$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa File: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (raw, json) Hash identifier: mETipH2TxXUe/Cv/9Kuldi9NSAkPuDMp+V8s3vd/LuA= Subject key identifier: 23:5A:EF:C5:89:8F:72:B6:5F:09:86:EB:A9:30:0C:CA:0C:02:70:15 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584A77808650B264BB63681AF140 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 400679 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:86:50:b2:64:bb:63:68:1a:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=eb469280-c302-4736-ab5d-d3eb25b01d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:bd:47:1b:3e:9c:51:11:e9:98:76:9a:52: 49:4c:dc:56:ed:03:15:d0:18:fc:cb:4a:9d:23:9e: 38:cc:89:f4:f8:3b:e6:27:fe:1e:60:63:ec:8b:3b: 8d:0c:03:db:07:f7:74:e3:02:eb:a2:0e:c9:fa:20: ce:68:30:db:f1:3f:a2:80:53:b8:7f:2f:68:d3:95: aa:3a:72:7b:1f:5a:f3:6a:73:76:05:12:34:ea:ae: 72:3a:12:3c:81:ca:d3:2e:f9:6d:c0:c3:d4:39:75: 66:37:9f:54:31:11:33:26:88:24:db:58:7f:87:cb: f4:4e:37:c9:33:91:62:60:ba:16:a4:9b:9e:49:cf: b8:7b:53:9f:ff:e5:e5:e6:78:a8:72:b1:57:47:a9: 0d:b9:0a:e5:97:0c:b5:2e:6f:da:2d:e7:5a:4b:ef: e0:bd:06:9c:a1:e7:65:ad:b6:39:82:fe:a7:56:39: 82:f7:01:5c:a1:56:bc:5e:c9:95:43:e8:a6:7a:7d: 52:c1:32:e1:4c:7e:96:a5:17:43:96:fc:da:55:d8: 69:ae:17:eb:64:15:67:ba:06:e1:58:eb:fb:b8:52: 88:66:80:ff:77:01:95:d8:17:f6:f7:93:c9:9f:54: f4:9d:cc:66:74:b0:86:8f:a5:a1:80:27:fb:cd:22: 54:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5A:EF:C5:89:8F:72:B6:5F:09:86:EB:A9:30:0C:CA:0C:02:70:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:49:02:bb:e1:da:f9:b0:7c:ee:11:30:82:86:fb:ac:ad:0a: ea:06:a7:f8:52:ee:2a:fc:ef:f7:8f:b0:a8:8c:c4:43:8d:22: f7:3f:56:00:c0:7b:36:58:02:70:7e:e7:03:20:98:7c:e4:b7: cb:e6:0e:bc:b4:e2:4f:39:96:43:61:34:84:6a:87:ad:f2:5b: 39:12:72:6d:c4:05:e0:ab:77:90:e4:0b:e0:83:fb:4b:d8:26: 09:8f:5d:9c:02:43:23:cc:2c:fe:9b:5e:75:23:90:2e:b2:7a: 22:68:9e:cb:53:d1:05:a6:b3:ae:2c:5a:ba:6e:da:ce:a2:d7: 28:e9:11:ac:5c:22:5f:87:14:eb:b8:62:7d:01:7e:50:e8:5a: 38:64:7c:ee:6e:e2:b9:28:e0:5f:6b:59:27:36:09:24:ec:38: 4f:97:30:fe:57:5f:01:a4:08:19:33:34:ce:dd:da:3e:ce:ad: 83:ca:46:93:9b:7f:f5:98:0f:a2:d1:36:fd:ae:32:92:ce:3b: e9:df:dc:75:40:59:b6:01:d4:d8:32:60:b1:09:24:4d:d2:45: 04:f2:e0:cd:33:45:1e:ab:57:44:e6:c0:0f:6b:5e:84:b3:e1: a2:ec:94:80:d5:08:9f:b2:1a:b9:b9:7b:22:a5:85:00:0e:76: df:70:7f:91 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEp3gIZQsmS7Y2ga8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZWI0NjkyODAtYzMwMi00NzM2LWFiNWQtZDNlYjI1YjAxZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAa9Rxs+nFER6Zh2mlJJTNxW7QMV0Bj8y0qd I544zIn0+DvmJ/4eYGPsizuNDAPbB/d04wLrog7J+iDOaDDb8T+igFO4fy9o05Wq OnJ7H1rzanN2BRI06q5yOhI8gcrTLvltwMPUOXVmN59UMREzJogk21h/h8v0TjfJ M5FiYLoWpJueSc+4e1Of/+Xl5niocrFXR6kNuQrllwy1Lm/aLedaS+/gvQacoedl rbY5gv6nVjmC9wFcoVa8XsmVQ+imen1SwTLhTH6WpRdDlvzaVdhprhfrZBVnugbh WOv7uFKIZoD/dwGV2Bf295PJn1T0ncxmdLCGj6WhgCf7zSJUIwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCNa78WJj3K2XwmG66kwDMoMAnAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmYxZWEwZDAtYzZjMy0z YmRmLWEyMGMtYThhOTM5NTUxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlSQK74dr5sHzuETCChvusrQrqBqf4Uu4q /O/3j7CojMRDjSL3P1YAwHs2WAJwfucDIJh85LfL5g68tOJPOZZDYTSEaoet8ls5 EnJtxAXgq3eQ5Avgg/tL2CYJj12cAkMjzCz+m151I5AusnoiaJ7LU9EFprOuLFq6 btrOotco6RGsXCJfhxTruGJ9AX5Q6Fo4ZHzubuK5KOBfa1knNgkk7DhPlzD+V18B pAgZMzTO3do+zq2DykaTm3/1mA+i0Tb9rjKSzjvp39x1QFm2AdTYMmCxCSRN0kUE 8uDNM0Ueq1dE5sAPa16Es+Gi7JSA1Qifshq5uXsipYUADnbfcH+R -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:59 2025 by rpki-client