$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5046fdd3-91da-368f-a9dd-efd056f100b2.roa File: 5046fdd3-91da-368f-a9dd-efd056f100b2.roa (raw, json) Hash identifier: 2yFw1e4QIcVBfHvRJt1NMRlnKLnY9uy/m9Afl9MiKak= Subject key identifier: 68:43:13:06:80:D9:03:48:FF:3C:15:57:FA:D1:2D:C4:81:60:57:8B Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584A0C05736B56A06E9CE8D1E010 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5046fdd3-91da-368f-a9dd-efd056f100b2.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 26744 IP address blocks: 147.124.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:73:6b:56:a0:6e:9c:e8:d1:e0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=db158309-a9a1-4de1-937a-f15217899294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:33:66:42:be:fb:8f:6f:49:8a:2c:b5:c6: 0f:d4:b9:65:50:b6:e0:9d:98:f7:3a:99:6b:65:0b: c1:3e:83:11:a9:87:54:95:40:9a:6f:37:58:b9:75: ea:ff:65:f3:ec:08:4d:08:2c:a7:6d:dd:91:70:25: 59:56:0b:dd:b7:29:5d:58:b0:d5:79:ec:7f:1e:c3: 2f:1c:92:c4:d4:7b:e7:ec:a7:57:55:f2:90:8e:6f: ad:66:9a:8f:dd:b9:df:e3:80:a4:fa:72:36:15:7e: 45:11:ab:2f:2f:99:e3:a1:6f:46:51:a4:c4:7d:05: d3:08:a8:b5:21:2b:c0:4a:bd:04:1b:c2:a2:d1:d0: 91:f9:9d:ce:b4:ae:e1:b9:49:07:d8:55:2c:74:91: 62:17:51:7a:ab:cf:1d:a8:e9:92:99:b7:ee:2c:e9: 1b:16:82:34:db:c0:3c:ed:21:0e:78:92:c0:52:98: fe:63:10:e2:1d:57:52:45:58:3c:14:d4:f8:df:bf: 29:fd:92:0e:31:3e:f2:e6:5f:b4:48:63:39:8c:0f: 7b:6d:73:21:43:c6:c4:2a:60:86:dd:35:1c:29:79: 18:b7:13:7f:1f:36:70:06:45:67:ea:fc:dd:93:fc: c9:73:43:05:36:52:59:c4:fa:22:23:c9:75:89:b0: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:43:13:06:80:D9:03:48:FF:3C:15:57:FA:D1:2D:C4:81:60:57:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5046fdd3-91da-368f-a9dd-efd056f100b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:41:28:98:bc:c3:e5:a3:a7:d0:3f:4d:f9:5b:a7:ed:65:b7: c2:f8:6d:82:b7:50:41:47:60:5a:83:e9:35:c3:04:ea:9a:68: 42:ea:c8:db:a0:47:d3:a0:9d:4e:d0:c7:0b:4d:82:a8:b9:4e: 5f:b6:71:29:e6:c7:b6:09:ea:17:fc:66:c3:64:db:12:1a:45: 0b:df:f8:31:5d:e8:d7:3b:d7:74:d7:e9:11:df:65:1a:c7:b4: 9c:97:1b:fd:8b:f2:b5:e3:d9:fb:5b:e6:e7:e6:67:b0:6f:99: cd:19:c1:a0:fc:57:ce:34:e5:8a:7c:7a:a3:d0:9a:66:88:95: 9c:fa:ac:fc:35:fe:71:5c:88:1d:1b:cc:01:f3:51:a3:ac:f4: c3:80:a7:5c:3f:9f:77:16:74:9f:1b:a7:66:3e:60:7f:c3:de: 51:c1:0f:45:09:d4:23:4e:c2:94:5d:da:6d:5f:55:96:7f:89: a1:60:6e:32:bd:3f:43:cf:85:db:94:17:74:f8:c5:2e:3d:25: 57:76:87:88:c7:60:de:8d:f6:92:38:8f:03:3a:90:e9:fc:b7: 09:72:63:37:67:d9:c5:dd:a1:1d:c5:92:9c:90:51:16:a3:b7: a8:fa:c0:cc:48:7c:24:73:9b:dc:d1:4f:21:fa:ca:96:27:83: 9e:56:82:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXNrVqBunOjR4BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZGIxNTgzMDktYTlhMS00ZGUxLTkzN2EtZjE1MjE3ODk5Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+kzZkK++49vSYostcYP1LllULbgnZj3Oplr ZQvBPoMRqYdUlUCabzdYuXXq/2Xz7AhNCCynbd2RcCVZVgvdtyldWLDVeex/HsMv HJLE1Hvn7KdXVfKQjm+tZpqP3bnf44Ck+nI2FX5FEasvL5njoW9GUaTEfQXTCKi1 ISvASr0EG8Ki0dCR+Z3OtK7huUkH2FUsdJFiF1F6q88dqOmSmbfuLOkbFoI028A8 7SEOeJLAUpj+YxDiHVdSRVg8FNT4378p/ZIOMT7y5l+0SGM5jA97bXMhQ8bEKmCG 3TUcKXkYtxN/HzZwBkVn6vzdk/zJc0MFNlJZxPoiI8l1ibAihQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhDEwaA2QNI/zwVV/rRLcSBYFeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNTA0NmZkZDMtOTFkYS0z NjhmLWE5ZGQtZWZkMDU2ZjEwMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJBKJi8w+Wjp9A/Tflbp+1lt8L4bYK3UEFHYFqD6TXDBOqaaELqyNug R9OgnU7QxwtNgqi5Tl+2cSnmx7YJ6hf8ZsNk2xIaRQvf+DFd6Nc713TX6RHfZRrH tJyXG/2L8rXj2ftb5ufmZ7Bvmc0ZwaD8V8405Yp8eqPQmmaIlZz6rPw1/nFciB0b zAHzUaOs9MOAp1w/n3cWdJ8bp2Y+YH/D3lHBD0UJ1CNOwpRd2m1fVZZ/iaFgbjK9 P0PPhduUF3T4xS49JVd2h4jHYN6N9pI4jwM6kOn8twlyYzdn2cXdoR3FkpyQURaj t6j6wMxIfCRzm9zRTyH6ypYng55WgkU= -----END CERTIFICATE-----Generated at Mon Jun 16 19:06:15 2025 by rpki-client