$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa File: f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa (raw, json) Hash identifier: +z3JDfu+9WdAVHZLJYx1kdN8ovEmlgSxjo9bvgMrEaM= Subject key identifier: E1:C0:D1:E3:E5:46:2A:3C:33:AB:FC:45:52:A3:1E:B8:FF:47:3B:1B Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584A10354E69A82CC222B6DB1000 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 399575 IP address blocks: 206.204.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4e:69:a8:2c:c2:22:b6:db:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=9abe3f63-1fcb-4806-a5ab-cf9e8f5f7922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:a0:80:cb:ed:90:1d:11:e3:f1:a1:e1:94: 9b:09:90:cc:57:cf:3f:18:f8:13:89:98:b8:67:e0: 57:62:f9:65:54:90:b9:f5:b2:b1:4a:76:6c:df:c6: 1e:1d:6c:b9:06:36:4c:e8:de:c6:d7:7c:94:71:41: 66:e6:98:8d:cb:c5:31:82:c7:da:f3:a1:4c:66:53: a5:10:28:64:15:e9:99:91:fa:d7:7c:78:73:e9:ad: 7a:5e:ec:33:50:7c:c3:96:63:d1:7d:c0:1a:fb:eb: 89:f6:d8:10:4c:95:ca:5d:6a:51:32:a6:b1:7c:5a: 06:69:81:45:c7:15:76:be:b7:94:42:c8:0b:f6:2f: 50:1f:7f:3d:77:d9:ad:1b:a1:46:b3:46:ab:ec:aa: e0:c5:8f:82:e6:a9:d7:00:53:59:37:1f:5f:1c:0f: 30:7b:05:7c:77:6c:91:0e:e8:34:bd:a8:ff:32:65: 08:01:66:1e:2c:35:09:1e:dd:09:cc:00:99:84:dd: 2c:fe:2c:df:a4:94:ef:a8:58:3b:c7:c1:d9:0e:f0: 1f:fb:c8:ce:4a:3e:5e:4e:f6:6d:d7:ec:c3:9e:ba: fe:41:58:e1:99:07:10:1c:98:5d:a7:51:a4:95:9c: 7b:47:f0:90:d6:51:33:6c:96:fd:ad:f4:79:25:24: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C0:D1:E3:E5:46:2A:3C:33:AB:FC:45:52:A3:1E:B8:FF:47:3B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d4:96:59:a7:ed:15:b6:80:ac:72:3a:c6:41:0c:cc:79:c7: 3c:11:7c:ed:e4:c3:f3:51:85:cc:66:a4:f3:90:21:0d:d8:e1: 03:76:2f:48:15:a6:0a:ee:ca:3b:9b:b3:06:fa:96:41:64:9d: dc:08:1b:2b:5a:6a:03:50:62:d6:01:ec:a6:21:27:10:c9:16: 91:ec:8d:18:6a:f2:73:88:66:56:47:ed:06:01:e2:fe:f0:5d: e9:19:28:a7:c1:50:10:8f:d3:78:c6:9c:6d:bc:e6:d9:aa:6e: c8:7f:91:1d:c5:93:69:2a:8e:fe:54:fb:f7:c3:cd:4a:ab:e9: e4:32:66:11:f8:26:82:9a:20:fc:13:a5:66:36:27:5f:02:dc: aa:c8:00:3f:4c:0e:1f:02:d8:e0:47:43:c9:1f:42:e2:ac:23: 65:cc:31:5c:02:bf:41:d0:7a:c9:30:36:89:1f:a4:fa:56:77: d1:9b:a5:4a:0a:4c:9e:c6:7c:fe:3c:ca:e1:fb:33:bc:ce:e4: 66:9f:60:2f:f8:e6:79:cd:8d:06:47:b9:ee:f6:97:e9:7f:35: b6:5b:4c:c8:d9:83:a5:55:cc:92:d7:4f:8f:5d:ad:c2:e6:de: 87:a7:e8:c2:9f:9f:f2:93:0f:53:0a:ab:0b:dc:12:05:23:84: 45:f8:09:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNU5pqCzCIrbbEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk OWFiZTNmNjMtMWZjYi00ODA2LWE1YWItY2Y5ZThmNWY3OTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL6ggMvtkB0R4/Gh4ZSbCZDMV88/GPgTiZi4 Z+BXYvllVJC59bKxSnZs38YeHWy5BjZM6N7G13yUcUFm5piNy8Uxgsfa86FMZlOl EChkFemZkfrXfHhz6a16XuwzUHzDlmPRfcAa++uJ9tgQTJXKXWpRMqaxfFoGaYFF xxV2vreUQsgL9i9QH389d9mtG6FGs0ar7KrgxY+C5qnXAFNZNx9fHA8wewV8d2yR Dug0vaj/MmUIAWYeLDUJHt0JzACZhN0s/izfpJTvqFg7x8HZDvAf+8jOSj5eTvZt 1+zDnrr+QVjhmQcQHJhdp1GklZx7R/CQ1lEzbJb9rfR5JSQFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHA0ePlRio8M6v8RVKjHrj/RzsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvZjFmN2Y4MTItNmQ1Yi0z YzIzLTk3OGMtMjUzM2JkZDYxYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzszmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7Ullmn7RW2gKxyOsZBDMx5xzwRfO3kw/NRhcxmpPOQIQ3Y4QN2L0gV pgruyjubswb6lkFkndwIGytaagNQYtYB7KYhJxDJFpHsjRhq8nOIZlZH7QYB4v7w XekZKKfBUBCP03jGnG285tmqbsh/kR3Fk2kqjv5U+/fDzUqr6eQyZhH4JoKaIPwT pWY2J18C3KrIAD9MDh8C2OBHQ8kfQuKsI2XMMVwCv0HQeskwNokfpPpWd9GbpUoK TJ7GfP48yuH7M7zO5GafYC/45nnNjQZHue72l+l/NbZbTMjZg6VVzJLXT49drcLm 3oen6MKfn/KTD1MKqwvcEgUjhEX4CbA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:25 2025 by rpki-client