$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa File: 81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa (raw, json) Hash identifier: DGT6HFrUfKcl/pVWUxcwBYLhDLzQ1Zt7D8gS9N5JC2A= Subject key identifier: 77:89:5C:1B:48:B7:D3:FB:36:E4:EC:C2:28:9E:D2:E2:CC:8B:11:2B Certificate issuer: /CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Certificate serial: 010D0C9F4328584A00DABEFF66B1A80063E78100 Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 40339 IP address blocks: 206.71.154.0/23 maxlen: 24 208.78.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:be:ff:66:b1:a8:00:63:e7:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=ce8c6721-2be7-4c9c-9550-be6bac8ca625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:a7:65:d5:ea:58:99:b9:0f:1f:44:2a:11: 8f:2e:29:5c:57:6d:74:c8:ee:50:9d:bc:7e:6e:9f: 45:cc:f7:ef:00:ab:4a:b2:8c:c6:0f:4a:5c:88:52: ff:44:d9:5a:ba:09:0c:0b:bd:d4:51:36:58:a0:4c: 14:0b:97:c1:90:23:4b:f2:47:96:6d:31:de:c3:d4: ca:6a:75:b2:2c:b5:54:88:27:a7:46:9c:73:e4:7a: b8:6f:a7:26:f3:08:d4:e2:d5:d7:5c:f5:d5:19:30: 11:4f:96:ea:0b:7e:99:02:0d:0e:92:d1:09:af:df: 7d:2b:5a:08:4d:92:c3:d9:7b:be:56:89:18:2b:15: 79:18:c4:16:99:d2:62:3a:92:51:d3:e9:1a:6a:90: 02:62:29:c8:6b:e0:11:ce:78:5f:66:e0:89:8a:34: 6c:0f:7e:22:86:72:10:07:f6:4d:92:01:be:39:63: 9d:18:2e:f5:b8:b7:64:89:05:04:e9:f5:4e:64:b0: 22:b8:d2:40:c9:ee:64:60:7e:41:2d:ea:27:57:50: 64:22:0d:dd:7c:45:93:07:75:30:09:d8:ee:bf:a2: cc:23:f0:1c:ac:a1:23:09:32:4b:43:31:18:f2:a2: b1:95:29:87:80:37:7d:ee:88:67:85:9a:dc:f3:fa: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:89:5C:1B:48:B7:D3:FB:36:E4:EC:C2:28:9E:D2:E2:CC:8B:11:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl X509v3 Authority Key Identifier: keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer sbgp-ipAddrBlock: critical IPv4: 206.71.154.0/23 208.78.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7b:51:43:f5:61:1f:e5:66:95:7e:d5:f1:a7:b7:d2:dd:77: 63:19:3c:0c:b2:79:ac:c9:7b:cf:8d:93:9b:3f:f3:13:2f:ed: b7:42:80:39:05:b0:fb:d8:84:c8:44:75:1d:ab:45:a2:e7:ec: 6a:9f:17:3c:78:df:a5:0b:96:81:38:47:bd:ca:3b:08:68:41: 67:e0:fc:f1:e8:c4:b4:5d:51:51:95:d6:86:07:5b:e6:a6:20: 50:85:05:78:ef:81:e6:ac:55:34:2e:8e:08:4f:06:1a:ba:fa: 76:e7:01:b2:f9:f1:81:fd:6f:bb:12:25:fd:40:90:4b:3b:96: 01:bd:d0:e6:7d:0c:cc:36:45:39:75:4d:4a:53:02:0d:87:75: 52:04:06:9b:05:1c:ae:7d:f0:c0:8b:3c:d7:a2:5b:79:9c:d3: 85:a6:90:2e:2b:8d:d8:5d:d9:5e:86:9a:ad:39:62:9b:73:b5: 75:07:75:e9:4e:41:e9:99:d7:1c:b5:ac:4c:0d:e5:6e:99:65: 98:7e:3f:a7:35:fb:80:59:30:01:fa:cc:99:2b:55:b4:7b:e0: 36:f9:f6:ef:cd:dc:be:b8:fe:cf:a8:b4:cd:86:b4:c0:c1:9b: c1:37:f8:56:bb:d0:81:87:4a:fa:fd:58:9d:3d:4d:cb:c0:4f: 9f:c0:36:5f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoA2r7/ZrGoAGPngQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRlZjlhZTItZjAyNy00MDI4LWE3MDUtZGIxZTM0NjNh MzgyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk Y2U4YzY3MjEtMmJlNy00YzljLTk1NTAtYmU2YmFjOGNhNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7ynZdXqWJm5Dx9EKhGPLilcV210yO5Qnbx+ bp9FzPfvAKtKsozGD0pciFL/RNlaugkMC73UUTZYoEwUC5fBkCNL8keWbTHew9TK anWyLLVUiCenRpxz5Hq4b6cm8wjU4tXXXPXVGTART5bqC36ZAg0OktEJr999K1oI TZLD2Xu+VokYKxV5GMQWmdJiOpJR0+kaapACYinIa+ARznhfZuCJijRsD34ihnIQ B/ZNkgG+OWOdGC71uLdkiQUE6fVOZLAiuNJAye5kYH5BLeonV1BkIg3dfEWTB3Uw Cdjuv6LMI/AcrKEjCTJLQzEY8qKxlSmHgDd97ohnhZrc8/oPKQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHeJXBtIt9P7NuTswiie0uLMixErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVm OWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFlMzQ2M2EzODIvODFiMWRjYzYtMjRlNC0z YTZmLTgwZjMtNmU5YmNkN2ZhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjRlZjlhZTItZjAyNy00MDI4LWE3 MDUtZGIxZTM0NjNhMzgyL2Y0ZWY5YWUyLWYwMjctNDAyOC1hNzA1LWRiMWUzNDYz YTM4Mi5jcmwwHwYDVR0jBBgwFoAUeENjXzX3pbZuOXvTYhshzKLlkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVmOWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFl MzQ2M2EzODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzkeaAwQD 0E7QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGF7UUP1YR/lZpV+1fGnt9Ldd2MZPAyyeazJe8+Nk5s/8xMv 7bdCgDkFsPvYhMhEdR2rRaLn7GqfFzx436ULloE4R73KOwhoQWfg/PHoxLRdUVGV 1oYHW+amIFCFBXjvgeasVTQujghPBhq6+nbnAbL58YH9b7sSJf1AkEs7lgG90OZ9 DMw2RTl1TUpTAg2HdVIEBpsFHK598MCLPNeiW3mc04WmkC4rjdhd2V6Gmq05Yptz tXUHdelOQemZ1xy1rEwN5W6ZZZh+P6c1+4BZMAH6zJkrVbR74Db59u/N3L64/s+o tM2GtMDBm8E3+Fa70IGHSvr9WJ09TcvAT5/ANl8= -----END CERTIFICATE-----Generated at Sun Jun 15 13:47:22 2025 by rpki-client