$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/5a8be4c2-272a-3341-81cf-a87389955f50.roa File: 5a8be4c2-272a-3341-81cf-a87389955f50.roa (raw, json) Hash identifier: 4NEmkxzdmZwKNp0ZKSC9LExGzYhseZN4c/53w5fkPfM= Subject key identifier: 3B:D7:D7:93:83:37:AD:2D:58:4C:57:5E:F4:91:18:A2:E1:9C:DD:5B Certificate issuer: /CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc Certificate serial: 010D0C9F43285849FCAA7C64A0DC5A5BA3E94780 Authority key identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/5a8be4c2-272a-3341-81cf-a87389955f50.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 14726 IP address blocks: 206.168.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7c:64:a0:dc:5a:5b:a3:e9:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=1bd277f2-ad83-4c0e-a8ca-8c37ee39c68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:cf:74:fe:82:a3:5d:bb:32:0f:88:99:07: 65:79:5b:9d:82:17:6e:5b:32:c4:e0:31:48:89:e4: 88:b8:5b:f3:07:87:26:68:d0:bd:9e:b2:13:d0:2a: fb:bd:83:54:0a:fa:fc:f3:aa:bf:20:82:12:c2:97: 27:cc:d3:dd:5b:76:67:63:be:35:83:b3:50:85:35: 96:99:26:ec:4a:83:3b:f7:83:5a:04:96:10:29:bc: 84:b7:2f:eb:e5:7b:b7:e8:bd:3c:d4:9c:71:b6:c2: 53:37:31:6d:a0:3e:7c:72:23:27:fa:3e:e0:15:50: 1c:0b:68:65:db:21:1a:b0:a9:39:d2:97:68:86:82: 8c:7b:f0:06:c7:3d:a5:28:67:40:d7:37:38:c0:be: cc:bb:e9:2a:1f:0a:93:5f:aa:98:ef:a6:1a:ba:b9: 27:cd:88:9e:ff:9b:82:05:af:9d:f0:0b:75:e8:55: cf:89:70:2a:cd:ca:13:01:ca:c4:14:cd:79:77:47: cc:be:fc:d0:4f:27:ea:0e:21:57:42:cc:dd:0a:ca: 5b:5c:a8:a7:b7:5d:85:a9:09:c9:e3:b4:78:42:0c: 22:24:e3:1e:e0:0d:b2:ea:e2:0e:d6:a4:0a:1d:86: 69:bb:2f:e6:13:6f:f3:6f:85:06:ea:12:cc:ee:71: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:D7:93:83:37:AD:2D:58:4C:57:5E:F4:91:18:A2:E1:9C:DD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/5a8be4c2-272a-3341-81cf-a87389955f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.crl X509v3 Authority Key Identifier: keyid:71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer sbgp-ipAddrBlock: critical IPv4: 206.168.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8c:e2:de:ed:57:6a:06:a5:03:e4:d0:6a:4a:72:2c:5c:47: 56:70:30:c3:a4:a7:bc:93:8f:e1:68:b2:68:cc:6c:39:9b:90: 32:90:5a:79:e5:49:6a:60:14:c6:f5:92:d0:e7:2a:95:27:23: c5:31:04:92:07:0b:33:55:5c:b9:b6:bd:b1:49:57:01:e3:42: 43:e1:f6:1f:3d:2c:d6:d4:cb:a8:b8:7d:94:b9:79:68:05:81: 16:ee:02:9b:8b:4d:bb:b6:6b:a3:18:74:46:ca:e5:0a:50:de: 6e:6c:bb:9d:4e:ae:39:9a:7b:d3:2a:1b:21:15:ac:11:65:36: d9:27:1c:5c:c9:39:b0:3d:ba:2c:66:1b:8e:aa:7c:0e:6a:36: 8f:33:47:82:f1:77:32:5e:6e:f4:95:eb:87:19:e1:c3:6d:1b: 36:10:ba:c7:53:81:d6:33:4a:7d:0f:25:9b:e8:2c:8b:dc:bd: 53:aa:37:b9:8e:24:fd:82:68:7e:54:53:47:f2:ad:27:78:0d: 53:93:7f:66:4a:c2:b5:66:5c:f1:ca:9c:5b:32:e7:a3:de:28: 64:92:80:64:8d:a7:92:3b:da:88:43:e6:41:a2:fb:a6:aa:e7: 10:20:e1:3b:a3:69:2e:9d:83:9e:ad:dc:bf:7c:9d:c8:69:a9: 17:43:b3:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnxkoNxaW6PpR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRkNzBlMDYtM2FhMC00NTM2LWEzYzctZWUyN2E4ZGRl NWZjMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MWJkMjc3ZjItYWQ4My00YzBlLWE4Y2EtOGMzN2VlMzljNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mLPdP6Co127Mg+ImQdleVudghduWzLE4DFI ieSIuFvzB4cmaNC9nrIT0Cr7vYNUCvr886q/IIISwpcnzNPdW3ZnY741g7NQhTWW mSbsSoM794NaBJYQKbyEty/r5Xu36L081JxxtsJTNzFtoD58ciMn+j7gFVAcC2hl 2yEasKk50pdohoKMe/AGxz2lKGdA1zc4wL7Mu+kqHwqTX6qY76YaurknzYie/5uC Ba+d8At16FXPiXAqzcoTAcrEFM15d0fMvvzQTyfqDiFXQszdCspbXKint12FqQnJ 47R4QgwiJOMe4A2y6uIO1qQKHYZpuy/mE2/zb4UG6hLM7nGFywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvX15ODN60tWExXXvSRGKLhnN1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGQ3 MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3YThkZGU1ZmMvNWE4YmU0YzItMjcyYS0z MzQxLTgxY2YtYTg3Mzg5OTU1ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRkNzBlMDYtM2FhMC00NTM2LWEz YzctZWUyN2E4ZGRlNWZjLzA0ZDcwZTA2LTNhYTAtNDUzNi1hM2M3LWVlMjdhOGRk ZTVmYy5jcmwwHwYDVR0jBBgwFoAUcV2GtUGYTVFt6cBKmFr3iMZqJeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGQ3MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3 YThkZGU1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqi0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKM4t7tV2oGpQPk0GpKcixcR1ZwMMOkp7yTj+FosmjMbDmbkDKQWnnl SWpgFMb1ktDnKpUnI8UxBJIHCzNVXLm2vbFJVwHjQkPh9h89LNbUy6i4fZS5eWgF gRbuApuLTbu2a6MYdEbK5QpQ3m5su51Orjmae9MqGyEVrBFlNtknHFzJObA9uixm G46qfA5qNo8zR4LxdzJebvSV64cZ4cNtGzYQusdTgdYzSn0PJZvoLIvcvVOqN7mO JP2CaH5UU0fyrSd4DVOTf2ZKwrVmXPHKnFsy56PeKGSSgGSNp5I72ohD5kGi+6aq 5xAg4TujaS6dg56t3L98nchpqRdDs6Y= -----END CERTIFICATE-----Generated at Sun Jun 15 23:03:07 2025 by rpki-client