$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa File: 407b4528-0b5f-3711-889f-62a6ac6815da.roa (raw, json) Hash identifier: sbGQogNIzGplYWprN297hSRRQp/7vkg7IBBQKiEqlEk= Subject key identifier: 84:E2:17:AC:DB:87:12:59:65:75:D9:F2:42:DF:88:56:AC:EC:84:4E Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A10353D56B55B3BD081BFA980 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 262287 IP address blocks: 206.127.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3d:56:b5:5b:3b:d0:81:bf:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=44a526c5-3e7e-459a-bdf3-3be683522508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:8c:25:df:96:d5:14:71:55:34:25:d2:e0: e5:28:7d:50:5e:56:a3:15:00:6c:a6:48:10:01:cb: d7:10:ec:cd:64:b8:6e:7e:21:15:cb:8a:2e:35:8e: fb:c8:b4:74:80:01:c8:38:56:25:a9:d5:50:ef:b1: 37:b9:fe:45:7f:4b:03:a9:79:93:06:c5:d2:e1:79: 5d:92:88:b7:2c:c2:fa:0e:d9:c7:bc:ac:df:e4:d4: dd:8e:4e:b9:b5:3e:55:2d:28:88:2f:41:91:e2:9c: d9:f9:a3:b4:6e:07:e9:6c:3e:ea:1b:49:d9:b9:3e: 85:fc:bf:93:0a:c0:a9:ad:fa:ec:9e:91:ef:53:8e: 79:b7:6a:e6:f6:54:ea:0f:a8:95:71:3d:8e:76:a7: 04:34:1b:1b:13:2f:d9:9e:57:f1:6d:2d:6c:e2:aa: b4:13:0f:c8:52:68:ce:af:c8:6c:71:0b:e6:05:76: 5e:24:8c:94:4f:61:04:7a:b7:5e:b5:12:38:87:a1: d5:50:98:1b:90:f1:ee:a9:4b:e2:d1:43:9f:03:db: dd:21:98:70:d1:31:d5:1e:ca:25:e5:54:1c:e1:92: 98:c9:67:7b:51:2f:7d:77:1f:37:19:65:ae:2d:b9: d2:a8:8a:bd:5c:e3:cd:4e:48:c5:db:6b:0e:35:f8: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E2:17:AC:DB:87:12:59:65:75:D9:F2:42:DF:88:56:AC:EC:84:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 206.127.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b7:b3:9c:96:9d:4b:b9:89:e2:6e:71:e1:54:15:b8:32:29: 64:25:fa:a2:12:10:e2:d1:eb:57:74:9e:6a:d6:53:e3:b0:98: f7:f2:31:7f:c7:18:31:a4:db:dd:44:9d:12:1d:a2:13:67:d0: 39:1d:fc:d9:60:d0:c0:54:24:25:85:8d:f0:ef:9e:9d:91:2c: 9b:e7:28:4f:d7:f3:a8:d2:0c:69:76:3c:9b:b9:3e:09:ef:66: ef:03:11:43:c4:a5:32:3c:ed:2e:c1:84:cb:34:51:93:1a:2c: 5e:a7:d0:59:b7:6e:b1:14:a3:92:5d:09:c9:39:86:37:ed:aa: 44:e9:4c:19:33:72:e4:ac:cd:b2:ec:a8:63:8d:5f:25:a8:2a: be:c7:79:a6:39:4a:a0:d3:ff:d3:ee:5a:1b:43:17:8b:81:ba: 14:cb:a9:28:67:75:7a:f8:3f:a7:b0:06:13:51:dd:78:17:4c: 88:05:4b:2b:9e:01:30:e1:3c:1d:d6:80:f8:74:1e:7f:9b:3e: a1:34:63:71:d5:9a:f0:c6:1d:e0:87:cf:55:d5:66:6f:6c:38: 16:8e:c5:1b:8f:37:a2:48:d4:f7:7c:fa:c7:4b:69:2b:2e:5e: 49:17:50:18:b5:82:17:c0:b3:6f:0c:9c:1e:dd:2e:6e:e7:12: 43:63:ab:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNT1WtVs70IG/qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NDRhNTI2YzUtM2U3ZS00NTlhLWJkZjMtM2JlNjgzNTIyNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkKMJd+W1RRxVTQl0uDlKH1QXlajFQBspkgQ AcvXEOzNZLhufiEVy4ouNY77yLR0gAHIOFYlqdVQ77E3uf5Ff0sDqXmTBsXS4Xld koi3LML6DtnHvKzf5NTdjk65tT5VLSiIL0GR4pzZ+aO0bgfpbD7qG0nZuT6F/L+T CsCprfrsnpHvU455t2rm9lTqD6iVcT2OdqcENBsbEy/ZnlfxbS1s4qq0Ew/IUmjO r8hscQvmBXZeJIyUT2EEerdetRI4h6HVUJgbkPHuqUvi0UOfA9vdIZhw0THVHsol 5VQc4ZKYyWd7US99dx83GWWuLbnSqIq9XOPNTkjF22sONfijBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITiF6zbhxJZZXXZ8kLfiFas7IROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDA3YjQ1MjgtMGI1Zi0z NzExLTg4OWYtNjJhNmFjNjgxNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzn/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG3s5yWnUu5ieJuceFUFbgyKWQl+qISEOLR61d0nmrWU+OwmPfyMX/H GDGk291EnRIdohNn0Dkd/Nlg0MBUJCWFjfDvnp2RLJvnKE/X86jSDGl2PJu5Pgnv Zu8DEUPEpTI87S7BhMs0UZMaLF6n0Fm3brEUo5JdCck5hjftqkTpTBkzcuSszbLs qGONXyWoKr7HeaY5SqDT/9PuWhtDF4uBuhTLqShndXr4P6ewBhNR3XgXTIgFSyue ATDhPB3WgPh0Hn+bPqE0Y3HVmvDGHeCHz1XVZm9sOBaOxRuPN6JI1Pd8+sdLaSsu XkkXUBi1ghfAs28MnB7dLm7nEkNjq7Q= -----END CERTIFICATE-----Generated at Sun Jun 15 12:00:47 2025 by rpki-client