$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa File: 06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (raw, json) Hash identifier: lOgJdSllCzAQiw9FJdHs1FX26HZK2IFzAjUG7C6GX3U= Subject key identifier: 74:B6:E5:F0:A3:AC:39:AB:0D:BD:2C:35:10:0D:E3:56:F1:4C:47:62 Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Certificate serial: 010D0C9F43285849E2253903755C1AD5FF769A80 Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 209 IP address blocks: 199.191.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:39:03:75:5c:1a:d5:ff:76:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=824acaaf-46ee-4f60-8081-b81053ddade8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:61:20:a5:91:07:50:30:91:27:be:6e:55: 1b:66:d1:ca:49:b8:5e:58:3d:87:0f:cd:a3:27:7d: d6:f2:f9:80:d7:19:57:a3:e8:a5:0d:35:9c:24:7d: e5:a8:1a:82:66:49:b8:bc:7a:30:8c:15:af:d5:7f: d5:ec:b5:b6:a8:40:87:a7:a3:16:4e:af:ea:81:49: 59:8b:b8:62:24:68:83:26:92:e5:4e:fa:27:2f:a8: 2d:d2:af:f7:f0:b0:00:73:37:5d:e5:ac:91:01:12: fa:01:10:a6:ec:2d:0b:75:b0:58:27:04:d9:14:97: 90:0e:2a:5e:6b:2f:d5:f7:02:48:b9:7f:61:75:ab: b3:d8:2c:4a:89:6f:2c:fa:a0:bf:9e:6c:d4:c4:b0: 29:c0:a3:e6:3e:5f:8f:8b:a9:94:c1:56:2d:9a:6b: 69:6e:d6:54:14:13:e9:04:60:6a:84:09:b4:a7:fc: 1c:12:fe:13:18:f6:cf:58:85:37:10:32:d6:f9:ad: 6c:ba:0f:82:f4:6a:e1:d3:24:b9:d5:b1:ee:b5:9e: f5:8b:8c:32:ae:ff:15:c8:4d:7d:d8:0a:47:3f:03: df:e9:ee:9f:b5:e2:28:75:52:28:c3:40:d6:80:f0: c9:35:e8:c4:b1:b3:73:fd:27:7e:e0:79:f2:74:d2: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B6:E5:F0:A3:AC:39:AB:0D:BD:2C:35:10:0D:E3:56:F1:4C:47:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl X509v3 Authority Key Identifier: keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer sbgp-ipAddrBlock: critical IPv4: 199.191.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2f:7e:07:1d:c8:22:d2:eb:35:fa:8f:3c:a0:c3:a8:36:54: 41:24:84:69:78:65:db:10:fb:44:5a:fd:42:94:d0:01:96:5d: 88:fc:be:bf:68:46:fd:c2:35:fc:5c:12:b8:7b:25:e6:cf:d4: a7:30:6a:da:24:b6:d5:9f:86:e6:1f:99:47:55:dc:fb:0a:23: db:6c:da:5a:29:37:76:a3:d1:49:d2:6a:f1:f8:21:a5:99:41: 23:4b:69:06:c7:7c:5c:fd:3b:1b:58:7b:43:90:50:b2:e0:6c: 11:72:cf:16:45:76:81:38:97:56:a5:60:18:71:3d:80:01:0d: 50:c4:16:95:8d:af:03:89:c2:c7:db:86:89:a0:e7:13:58:19: 45:01:97:ee:af:0a:20:32:cc:8f:be:87:b6:9b:a1:6c:0d:6c: b0:14:22:05:82:15:e1:5c:8f:cf:78:b6:3d:b7:b1:04:c8:89: e1:09:fa:af:f5:28:59:11:95:dc:e0:9b:26:38:9b:e2:28:03: 59:51:7e:85:79:01:10:20:8a:14:54:5f:d0:2a:d6:6a:df:4b: 92:80:d3:0b:ac:43:4c:9a:54:57:e6:a6:93:3f:55:66:0b:31: ea:ef:a2:ec:78:11:a1:35:26:0e:1d:2f:3a:df:ef:42:0d:3c: 54:36:50:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTkDdVwa1f92moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNzQ3YjItYjQ2ZS00YWMxLWI2YTEtOTRjMjczZDBj ODI4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ODI0YWNhYWYtNDZlZS00ZjYwLTgwODEtYjgxMDUzZGRhZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH1hIKWRB1AwkSe+blUbZtHKSbheWD2HD82j J33W8vmA1xlXo+ilDTWcJH3lqBqCZkm4vHowjBWv1X/V7LW2qECHp6MWTq/qgUlZ i7hiJGiDJpLlTvonL6gt0q/38LAAczdd5ayRARL6ARCm7C0LdbBYJwTZFJeQDipe ay/V9wJIuX9hdauz2CxKiW8s+qC/nmzUxLApwKPmPl+Pi6mUwVYtmmtpbtZUFBPp BGBqhAm0p/wcEv4TGPbPWIU3EDLW+a1sug+C9Grh0yS51bHutZ71i4wyrv8VyE19 2ApHPwPf6e6fteIodVIow0DWgPDJNejEsbNz/Sd+4HnydNJwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS25fCjrDmrDb0sNRAN41bxTEdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3 NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMyNzNkMGM4MjgvMDZjOWY5YTAtZmUwMS0z OGM5LWJiZGYtMzA5ZGE0MDAyODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RiNzQ3YjItYjQ2ZS00YWMxLWI2 YTEtOTRjMjczZDBjODI4L2NkYjc0N2IyLWI0NmUtNGFjMS1iNmExLTk0YzI3M2Qw YzgyOC5jcmwwHwYDVR0jBBgwFoAUt4HA3Yy+hO4OdZPQjMbPhjvxVDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMy NzNkMGM4MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx79BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMvfgcdyCLS6zX6jzygw6g2VEEkhGl4ZdsQ+0Ra/UKU0AGWXYj8vr9o Rv3CNfxcErh7JebP1KcwatokttWfhuYfmUdV3PsKI9ts2lopN3aj0UnSavH4IaWZ QSNLaQbHfFz9OxtYe0OQULLgbBFyzxZFdoE4l1alYBhxPYABDVDEFpWNrwOJwsfb homg5xNYGUUBl+6vCiAyzI++h7aboWwNbLAUIgWCFeFcj894tj23sQTIieEJ+q/1 KFkRldzgmyY4m+IoA1lRfoV5ARAgihRUX9Aq1mrfS5KA0wusQ0yaVFfmppM/VWYL Mervoux4EaE1Jg4dLzrf70INPFQ2UMQ= -----END CERTIFICATE-----Generated at Mon Jun 16 11:08:06 2025 by rpki-client