$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa File: 25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa (raw, json) Hash identifier: 8xQzkf8eSvloHT7MJZCqyQ9fbB1iOaA7UOpbGsZlTfY= Subject key identifier: 3C:2C:45:73:B9:AC:BA:75:F8:F2:F2:E9:94:B5:AF:F5:E2:CE:5B:69 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F432858498CFF162B88F08A83E6575700 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 399575 IP address blocks: 206.204.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:16:2b:88:f0:8a:83:e6:57:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=405f2067-b3ef-47aa-be6b-c5c683d28c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:b8:2d:e8:0f:ca:5b:2c:36:12:47:95:49: 4c:19:b8:e1:12:0a:80:f5:30:67:91:19:f7:af:5b: f3:31:37:f0:f0:b6:34:90:c8:f8:53:6c:2a:9e:c7: eb:d9:e8:3a:44:6e:27:a5:e9:4e:17:49:e0:36:21: ca:25:9d:33:54:61:d5:4e:4c:46:7a:1e:dd:e9:c7: 23:88:26:b8:72:99:fb:08:42:77:58:63:22:1a:17: e2:b7:85:b8:e7:c5:5e:82:c4:25:d7:e5:65:30:c0: 49:03:b4:89:50:fc:71:d9:8c:77:ef:8e:67:70:75: 23:b8:ba:93:8d:ec:07:43:62:aa:96:81:ef:47:e4: af:95:3a:d3:8e:36:64:b6:b3:d2:32:be:c2:20:02: 84:f2:c5:ae:9b:b1:7d:96:3d:32:88:05:76:ef:4c: 2f:e6:92:83:df:b4:97:04:e2:8f:65:fa:13:8d:0c: 8f:8a:b1:a8:0b:c7:6f:c1:30:56:8b:5a:48:d0:b8: 8a:8a:92:be:0a:ad:81:c6:31:62:dc:bb:63:61:d6: 9e:7c:09:7b:c3:4c:5d:4a:04:12:70:40:2f:6d:99: 08:1a:e6:9f:83:af:74:4b:65:20:3b:06:65:19:ec: 1a:24:4b:ea:29:50:8a:90:35:70:97:5b:ba:38:32: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2C:45:73:B9:AC:BA:75:F8:F2:F2:E9:94:B5:AF:F5:E2:CE:5B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:88:f0:6a:63:d5:30:d8:f0:95:a6:5d:d5:15:9c:52:1a:eb: d1:e2:ad:47:20:75:85:c4:b5:bc:b1:07:ea:aa:90:88:67:5d: 17:65:13:47:bf:db:65:b5:1f:cb:4c:e1:5d:86:4c:3c:bf:05: 75:a1:63:d1:71:b4:14:34:06:23:8f:f0:71:b2:bb:13:ff:fe: 81:41:60:f1:2e:08:39:ff:a3:3b:ac:7e:03:ba:ef:77:44:45: d8:84:b6:7d:e3:05:8f:6f:cc:e9:9d:fb:3d:d8:51:2f:a0:ee: 49:ed:bd:f1:ba:e7:b6:43:38:dd:98:49:94:03:fb:2b:a1:c4: 99:bb:07:f9:3c:f0:9c:6b:d7:08:f3:c6:22:80:13:da:f5:7e: 2e:27:01:d7:13:e8:5c:82:d3:fc:71:96:ef:c7:f2:a3:d7:75: 60:26:21:a8:c7:ef:11:c0:7d:bd:15:25:f6:6e:71:44:19:e7: 2b:cf:9a:fc:8d:1d:36:03:52:60:b4:c5:59:8c:77:c2:1e:bd: 7b:85:dd:15:21:7a:3b:1c:52:e8:53:d9:db:10:a6:cf:f6:b6: 43:4f:01:de:b5:88:7d:a8:d9:63:ab:f8:36:da:cd:3b:66:86: ce:4c:1c:e4:3b:5d:f4:ff:04:67:aa:d8:25:26:b6:2d:2d:5e: e1:59:87:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xYriPCKg+ZXVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NDA1ZjIwNjctYjNlZi00N2FhLWJlNmItYzVjNjgzZDI4YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfC4LegPylssNhJHlUlMGbjhEgqA9TBnkRn3 r1vzMTfw8LY0kMj4U2wqnsfr2eg6RG4npelOF0ngNiHKJZ0zVGHVTkxGeh7d6ccj iCa4cpn7CEJ3WGMiGhfit4W458VegsQl1+VlMMBJA7SJUPxx2Yx3745ncHUjuLqT jewHQ2KqloHvR+SvlTrTjjZktrPSMr7CIAKE8sWum7F9lj0yiAV270wv5pKD37SX BOKPZfoTjQyPirGoC8dvwTBWi1pI0LiKipK+Cq2BxjFi3LtjYdaefAl7w0xdSgQS cEAvbZkIGuafg690S2UgOwZlGewaJEvqKVCKkDVwl1u6ODLIgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwsRXO5rLp1+PLy6ZS1r/XizltpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMjViNGE5ZDEtYzEwNy0z M2FiLWIxMDgtNzg5ZmE3ZDJjMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzszuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+I8Gpj1TDY8JWmXdUVnFIa69HirUcgdYXEtbyxB+qqkIhnXRdlE0e/ 22W1H8tM4V2GTDy/BXWhY9FxtBQ0BiOP8HGyuxP//oFBYPEuCDn/ozusfgO673dE RdiEtn3jBY9vzOmd+z3YUS+g7kntvfG657ZDON2YSZQD+yuhxJm7B/k88Jxr1wjz xiKAE9r1fi4nAdcT6FyC0/xxlu/H8qPXdWAmIajH7xHAfb0VJfZucUQZ5yvPmvyN HTYDUmC0xVmMd8IevXuF3RUhejscUuhT2dsQps/2tkNPAd61iH2o2WOr+DbazTtm hs5MHOQ7XfT/BGeq2CUmti0tXuFZhyE= -----END CERTIFICATE-----Generated at Mon Apr 28 11:53:56 2025 by rpki-client