$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa File: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (raw, json) Hash identifier: afZeDcoOuzBQi7C1TA2cLQpZ4+gEm3ZdLg28R1knChc= Subject key identifier: 03:27:5A:70:EF:6A:52:CD:86:91:04:2F:44:0B:8F:7A:66:88:F4:3F Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584A2ABAE4B8107B80C8A6949700 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 906 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e4:b8:10:7b:80:c8:a6:94:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=4ba870aa-9dd8-487b-81d1-09b8586bcb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bd:4d:eb:0b:25:bf:0a:a0:1d:3c:fa:bc:45: 93:b8:cb:29:cb:5b:41:4c:81:08:ed:dd:e8:ce:6a: 90:56:6a:4c:fe:95:05:af:6e:ec:11:cb:63:8d:6c: a2:6d:77:e5:69:2a:59:f7:2c:cd:c2:7c:db:c9:67: 8a:3d:7d:fa:23:e5:a9:dd:c8:8f:e8:c1:55:17:e6: e3:5f:8e:a7:7d:4e:d3:61:9e:a2:ce:51:71:46:0a: 66:01:12:51:d5:20:a6:6a:cd:ab:ea:7b:19:9b:e0: aa:3f:2d:f6:7a:ed:ed:32:3f:7e:72:12:8b:4f:0b: b0:a2:93:c2:42:09:b4:bd:28:7c:4b:d7:08:31:92: f6:15:f3:ca:8d:14:4e:bb:a3:27:1f:e5:b4:3d:f8: 6c:b9:e8:36:11:e4:43:15:10:01:13:39:b0:bd:2b: 89:ee:fa:41:73:fa:5c:a6:af:98:1d:d7:8b:a9:1d: 8e:77:9a:7b:26:14:47:15:ae:c5:ec:71:11:31:8b: 06:aa:2c:40:d6:60:43:bf:28:d1:12:e4:c6:52:ca: 94:ed:87:95:73:7f:5b:b0:1f:0d:2b:37:96:dc:ef: a6:5c:a2:85:3e:93:85:9c:9b:82:85:d4:b3:92:c5: 5e:e5:5e:73:d0:4f:5f:27:c3:f9:e7:d3:bc:44:66: b0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:5A:70:EF:6A:52:CD:86:91:04:2F:44:0B:8F:7A:66:88:F4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e0:1c:18:34:f7:6d:01:96:4e:e1:ac:54:4e:fd:ff:5e:0c: a4:b9:a9:1a:82:00:27:0d:a6:c5:8d:81:41:05:07:6f:19:a9: b4:cc:24:fd:e6:13:5f:d9:e4:a8:f0:20:db:c3:67:35:91:50: df:70:9b:e8:40:d6:7f:27:16:51:4f:b0:a2:f5:7d:c2:dc:12: e1:86:4a:01:fe:d2:28:05:76:a6:5f:41:d3:9a:db:25:4c:80: 6d:c4:6f:0d:60:70:a3:8b:db:59:cd:cb:32:3f:a3:1d:80:18: 8a:4c:d4:ea:e8:87:23:7c:59:cd:f4:9b:fa:e8:d6:68:e6:de: ad:c2:0f:ca:ca:39:2c:22:76:59:72:db:70:87:89:69:46:03: c3:1b:3d:ab:81:53:86:33:3f:d3:84:71:61:e6:9a:99:6b:1d: 85:79:82:de:24:df:eb:bf:00:b2:23:0c:4e:fe:49:68:2f:f7: 6d:59:56:f5:b1:a2:4f:d8:c0:51:27:71:1d:2f:14:bf:76:c7: be:5b:23:25:ea:da:13:e9:7e:c0:2f:66:a4:88:3c:24:9f:ab: 7e:25:7c:e4:2f:d1:dc:ef:70:73:db:6f:56:27:6e:21:25:49: d3:4d:6e:8f:31:34:7e:d1:0a:7a:b0:42:42:77:d6:49:f3:85: d2:3f:41:71 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoquuS4EHuAyKaUlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NGJhODcwYWEtOWRkOC00ODdiLTgxZDEtMDliODU4NmJjYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb1N6wslvwqgHTz6vEWTuMspy1tBTIEI7d3o zmqQVmpM/pUFr27sEctjjWyibXflaSpZ9yzNwnzbyWeKPX36I+Wp3ciP6MFVF+bj X46nfU7TYZ6izlFxRgpmARJR1SCmas2r6nsZm+CqPy32eu3tMj9+chKLTwuwopPC Qgm0vSh8S9cIMZL2FfPKjRROu6MnH+W0Pfhsueg2EeRDFRABEzmwvSuJ7vpBc/pc pq+YHdeLqR2Od5p7JhRHFa7F7HERMYsGqixA1mBDvyjREuTGUsqU7YeVc39bsB8N KzeW3O+mXKKFPpOFnJuChdSzksVe5V5z0E9fJ8P559O8RGawNwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAMnWnDvalLNhpEEL0QLj3pmiPQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZjAzYTk0NDMtMTQ2OC0z ZTRlLTlmYWMtODBiYjMyNDE4ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo4BwYNPdtAZZO4axUTv3/XgykuakaggAn DabFjYFBBQdvGam0zCT95hNf2eSo8CDbw2c1kVDfcJvoQNZ/JxZRT7Ci9X3C3BLh hkoB/tIoBXamX0HTmtslTIBtxG8NYHCji9tZzcsyP6MdgBiKTNTq6IcjfFnN9Jv6 6NZo5t6twg/KyjksInZZcttwh4lpRgPDGz2rgVOGMz/ThHFh5pqZax2FeYLeJN/r vwCyIwxO/kloL/dtWVb1saJP2MBRJ3EdLxS/dse+WyMl6toT6X7AL2akiDwkn6t+ JXzkL9Hc73Bz229WJ24hJUnTTW6PMTR+0Qp6sEJCd9ZJ84XSP0Fx -----END CERTIFICATE-----Generated at Mon Jun 16 13:34:32 2025 by rpki-client