$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b127d67a-04bf-37a9-be8b-1a83681d8652.roa File: b127d67a-04bf-37a9-be8b-1a83681d8652.roa (raw, json) Hash identifier: FcgeNIBnXkos9aufiVdVF1KWLRLFlfxlseGMcGDgodg= Subject key identifier: 9E:E1:09:4F:61:29:0F:81:D3:52:EE:81:60:A8:E1:FA:26:BF:38:64 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584A103548658BF3B63FC80BF650 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b127d67a-04bf-37a9-be8b-1a83681d8652.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 399575 IP address blocks: 206.204.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:48:65:8b:f3:b6:3f:c8:0b:f6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=63460df2-7d06-4f8d-bd8f-9ffd5d3a0bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:ea:7b:87:bb:b3:76:3a:af:e9:7c:94:a0: 33:7b:e0:5b:df:27:2b:c6:b5:31:02:b2:6d:8d:7a: fb:e5:41:c1:02:80:91:12:0a:ee:c8:c9:10:ab:8b: 8e:5d:f6:62:20:72:73:08:72:09:78:c4:6a:30:a2: 60:ae:59:f9:9c:0f:41:cf:84:2f:64:50:2b:68:d7: e2:a9:6a:e2:8d:ae:75:b7:04:64:aa:2e:5f:31:29: a7:c2:bf:3c:45:82:86:e4:8e:16:2d:94:ad:66:4d: 67:f8:6b:98:77:6a:57:75:8f:9d:94:56:88:71:cf: e9:fe:aa:84:b8:6d:0c:4b:74:1f:df:19:a0:7d:71: 16:5f:7c:02:ed:98:94:11:21:01:8c:f8:3f:f3:19: 7d:1a:17:9b:45:4b:14:58:97:ca:92:7a:11:22:bf: 55:86:12:9c:f0:13:a9:12:7e:c6:ad:c0:81:3c:a0: 79:15:0e:d8:e5:5d:1b:57:49:4c:03:17:54:5a:d1: 7a:5d:86:80:c8:06:12:01:d1:fc:32:a3:59:1b:86: 99:58:ad:fd:ed:ae:c8:f6:b3:95:84:e5:a9:de:a2: a4:90:90:1c:06:fe:16:7e:d6:80:2e:d8:15:19:0d: 2d:5a:6e:c1:4a:75:06:b3:08:c7:4d:4c:af:ca:11: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E1:09:4F:61:29:0F:81:D3:52:EE:81:60:A8:E1:FA:26:BF:38:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b127d67a-04bf-37a9-be8b-1a83681d8652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:70:23:6b:b4:28:28:44:1a:50:4d:33:97:4b:e4:fa:86:c4: f1:f2:da:8d:1b:15:c6:04:a5:26:86:82:7d:a7:d1:3e:23:2f: 09:3f:57:ff:ed:19:a4:43:cd:4a:98:61:11:ab:d1:31:e7:5d: ce:0d:81:4a:c9:73:6e:83:96:bf:13:91:45:32:d8:4d:7f:52: 18:b3:0e:27:76:43:7c:c1:cd:ca:c6:8e:7f:69:0e:fc:bb:c1: 9e:86:fa:ce:ab:7c:0d:06:f5:16:88:bc:14:a0:8e:d2:13:ad: 50:60:da:51:91:a7:e5:d8:8e:e7:76:2a:73:57:b8:1d:fe:fb: 27:d4:24:87:19:16:2d:42:06:9f:23:26:a9:f0:4d:6c:4d:00: ea:42:cf:f9:5c:8a:23:9f:63:5c:ff:cb:d3:8d:a9:2f:04:57: e2:84:ca:eb:e1:0b:42:58:40:27:21:44:38:30:67:77:b4:97: 9e:77:a1:5b:52:4c:86:34:63:2c:d6:73:05:2d:31:45:75:87: 04:ca:98:0b:95:6a:bf:10:7b:98:3b:78:7b:58:0e:95:6e:b3: ec:39:f4:36:43:91:9e:eb:90:16:b1:92:c4:ca:85:18:4f:7f: af:3b:12:fc:27:bf:e7:e4:7a:03:96:6e:a6:a0:cc:0e:67:71: 07:fc:de:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUhli/O2P8gL9lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NjM0NjBkZjItN2QwNi00ZjhkLWJkOGYtOWZmZDVkM2EwYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/qe4e7s3Y6r+l8lKAze+Bb3ycrxrUxArJt jXr75UHBAoCREgruyMkQq4uOXfZiIHJzCHIJeMRqMKJgrln5nA9Bz4QvZFAraNfi qWrija51twRkqi5fMSmnwr88RYKG5I4WLZStZk1n+GuYd2pXdY+dlFaIcc/p/qqE uG0MS3Qf3xmgfXEWX3wC7ZiUESEBjPg/8xl9GhebRUsUWJfKknoRIr9VhhKc8BOp En7GrcCBPKB5FQ7Y5V0bV0lMAxdUWtF6XYaAyAYSAdH8MqNZG4aZWK397a7I9rOV hOWp3qKkkJAcBv4WftaALtgVGQ0tWm7BSnUGswjHTUyvyhFxzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7hCU9hKQ+B01LugWCo4fomvzhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYjEyN2Q2N2EtMDRiZi0z N2E5LWJlOGItMWE4MzY4MWQ4NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzszhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5wI2u0KChEGlBNM5dL5PqGxPHy2o0bFcYEpSaGgn2n0T4jLwk/V//t GaRDzUqYYRGr0THnXc4NgUrJc26Dlr8TkUUy2E1/UhizDid2Q3zBzcrGjn9pDvy7 wZ6G+s6rfA0G9RaIvBSgjtITrVBg2lGRp+XYjud2KnNXuB3++yfUJIcZFi1CBp8j JqnwTWxNAOpCz/lciiOfY1z/y9ONqS8EV+KEyuvhC0JYQCchRDgwZ3e0l553oVtS TIY0YyzWcwUtMUV1hwTKmAuVar8Qe5g7eHtYDpVus+w59DZDkZ7rkBaxksTKhRhP f687Evwnv+fkegOWbqagzA5ncQf83jw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:23:29 2025 by rpki-client