$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa File: 280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa (raw, json) Hash identifier: 5IZ7ZItA/7xLJOTHpi8oBKW1XFA9vLKRaJkFr7QTqbY= Subject key identifier: 07:19:C4:B8:F5:28:4B:A3:6C:B6:0E:19:A9:64:9F:75:F9:56:6A:3A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47B9DC9B8F532BC208180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 206.108.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7b:9d:c9:b8:f5:32:bc:20:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=d5821a16-c79f-4cae-a3c6-805f84f724af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:42:72:ac:89:92:c3:b0:33:11:ad:32:2a:66: f1:87:3b:b0:93:39:87:30:e3:6f:02:da:60:53:a3: a8:93:4f:7e:90:d0:ae:7e:c0:31:e1:97:b0:24:b6: dc:34:a9:ec:15:4f:52:15:5f:de:e2:bd:d3:ff:a8: 33:37:77:c6:97:f4:4d:14:45:9e:1a:12:e2:45:81: 07:40:d2:73:1c:df:00:c6:1f:20:be:cf:93:82:f4: 9a:eb:b6:06:37:39:f7:0b:b7:ed:77:63:aa:64:2b: 18:5f:d7:6f:16:85:14:41:7b:1c:ca:32:2e:78:c6: f8:f0:5b:e2:66:cf:c0:6f:09:1f:eb:d6:a5:91:ac: ca:4e:03:03:18:93:fa:bf:c4:32:94:58:79:d1:28: 56:b0:fe:c0:fc:88:00:10:36:db:f9:00:d6:c5:e9: 11:a5:07:90:ac:86:e4:79:83:79:c3:b0:88:e8:54: 1e:fc:bf:f7:4f:3a:06:b8:1d:e6:22:fc:88:1c:34: ee:5e:e9:9a:88:6b:4b:ca:1c:1c:d6:21:74:ff:6a: 1c:75:a0:95:18:90:a2:1a:fd:e6:ea:8a:0c:7e:2e: e0:9f:3d:85:93:b5:76:8d:28:6f:74:b8:62:84:91: a5:71:f4:df:cd:e7:e3:96:43:2d:c9:41:59:af:b5: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:19:C4:B8:F5:28:4B:A3:6C:B6:0E:19:A9:64:9F:75:F9:56:6A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.108.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bf:e4:e3:bb:98:90:02:41:1e:e2:80:ba:2e:04:05:43:7a: 84:1d:78:ac:52:2f:70:ad:c9:1a:11:66:c2:2d:03:fd:ed:3f: d9:71:a7:e6:d3:1c:86:97:64:d5:9f:35:80:96:42:83:e0:95: 86:55:8d:92:37:ad:40:11:bb:a7:3f:b8:2e:9a:84:6b:f4:f1: fa:92:49:03:4b:c2:c0:9b:04:37:96:95:36:8b:c5:4b:b0:59: 30:75:03:09:19:4c:e2:dd:4e:66:ae:7a:83:41:ac:50:68:66: 7a:71:df:cd:91:60:81:2d:db:d3:fd:1d:bd:60:84:bf:a1:07: 54:d8:f2:c6:da:14:b8:f4:9e:0e:48:3a:e8:d8:de:c8:02:2f: 2a:85:30:53:a4:0c:08:f0:bc:62:f0:1c:d1:1c:06:f4:2a:68: 7c:c8:dd:5c:8e:6b:9c:69:74:0c:82:80:27:cd:99:d2:7f:3d: 20:14:63:35:bd:d8:c0:93:e4:4e:c1:6f:f6:95:cf:db:1f:45: 9c:b7:1f:5b:d4:29:71:6e:ae:35:90:fe:5d:34:d4:d2:bd:b7: a2:2d:78:e8:5c:ea:67:27:20:48:c7:db:3a:53:47:e1:a1:c8: 1b:4b:04:db:a1:43:1a:05:a3:90:9a:49:f4:a9:69:c9:a6:2c: 25:cf:74:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Hudybj1MrwggYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDU4MjFhMTYtYzc5Zi00Y2FlLWEzYzYtODA1Zjg0ZjcyNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30JyrImSw7AzEa0yKmbxhzuwkzmHMONvAtpg U6Ook09+kNCufsAx4ZewJLbcNKnsFU9SFV/e4r3T/6gzN3fGl/RNFEWeGhLiRYEH QNJzHN8Axh8gvs+TgvSa67YGNzn3C7ftd2OqZCsYX9dvFoUUQXscyjIueMb48Fvi Zs/Abwkf69alkazKTgMDGJP6v8QylFh50ShWsP7A/IgAEDbb+QDWxekRpQeQrIbk eYN5w7CI6FQe/L/3TzoGuB3mIvyIHDTuXumaiGtLyhwc1iF0/2ocdaCVGJCiGv3m 6ooMfi7gnz2Fk7V2jShvdLhihJGlcfTfzefjlkMtyUFZr7X9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcZxLj1KEujbLYOGalkn3X5Vmo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjgwYzUzYTYtODNiYy0z N2E2LWIxNWUtNTVlMWJmMGYyYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzmwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+/5OO7mJACQR7igLouBAVDeoQdeKxSL3CtyRoRZsItA/3tP9lxp+bT HIaXZNWfNYCWQoPglYZVjZI3rUARu6c/uC6ahGv08fqSSQNLwsCbBDeWlTaLxUuw WTB1AwkZTOLdTmaueoNBrFBoZnpx382RYIEt29P9Hb1ghL+hB1TY8sbaFLj0ng5I OujY3sgCLyqFMFOkDAjwvGLwHNEcBvQqaHzI3VyOa5xpdAyCgCfNmdJ/PSAUYzW9 2MCT5E7Bb/aVz9sfRZy3H1vUKXFurjWQ/l001NK9t6IteOhc6mcnIEjH2zpTR+Gh yBtLBNuhQxoFo5CaSfSpacmmLCXPdGw= -----END CERTIFICATE-----Generated at Sun Apr 27 04:04:46 2025 by rpki-client