$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa File: e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa (raw, json) Hash identifier: K+J7C+B/M49nyas2BM1RNWBOwq3dokHFGef5XO6LWbM= Subject key identifier: E5:B4:D6:7E:98:05:87:20:03:27:B3:1D:32:6D:DA:E1:ED:C2:9E:41 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F43285849E2252D72881A23DAB4C5A880 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399629 IP address blocks: 206.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:2d:72:88:1a:23:da:b4:c5:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=2c4c9e35-5876-4acd-9bc3-68499192cd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:d0:37:8e:89:2e:4c:be:d3:e1:16:c1:16: 90:c4:c2:d4:c1:45:68:19:11:b6:90:6a:c8:b5:09: 19:30:1a:2c:03:68:1e:12:5b:63:94:b8:d1:b1:7b: 0e:fe:28:f7:03:f0:fb:4f:ce:e2:53:58:48:23:04: 41:13:57:23:2c:f2:01:07:c6:e5:cc:4a:7a:39:14: ec:98:ac:23:53:df:7e:e6:2a:ad:2b:78:cd:fb:90: 25:52:cc:4c:55:58:f9:f2:61:8a:10:0a:75:6b:d9: 8e:f4:7f:5a:05:cc:e0:3d:8f:e0:3f:f3:1d:bb:9d: d2:95:1d:c9:47:a4:6e:17:26:37:7f:8b:3b:cf:35: d2:7f:30:eb:1d:4f:9d:d5:c6:0e:04:4b:7d:78:76: bb:58:cc:a9:cd:df:bf:bf:04:5b:93:fd:98:e6:62: 78:af:ae:fa:87:91:23:d4:54:2f:e9:63:fc:b6:fb: 89:85:2b:c1:d0:a9:1a:ae:11:71:73:8d:5b:75:bc: c0:f9:c2:97:72:a8:29:01:ab:41:63:0d:d7:b1:ce: 98:b2:64:b2:ba:c7:5f:eb:d8:ed:aa:c4:68:23:89: 66:22:f0:4f:b0:bc:9a:f9:59:b9:48:6c:27:c1:7b: 45:06:80:59:09:3a:9b:ad:b9:2b:69:e3:83:7e:46: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B4:D6:7E:98:05:87:20:03:27:B3:1D:32:6D:DA:E1:ED:C2:9E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:91:02:51:45:b2:15:a8:f9:25:1a:18:2c:96:82:95:12:9c: 81:7f:e6:48:f4:d3:f5:cd:f2:e0:71:67:a7:a3:35:88:7a:1f: f4:9f:2c:30:7d:ac:af:fb:16:67:e8:95:f5:61:d9:29:74:10: 6d:12:64:0b:7e:f1:94:93:ee:dc:61:b9:e2:ab:5b:2a:cf:e7: f1:ff:fd:f2:dd:d0:f7:40:ac:65:69:c2:3c:ee:8f:7a:62:af: c7:1c:ad:a9:69:19:8e:0c:db:cb:6d:a9:55:b1:a0:80:b7:5a: 1a:69:fd:b1:f0:b2:5a:fb:98:1b:63:aa:c3:e7:ae:3f:49:14: 8b:56:fb:06:bf:10:7e:3b:f4:5a:f1:3f:de:49:e8:9c:6d:44: 0f:9c:5e:f3:c3:72:1b:f0:c7:ab:24:7b:ae:f4:9f:d9:b6:ec: 9e:b2:66:ab:8f:4f:a3:dd:22:e7:62:38:77:e4:64:0e:4c:53: 54:5f:e7:71:bd:85:12:72:56:b4:c3:e3:fe:0e:b9:e5:71:b8: 68:93:42:28:39:bd:d5:5b:16:3e:70:f2:f5:60:c9:aa:aa:72: fd:4b:80:fc:2a:f6:9a:a3:e4:e9:0a:19:5f:d5:b5:24:be:8b: 92:26:63:ff:5e:2f:ea:b0:c9:1f:e4:94:47:a7:45:0a:ab:79: 90:bf:ed:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJS1yiBoj2rTFqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MmM0YzllMzUtNTg3Ni00YWNkLTliYzMtNjg0OTkxOTJjZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXDQN46JLky+0+EWwRaQxMLUwUVoGRG2kGrI tQkZMBosA2geEltjlLjRsXsO/ij3A/D7T87iU1hIIwRBE1cjLPIBB8blzEp6ORTs mKwjU99+5iqtK3jN+5AlUsxMVVj58mGKEAp1a9mO9H9aBczgPY/gP/Mdu53SlR3J R6RuFyY3f4s7zzXSfzDrHU+d1cYOBEt9eHa7WMypzd+/vwRbk/2Y5mJ4r676h5Ej 1FQv6WP8tvuJhSvB0KkarhFxc41bdbzA+cKXcqgpAatBYw3Xsc6YsmSyusdf69jt qsRoI4lmIvBPsLya+Vm5SGwnwXtFBoBZCTqbrbkraeODfkbwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW01n6YBYcgAyezHTJt2uHtwp5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZTM0NjljMzItNjljNi0z MzlhLTliOTEtMGUxZTJhYjIyZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqRAlFFshWo+SUaGCyWgpUSnIF/5kj00/XN8uBxZ6ejNYh6H/SfLDB9 rK/7FmfolfVh2Sl0EG0SZAt+8ZST7txhueKrWyrP5/H//fLd0PdArGVpwjzuj3pi r8ccralpGY4M28ttqVWxoIC3Whpp/bHwslr7mBtjqsPnrj9JFItW+wa/EH479Frx P95J6JxtRA+cXvPDchvwx6ske670n9m27J6yZquPT6PdIudiOHfkZA5MU1Rf53G9 hRJyVrTD4/4OueVxuGiTQig5vdVbFj5w8vVgyaqqcv1LgPwq9pqj5OkKGV/VtSS+ i5ImY/9eL+qwyR/klEenRQqreZC/7es= -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:59 2025 by rpki-client