$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa File: b08285ee-0972-329c-81d0-7964b995c67b.roa (raw, json) Hash identifier: 1eaa0JaLPc90Uh2YjGrir20LcKjE14XeSEA5CJLUs88= Subject key identifier: 2F:74:54:CD:11:78:3C:80:F4:99:A9:4F:9D:7A:65:11:87:ED:FD:86 Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28 Certificate serial: 010D0C9F4328584A00DAC6BA9DF6D669672CF080 Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 376 IP address blocks: 206.167.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c6:ba:9d:f6:d6:69:67:2c:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=dab0b383-f42d-477b-aef5-92a9f9dc5ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c1:69:81:21:ef:51:c3:52:18:c6:fa:e9:e1: e3:8e:97:6c:06:3d:2d:1f:75:c8:a1:58:44:2d:21: 14:ab:55:13:6a:8d:29:9b:3a:1c:78:70:7a:31:a3: 66:1b:27:de:20:4a:a5:9c:d8:fb:fd:fc:20:8b:63: 00:fe:bc:1d:44:5c:2f:72:a6:8a:05:a3:e1:56:1b: a3:ca:84:ed:7c:58:c8:e1:57:9c:68:b3:4c:4e:eb: 6f:0c:29:2a:d0:98:92:92:fc:55:97:51:96:8a:5b: 47:53:48:2f:94:42:fc:b6:fb:7a:65:a5:cf:20:1e: a9:0e:62:b6:4f:38:ad:d6:ef:3c:31:39:b3:23:26: e2:77:1f:d0:00:dd:08:6a:70:92:2e:66:75:df:e4: 39:9b:35:a5:eb:b8:f4:ba:f0:98:93:dd:14:be:26: cd:af:fe:93:09:79:dd:aa:df:e1:58:dd:ae:2a:a5: 58:d0:cf:18:0f:c1:c4:6b:ab:75:41:27:52:3d:9f: fd:58:a6:f1:f6:9d:bd:60:c7:4c:7f:94:75:b3:b4: 30:be:b6:8e:4d:b0:29:0f:f0:c9:5d:0c:d7:7b:b6: 3c:88:77:47:92:46:0e:74:17:0f:00:49:6f:01:58: f8:9d:79:11:31:05:0e:ca:c5:0b:5a:af:bd:4d:97: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:74:54:CD:11:78:3C:80:F4:99:A9:4F:9D:7A:65:11:87:ED:FD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl X509v3 Authority Key Identifier: keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer sbgp-ipAddrBlock: critical IPv4: 206.167.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b8:dd:56:aa:ca:b3:f3:a2:15:17:f9:bc:78:7e:c4:27:d9: aa:25:aa:83:8c:d3:15:32:72:74:03:be:98:b0:30:d7:db:82: d7:de:54:09:4a:6b:42:09:dd:2b:b9:b2:9e:33:a5:d7:66:0d: 20:c3:b0:6e:60:ed:30:0a:76:62:37:9c:bb:0b:b8:d0:ad:b8: 11:e2:77:c2:d8:b2:47:06:de:38:9e:cf:b8:d4:ed:ab:b1:ec: 64:9c:cc:11:82:b3:60:39:ac:16:43:87:39:78:0e:a9:fb:c6: cf:18:4f:58:b5:9c:14:cd:be:7e:84:75:4a:99:3a:d8:33:57: df:72:1b:dd:20:aa:37:1e:98:37:83:fb:e8:8d:4b:78:ba:e2: 8a:e0:a0:78:92:6b:6f:d9:87:a1:d3:da:6a:b5:e6:88:d3:8c: 27:78:c5:ef:5c:ae:d1:20:20:2d:89:ef:78:5e:b9:8b:83:b7: ee:74:14:be:a3:bb:13:49:51:24:0a:1f:17:eb:a1:9f:65:41: 35:bd:a6:85:b2:14:f6:95:f7:aa:83:1c:2e:a2:f0:72:5b:71: 25:d0:f1:b9:34:46:59:5b:8b:03:72:c3:6b:b1:09:a5:ad:91: 5c:53:98:1f:6d:e6:0a:a0:6f:5b:fd:a9:29:28:9c:a1:39:bd: bc:e2:38:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sa6nfbWaWcs8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViMmFhMDMtZGU1YS00N2E5LWEzODEtY2MyYjI3NDUx YzI4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZGFiMGIzODMtZjQyZC00NzdiLWFlZjUtOTJhOWY5ZGM1ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisFpgSHvUcNSGMb66eHjjpdsBj0tH3XIoVhE LSEUq1UTao0pmzoceHB6MaNmGyfeIEqlnNj7/fwgi2MA/rwdRFwvcqaKBaPhVhuj yoTtfFjI4VecaLNMTutvDCkq0JiSkvxVl1GWiltHU0gvlEL8tvt6ZaXPIB6pDmK2 Tzit1u88MTmzIybidx/QAN0IanCSLmZ13+Q5mzWl67j0uvCYk90UvibNr/6TCXnd qt/hWN2uKqVY0M8YD8HEa6t1QSdSPZ/9WKbx9p29YMdMf5R1s7QwvraOTbApD/DJ XQzXe7Y8iHdHkkYOdBcPAElvAVj4nXkRMQUOysULWq+9TZfe4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC90VM0ReDyA9JmpT516ZRGH7f2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIy YWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0NTFjMjgvYjA4Mjg1ZWUtMDk3Mi0z MjljLTgxZDAtNzk2NGI5OTVjNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjViMmFhMDMtZGU1YS00N2E5LWEz ODEtY2MyYjI3NDUxYzI4LzI1YjJhYTAzLWRlNWEtNDdhOS1hMzgxLWNjMmIyNzQ1 MWMyOC5jcmwwHwYDVR0jBBgwFoAUWwvbffpjXBHQ2Dq7nfM1nr6lKw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJi Mjc0NTFjMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO43VaqyrPzohUX+bx4fsQn2aolqoOM0xUycnQDvpiwMNfbgtfeVAlK a0IJ3Su5sp4zpddmDSDDsG5g7TAKdmI3nLsLuNCtuBHid8LYskcG3jiez7jU7aux 7GSczBGCs2A5rBZDhzl4Dqn7xs8YT1i1nBTNvn6EdUqZOtgzV99yG90gqjcemDeD ++iNS3i64orgoHiSa2/Zh6HT2mq15ojTjCd4xe9crtEgIC2J73heuYuDt+50FL6j uxNJUSQKHxfroZ9lQTW9poWyFPaV96qDHC6i8HJbcSXQ8bk0RllbiwNyw2uxCaWt kVxTmB9t5gqgb1v9qSkonKE5vbziOHY= -----END CERTIFICATE-----Generated at Mon Jun 16 22:50:57 2025 by rpki-client