$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/95607831-8fd4-3725-bb6b-01dee3e9b844.roa File: 95607831-8fd4-3725-bb6b-01dee3e9b844.roa (raw, json) Hash identifier: aT9TCKkO1+9xgRLswzO0Aw3rIzBUKpYJ1wOyoM0v6cQ= Subject key identifier: B0:D2:C8:4B:37:79:01:1A:57:DB:36:76:DA:45:8A:20:5E:3F:C3:D1 Certificate issuer: /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71 Certificate serial: 010D0C9F4328584A331AECED5F24781905838AC0 Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/95607831-8fd4-3725-bb6b-01dee3e9b844.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 27 IP address blocks: 206.196.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:ec:ed:5f:24:78:19:05:83:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=a0239ad7-9b60-4e78-b214-5243d39ab6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:26:8f:5e:97:98:b4:c0:d6:3b:67:cb:ca:f1: b0:d3:b1:87:69:a4:3c:8c:2d:e4:a0:22:8b:2d:93: 77:a0:ce:ff:be:60:fb:55:02:2c:eb:6c:b3:a5:1a: 28:e4:5b:82:fb:e2:5f:df:99:ca:a9:c8:c2:da:38: ac:2f:6b:58:a9:26:49:bf:13:17:4a:10:f4:34:b4: 42:bf:a1:09:05:28:88:64:d6:c5:89:22:db:52:30: e6:26:ff:c4:45:8b:8c:87:f4:d6:4a:97:db:00:b7: 98:47:24:36:a7:a0:e4:47:e6:e9:6c:e6:79:7b:dc: 70:a5:72:5d:dd:45:d1:9f:55:50:05:2c:cc:a1:3d: fe:d7:54:3e:4b:98:a5:17:2f:46:36:a8:d4:65:4c: 86:72:f3:ae:66:8e:78:79:d2:4b:75:61:7c:37:09: 0b:7a:4c:59:37:74:5d:bf:ab:71:36:76:68:55:eb: 26:c0:56:c3:a2:a3:da:d9:09:e4:10:b2:01:98:61: 5f:81:a6:71:f0:4f:83:5f:d7:3d:72:8d:f5:95:21: 00:fc:cb:1e:ff:de:47:9a:80:18:26:4f:97:3d:16: 53:0c:46:5f:f1:fb:1e:67:0f:f2:d7:9d:e5:e4:2d: ad:36:26:3e:7c:47:cb:18:43:e0:dc:06:f5:68:a9: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D2:C8:4B:37:79:01:1A:57:DB:36:76:DA:45:8A:20:5E:3F:C3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/95607831-8fd4-3725-bb6b-01dee3e9b844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl X509v3 Authority Key Identifier: keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer sbgp-ipAddrBlock: critical IPv4: 206.196.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d4:2b:f9:85:68:c7:eb:aa:c3:bf:6b:5c:f4:3c:c2:6f:ca: 1c:ac:4c:cf:bb:ab:7e:76:a1:0e:c1:b6:b7:e5:20:75:24:8b: e9:37:82:9f:f6:f7:d6:15:d8:d4:23:f7:99:c9:93:06:d1:4d: 7c:dd:af:b7:1d:8c:35:52:82:97:3b:2a:5c:99:63:70:96:76: 6b:5f:64:de:04:6a:64:5d:9c:14:7c:55:b6:95:37:fe:8b:55: e0:6e:c7:04:8b:5c:df:4b:cd:07:a5:38:94:82:8a:80:ce:97: 27:e0:e2:7b:fb:13:b7:b2:b4:8c:5a:1b:b1:53:c3:a0:30:b7: 63:3b:e2:99:31:38:19:36:b5:43:ed:89:90:0a:43:55:94:31: 61:9a:b6:03:93:c5:f0:75:53:57:8b:fe:58:57:0b:a6:55:ed: d2:1f:c2:b2:a6:09:66:d8:e7:97:f7:f1:cc:df:ac:d0:05:50: 23:ca:7f:e3:2d:52:7a:ee:1f:84:5f:a0:95:15:84:8f:c7:14: 7d:71:27:fa:11:24:ea:f9:32:c1:e1:58:90:08:01:f0:95:a7: ec:8e:a4:1b:2a:7d:ed:f9:d3:62:45:ea:cd:13:bc:67:56:74: 4b:ca:c4:11:ab:78:5d:9d:d5:2f:d7:44:7d:50:8e:6b:8a:94: f1:8f:1f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuztXyR4GQWDisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZlNWEzOGYtNWZmNC00Yjk3LWE0NTktZTI1Y2ZjOWNh YTcxMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YTAyMzlhZDctOWI2MC00ZTc4LWIyMTQtNTI0M2QzOWFiNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyaPXpeYtMDWO2fLyvGw07GHaaQ8jC3koCKL LZN3oM7/vmD7VQIs62yzpRoo5FuC++Jf35nKqcjC2jisL2tYqSZJvxMXShD0NLRC v6EJBSiIZNbFiSLbUjDmJv/ERYuMh/TWSpfbALeYRyQ2p6DkR+bpbOZ5e9xwpXJd 3UXRn1VQBSzMoT3+11Q+S5ilFy9GNqjUZUyGcvOuZo54edJLdWF8NwkLekxZN3Rd v6txNnZoVesmwFbDoqPa2QnkELIBmGFfgaZx8E+DX9c9co31lSEA/Mse/95HmoAY Jk+XPRZTDEZf8fseZw/y153l5C2tNiY+fEfLGEPg3Ab1aKm65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDSyEs3eQEaV9s2dtpFiiBeP8PRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZmU1 YTM4Zi01ZmY0LTRiOTctYTQ1OS1lMjVjZmM5Y2FhNzEvOTU2MDc4MzEtOGZkNC0z NzI1LWJiNmItMDFkZWUzZTliODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmZlNWEzOGYtNWZmNC00Yjk3LWE0 NTktZTI1Y2ZjOWNhYTcxL2JmZTVhMzhmLTVmZjQtNGI5Ny1hNDU5LWUyNWNmYzlj YWE3MS5jcmwwHwYDVR0jBBgwFoAUvDbww5CRe7jL9/4AdXJbr/tZiwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZmU1YTM4Zi01ZmY0LTRiOTctYTQ1OS1lMjVj ZmM5Y2FhNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzsS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXUK/mFaMfrqsO/a1z0PMJvyhysTM+7q352oQ7BtrflIHUki+k3gp/2 99YV2NQj95nJkwbRTXzdr7cdjDVSgpc7KlyZY3CWdmtfZN4EamRdnBR8VbaVN/6L VeBuxwSLXN9LzQelOJSCioDOlyfg4nv7E7eytIxaG7FTw6Awt2M74pkxOBk2tUPt iZAKQ1WUMWGatgOTxfB1U1eL/lhXC6ZV7dIfwrKmCWbY55f38czfrNAFUCPKf+Mt UnruH4RfoJUVhI/HFH1xJ/oRJOr5MsHhWJAIAfCVp+yOpBsqfe3502JF6s0TvGdW dEvKxBGreF2d1S/XRH1QjmuKlPGPHzU= -----END CERTIFICATE-----Generated at Sun Jun 15 22:04:01 2025 by rpki-client