$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa File: 10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa (raw, json) Hash identifier: xHAuBOH53814I3PUvLABBEsl7xTk7mXcF8Y4MhHxJwk= Subject key identifier: BD:1B:99:AD:D4:49:8D:D7:65:45:0D:F7:3D:0F:05:C8:5F:4E:DC:32 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F432858498CFF1610636E121D48160C10 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 399575 IP address blocks: 206.204.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:16:10:63:6e:12:1d:48:16:0c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=7500e03c-8718-4d01-b9ca-a82f80b2a1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:a4:e7:08:89:e9:7b:9f:4b:83:8f:36:3e: 6c:b8:71:53:d4:f2:a6:99:88:e1:c7:62:74:d3:06: 67:19:79:d3:4e:5c:0b:8d:b7:5d:2f:7a:2f:09:97: 02:0b:32:f1:9f:f5:e5:94:cc:5c:d6:b9:9d:8f:de: 27:ac:d1:78:f4:58:6b:e8:db:f2:0f:22:a9:20:13: 7e:e1:21:ca:e2:dd:84:85:59:29:fa:d6:7f:83:fa: 01:45:dc:b2:6f:09:73:57:85:a5:90:03:ec:17:3b: 85:a3:c5:63:38:2c:7e:fd:e2:2b:49:8f:5e:bb:74: 47:b0:97:0d:d1:35:f2:1d:48:20:98:bc:be:4c:02: b9:1a:4c:a6:a2:6f:27:73:6a:6a:f0:c4:c0:28:06: 66:2d:fe:00:50:56:5f:27:30:a0:d2:10:d1:e8:1b: 24:e7:21:1c:60:78:d4:79:fa:3d:1b:97:a3:93:2c: 8f:4c:26:ab:7d:e6:10:da:88:4b:ca:36:04:94:ad: 2d:d2:80:ff:d1:a4:0d:ff:be:1f:50:46:54:5a:fb: 79:fa:50:57:0f:5d:90:19:20:4e:39:35:09:76:2a: 7d:83:44:fa:08:9c:3f:aa:3a:9c:db:5f:ce:5d:ed: 02:07:6e:14:2d:1d:9a:f6:4b:73:5f:fb:f9:66:78: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1B:99:AD:D4:49:8D:D7:65:45:0D:F7:3D:0F:05:C8:5F:4E:DC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1b:46:c6:7c:98:99:97:4c:da:1d:f6:bf:87:2f:77:d7:db: 78:6d:14:e5:3a:56:ab:cc:6a:0b:09:9e:d0:a7:f6:46:a5:bc: ec:59:20:cb:ca:86:80:71:2c:04:ef:4e:de:f9:eb:34:92:e7: a2:60:eb:0a:43:86:93:84:16:ae:4e:f5:36:b7:a6:2b:a4:3a: f9:66:ae:1f:af:67:2c:3a:19:5e:1c:4c:f9:ae:9d:2d:eb:1d: b1:da:98:75:29:17:44:b1:57:37:78:1b:e4:aa:3a:1d:ff:5d: 5d:f5:7a:7f:ef:72:1e:81:3b:eb:3b:46:43:d5:42:44:25:f1: 92:c8:d2:e9:73:cd:6f:27:72:45:12:31:24:f0:c3:dd:d8:ef: ca:bd:a7:1b:ec:47:aa:57:71:da:47:e0:b6:f1:1e:b5:e0:76: c1:d0:fb:dd:22:bb:30:cb:51:af:d5:91:9c:95:c2:21:6c:c5: 3c:16:7c:e5:d4:1d:62:88:ba:78:5d:93:75:fa:d5:64:18:c5: 5e:bc:04:3b:c4:c1:f0:48:a7:03:cc:20:fd:92:ef:70:cf:cc: 15:c5:cc:85:c1:16:78:06:c0:a3:06:32:fc:f6:ed:8f:6d:da: 92:36:e3:1e:26:04:45:e5:29:c9:d3:fe:e2:8e:48:bd:6a:22: 42:a9:2f:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xYQY24SHUgWDBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NzUwMGUwM2MtODcxOC00ZDAxLWI5Y2EtYTgyZjgwYjJhMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Sk5wiJ6XufS4OPNj5suHFT1PKmmYjhx2J0 0wZnGXnTTlwLjbddL3ovCZcCCzLxn/XllMxc1rmdj94nrNF49Fhr6NvyDyKpIBN+ 4SHK4t2EhVkp+tZ/g/oBRdyybwlzV4WlkAPsFzuFo8VjOCx+/eIrSY9eu3RHsJcN 0TXyHUggmLy+TAK5Gkymom8nc2pq8MTAKAZmLf4AUFZfJzCg0hDR6Bsk5yEcYHjU efo9G5ejkyyPTCarfeYQ2ohLyjYElK0t0oD/0aQN/74fUEZUWvt5+lBXD12QGSBO OTUJdip9g0T6CJw/qjqc21/OXe0CB24ULR2a9ktzX/v5ZngwJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0bma3USY3XZUUN9z0PBchfTtwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMTBlODZjZjktZjhiNS0z YjZiLWFhMjUtY2RjNTI2Nzc0NjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzszqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8bRsZ8mJmXTNod9r+HL3fX23htFOU6VqvMagsJntCn9kalvOxZIMvK hoBxLATvTt756zSS56Jg6wpDhpOEFq5O9Ta3piukOvlmrh+vZyw6GV4cTPmunS3r HbHamHUpF0SxVzd4G+SqOh3/XV31en/vch6BO+s7RkPVQkQl8ZLI0ulzzW8nckUS MSTww93Y78q9pxvsR6pXcdpH4LbxHrXgdsHQ+90iuzDLUa/VkZyVwiFsxTwWfOXU HWKIunhdk3X61WQYxV68BDvEwfBIpwPMIP2S73DPzBXFzIXBFngGwKMGMvz27Y9t 2pI24x4mBEXlKcnT/uKOSL1qIkKpLxw= -----END CERTIFICATE-----Generated at Mon Apr 28 10:38:07 2025 by rpki-client