161-bd7d-3b96-b7b5-a78950ed2e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:47:78:55:54:25:32:25:49:a7:82:28:05:ae:11:e4:43:89: 4a:58:4a:75:5f:a8:79:f7:38:2d:44:51:56:b2:c9:7d:5e:19: bf:2e:8d:d7:a8:57:3f:50:ac:83:b7:5a:4b:4a:e3:6a:fd:21: 28:19:51:37:1a:6f:7b:81:3f:48:f4:5b:13:f2:7b:76:3d:72: ee:ee:e9:cc:79:bc:6e:2a:6d:99:1a:6f:8a:51:18:83:26:d6: 7b:f1:7a:26:9b:ea:ae:dd:ec:26:1c:e1:4b:a8:d4:77:f1:3f: e4:9e:b4:e0:c1:b4:56:ee:e8:e3:37:b4:9f:94:55:a7:6e:b2: 3c:22:48:58:f2:7f:b2:55:f1:4e:51:75:b2:f4:fa:df:19:d6: 26:b0:8f:85:77:d0:de:2c:37:37:d8:91:0e:d0:57:90:57:34: 05:28:35:e9:b5:0d:c4:76:09:6f:4b:1f:fe:4d:25:a8:3e:d1: 71:d9:eb:26:28:02:c5:1f:64:c8:af:f9:37:01:74:47:8d:c6: f6:b7:ca:54:29:a8:a6:56:30:49:92:c1:a4:0d:54:67:89:bc: 57:b3:4c:b0:14:a1:e7:4e:f5:25:4c:a2:9d:67:69:cd:84:64: 15:f0:8f:b6:57:10:f9:06:8e:1d:5a:b4:40:2c:79:a5:a7:20: e2:67:d7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmO2mIkQ+W7IxQz+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQxNzE2NTgzOFoXDTI1MDcxNjE2NTgzOFowLzEtMCsGA1UEAxMk MmVmZWY4NDEtZmIyYy00NTkyLThkNWMtMjE5YTA3M2IzZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/lyViLWeU8pjx4I4YBMVTaHe1kb+bNSfrRG 2EDDkRoOjDJwjd/JeU86+NZ+imyIdZiSqs2hjxmNh+5ARFSLU87xsWmFyPwmnt8J amktPC7FV+JHkak7dkx0coQGxiNMlLONaRMTMzbx+fIzVDlp649zTjZbMjT6NKh7 4f79kjM25NS9j1L6VsKNvAlYvi7/X8PaklAW8PRrPv7fh4NCeIsLg4XO5BNeRm8J A7UC4x7mSxtcCHsuM5lZf7Uk/pNF/Y5AQo0iV7xVlEld9rQvGFKUmNFK3iq7eZL3 vJagdrBwRhiWJqhjuYNoFX/eGqF25MWAekX6bGnDYit/omuSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1wmSBMqMDQ/8j0zCR1t4QNc+WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTE5ZTExNjEtYmQ3ZC0z Yjk2LWI3YjUtYTc4OTUwZWQyZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpHeFVUJTIlSaeCKAWuEeRDiUpYSnVfqHn3OC1EUVayyX1eGb8ujdeo Vz9QrIO3WktK42r9ISgZUTcab3uBP0j0WxPye3Y9cu7u6cx5vG4qbZkab4pRGIMm 1nvxeiab6q7d7CYc4Uuo1HfxP+SetODBtFbu6OM3tJ+UVadusjwiSFjyf7JV8U5R dbL0+t8Z1iawj4V30N4sNzfYkQ7QV5BXNAUoNem1DcR2CW9LH/5NJag+0XHZ6yYo AsUfZMiv+TcBdEeNxva3ylQpqKZWMEmSwaQNVGeJvFezTLAUoedO9SVMop1nac2E ZBXwj7ZXEPkGjh1atEAseaWnIOJn1xw= -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:45 2025 by rpki-client