$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa File: debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa (raw, json) Hash identifier: SN49YwyGtPRZTQEJNXWkK8JdntOtMo2YhIEXrfmMKVM= Subject key identifier: 35:AD:C1:80:2F:FA:D4:19:A7:D4:2D:15:96:9F:DC:BA:BB:38:60:3E Certificate issuer: /CN=109733f6-670d-4e02-a6e2-403ebf727263 Certificate serial: 010D0C9F43285849F17FC08D22C505A4DE87F180 Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 13494 IP address blocks: 206.220.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c0:8d:22:c5:05:a4:de:87:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=1e4d9735-7ec2-4c94-acb2-3b653400a53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:f3:fe:f0:57:d9:be:41:b7:49:39:b4:10: 8e:ba:74:2f:23:c3:ec:89:c3:bc:06:e9:e4:2c:08: d9:af:ec:13:7b:af:3a:cd:8a:b2:90:4a:62:0d:69: fe:59:ad:a1:84:e4:b5:61:84:70:c5:3c:a2:2c:de: 92:18:36:ef:1e:86:cc:7f:86:59:39:6f:13:e3:66: b3:f0:ed:7c:ec:a0:df:1d:51:00:4d:53:68:e4:7e: 52:03:62:5d:19:ad:59:db:a6:7d:75:a9:f1:97:02: 9c:a4:64:aa:53:eb:f2:35:e6:e4:c0:12:f2:8e:f3: d9:05:34:f6:ac:39:3a:dc:65:f0:a8:da:8f:00:de: 5f:c3:d8:f6:4a:60:f6:b3:92:ba:37:38:70:4b:4b: c3:2e:b3:2a:7e:67:c7:82:e3:0d:4e:97:6b:43:84: 25:39:e7:6c:2a:cc:28:03:8a:30:e5:ed:30:e4:80: d7:fc:c1:a8:70:c7:8c:1e:17:2d:75:d3:8b:d8:c1: b8:84:d5:71:db:1f:d0:4c:87:fc:04:41:20:aa:81: dd:ff:4c:eb:05:a1:b7:af:2f:16:b6:fd:64:33:67: cd:e5:2f:c3:bd:16:29:64:d8:5f:07:41:53:7e:c7: 5f:d1:6c:bb:39:58:9b:1f:f1:15:09:c0:5e:37:16: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AD:C1:80:2F:FA:D4:19:A7:D4:2D:15:96:9F:DC:BA:BB:38:60:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl X509v3 Authority Key Identifier: keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer sbgp-ipAddrBlock: critical IPv4: 206.220.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:70:03:3f:94:0b:74:ce:33:da:eb:6b:95:83:5a:10:96:47: 88:82:e0:f1:5c:29:41:39:ac:2a:b5:fe:0e:22:52:bf:26:00: 44:a9:3c:86:a8:1f:42:e3:f8:12:fa:0c:94:19:35:73:39:9c: 75:45:14:a0:4b:e0:f3:af:4b:bc:87:c7:61:0b:5f:44:f2:5b: 46:f0:17:68:c7:58:8f:a3:e6:a0:03:01:5a:c8:68:64:fe:53: 9e:bc:52:75:b5:ee:b7:55:9e:87:6b:5c:4c:7b:e6:1d:0b:97: d2:93:70:8d:e4:d7:97:14:2c:6a:b0:c5:0e:3e:57:e8:7d:ed: 82:74:f2:c7:79:a2:e8:40:79:b2:95:70:eb:2d:fc:0d:9c:56: 83:72:89:4e:a8:a1:1d:c5:bb:88:8d:94:9e:9d:7b:ef:e0:c9: be:8c:ee:b8:69:e4:61:3a:07:96:c3:64:b5:42:8b:98:fa:0c: 48:7c:a5:97:62:01:d8:42:5a:5d:63:45:f6:68:eb:d2:ec:ee: 32:79:2d:ab:11:66:89:aa:99:04:84:dd:fd:7b:39:75:42:5a: d2:b4:c6:c7:db:bf:6c:9c:8d:d9:db:c1:54:d3:9c:40:20:6c: ee:e6:ff:24:d8:69:8f:bd:3b:67:ff:15:e7:ea:a0:5a:1b:09: f8:e6:0d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8CNIsUFpN6H8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5NzMzZjYtNjcwZC00ZTAyLWE2ZTItNDAzZWJmNzI3 MjYzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MWU0ZDk3MzUtN2VjMi00Yzk0LWFjYjItM2I2NTM0MDBhNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfTz/vBX2b5Bt0k5tBCOunQvI8PsicO8Bunk LAjZr+wTe686zYqykEpiDWn+Wa2hhOS1YYRwxTyiLN6SGDbvHobMf4ZZOW8T42az 8O187KDfHVEATVNo5H5SA2JdGa1Z26Z9danxlwKcpGSqU+vyNebkwBLyjvPZBTT2 rDk63GXwqNqPAN5fw9j2SmD2s5K6NzhwS0vDLrMqfmfHguMNTpdrQ4QlOedsKswo A4ow5e0w5IDX/MGocMeMHhctddOL2MG4hNVx2x/QTIf8BEEgqoHd/0zrBaG3ry8W tv1kM2fN5S/DvRYpZNhfB0FTfsdf0Wy7OVibH/EVCcBeNxZ5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWtwYAv+tQZp9QtFZaf3Lq7OGA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3 MzNmNi02NzBkLTRlMDItYTZlMi00MDNlYmY3MjcyNjMvZGViZjE1Y2UtZDVkZC0z N2M0LTlhYTYtYTVmZDMwZDJhZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5NzMzZjYtNjcwZC00ZTAyLWE2 ZTItNDAzZWJmNzI3MjYzLzEwOTczM2Y2LTY3MGQtNGUwMi1hNmUyLTQwM2ViZjcy NzI2My5jcmwwHwYDVR0jBBgwFoAU6VzkBNOP6K017vlgU1aSnQ7BeSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3MzNmNi02NzBkLTRlMDItYTZlMi00MDNl YmY3MjcyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1wAz+UC3TOM9rra5WDWhCWR4iC4PFcKUE5rCq1/g4iUr8mAESpPIao H0Lj+BL6DJQZNXM5nHVFFKBL4POvS7yHx2ELX0TyW0bwF2jHWI+j5qADAVrIaGT+ U568UnW17rdVnodrXEx75h0Ll9KTcI3k15cULGqwxQ4+V+h97YJ08sd5ouhAebKV cOst/A2cVoNyiU6ooR3Fu4iNlJ6de+/gyb6M7rhp5GE6B5bDZLVCi5j6DEh8pZdi AdhCWl1jRfZo69Ls7jJ5LasRZomqmQSE3f17OXVCWtK0xsfbv2ycjdnbwVTTnEAg bO7m/yTYaY+9O2f/FefqoFobCfjmDTY= -----END CERTIFICATE-----Generated at Sun Jun 15 11:53:12 2025 by rpki-client